Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3095c884-381d-3900-ba50-668625d28e99.roa
File:                     3095c884-381d-3900-ba50-668625d28e99.roa (raw, json)
Hash identifier:          CWE2YjbCrqyLI0FPibb6c6niWBaOFQQZp1ihKiRY2jo=
Subject key identifier:   97:6C:A9:DC:20:58:3B:2F:D9:82:81:C8:FA:D9:2D:12:85:40:12:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B211FFDA4EDE5AC2049D82
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3095c884-381d-3900-ba50-668625d28e99.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     397208
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:11:ff:da:4e:de:5a:c2:04:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=9113fca9-4cb8-4ac7-998f-31d66565c1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:8d:e0:25:26:40:79:49:7a:d6:86:bd:ae:
                    c1:90:e1:32:06:e4:a4:9d:fc:fe:a6:a3:3f:50:9a:
                    7b:b4:40:dc:74:4f:21:75:26:4a:56:e5:95:d7:ad:
                    0d:03:93:8a:d5:64:f0:e3:1d:04:02:33:af:89:8b:
                    b4:38:d0:ae:ec:57:5a:48:53:2b:bb:7a:40:23:2f:
                    6b:55:7e:41:52:7b:eb:16:04:07:78:84:ac:85:dc:
                    46:61:ef:74:fd:2b:58:12:89:a8:ca:ef:33:30:5f:
                    99:d0:d7:4c:9e:72:6c:e4:df:7b:0f:5b:af:da:cf:
                    2c:40:f3:cb:31:5c:02:d0:30:29:9b:cc:f3:75:54:
                    44:82:e0:8f:97:16:cf:8e:64:f0:47:69:c6:2c:6e:
                    18:ab:b2:57:3d:b9:53:1e:c5:a0:fe:ea:fa:05:45:
                    9c:10:36:5b:ba:24:48:ae:7e:8e:de:ec:9a:80:8f:
                    5c:de:ff:27:80:2c:f9:54:72:94:27:d8:99:a2:88:
                    ca:4a:3d:88:db:ef:95:ac:e6:66:67:8c:06:c7:b6:
                    66:41:e7:9c:ae:c4:74:21:d5:10:fd:ab:44:aa:6c:
                    c0:2e:77:89:77:00:bc:e8:c7:cd:67:8e:53:f5:9b:
                    4e:c8:b3:25:7c:6f:f7:68:e1:c0:b6:fe:c5:be:66:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6C:A9:DC:20:58:3B:2F:D9:82:81:C8:FA:D9:2D:12:85:40:12:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3095c884-381d-3900-ba50-668625d28e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:47:1e:54:e4:43:17:3b:49:e9:e1:37:6b:5f:8a:1f:59:fa:
         af:15:b3:f2:9d:ad:87:ce:49:a0:06:dd:b5:76:7a:00:3f:63:
         3a:38:20:9a:1e:ac:f2:41:95:3c:c2:1b:87:7b:c3:77:60:10:
         ac:f8:9d:86:66:38:53:cb:01:a6:a5:f3:c4:70:ca:d7:ce:19:
         ae:8f:ff:59:2b:2a:c8:91:a9:2a:dc:b1:54:ba:11:db:13:28:
         3b:15:09:79:88:ff:27:43:45:4c:2e:4f:e3:0c:f2:e3:88:20:
         3c:79:04:0d:83:64:1a:94:94:f3:b4:ee:09:1a:6f:6b:f1:70:
         b7:b5:ad:e5:e9:c8:ff:d6:48:17:40:4a:a6:5a:50:8b:73:8b:
         c8:96:1c:b7:b0:dc:cd:45:e1:3a:58:35:26:5c:b0:87:94:50:
         a2:3f:d5:82:9e:31:77:85:98:c5:ec:41:41:07:d4:78:f2:2f:
         9d:db:c9:85:cd:1a:f5:20:a2:65:fc:79:5f:f7:5d:0d:01:53:
         87:01:f7:ca:e6:b1:90:1b:a5:47:da:d5:b1:0e:7a:73:64:0f:
         33:be:e9:66:71:ac:c5:a2:8d:39:c9:ad:41:e1:f7:a5:2c:f1:
         ec:c9:69:69:8e:40:ae:6a:95:87:7d:e2:b2:55:a9:2a:46:9f:
         fc:4d:3c:09
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71shH/2k7eWsIEnYIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTExM2ZjYTktNGNiOC00YWM3LTk5OGYtMzFkNjY1NjVjMWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeuN4CUmQHlJetaGva7BkOEyBuSknfz+pqM/
UJp7tEDcdE8hdSZKVuWV160NA5OK1WTw4x0EAjOviYu0ONCu7FdaSFMru3pAIy9r
VX5BUnvrFgQHeISshdxGYe90/StYEomoyu8zMF+Z0NdMnnJs5N97D1uv2s8sQPPL
MVwC0DApm8zzdVREguCPlxbPjmTwR2nGLG4Yq7JXPblTHsWg/ur6BUWcEDZbuiRI
rn6O3uyagI9c3v8ngCz5VHKUJ9iZoojKSj2I2++VrOZmZ4wGx7ZmQeecrsR0IdUQ
/atEqmzALneJdwC86MfNZ45T9ZtOyLMlfG/3aOHAtv7FvmYKFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJdsqdwgWDsv2YKByPrZLRKFQBJdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA5NWM4ODQtMzgxZC0z
OTAwLWJhNTAtNjY4NjI1ZDI4ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCIRx5U5EMXO0np4TdrX4ofWfqvFbPyna2Hzkmg
Bt21dnoAP2M6OCCaHqzyQZU8whuHe8N3YBCs+J2GZjhTywGmpfPEcMrXzhmuj/9Z
KyrIkakq3LFUuhHbEyg7FQl5iP8nQ0VMLk/jDPLjiCA8eQQNg2QalJTztO4JGm9r
8XC3ta3l6cj/1kgXQEqmWlCLc4vIlhy3sNzNReE6WDUmXLCHlFCiP9WCnjF3hZjF
7EFBB9R48i+d28mFzRr1IKJl/Hlf910NAVOHAffK5rGQG6VH2tWxDnpzZA8zvulm
cazFoo05ya1B4felLPHsyWlpjkCuapWHfeKyVakqRp/8TTwJ
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:05:05 2026 by rpki-client