Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb6193d-78a0-366a-8f79-a04e4d8fae39.roa
File:                     4fb6193d-78a0-366a-8f79-a04e4d8fae39.roa (raw, json)
Hash identifier:          nALl16qwcBd1oL0vI+js+pZHjm/rjLOPfX2+XcEOh2Q=
Subject key identifier:   C0:89:3A:F2:ED:00:26:D8:D7:DD:21:22:6B:65:28:32:72:62:37:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F10379F041345BA1ED9AEE700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb6193d-78a0-366a-8f79-a04e4d8fae39.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396564
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9f:04:13:45:ba:1e:d9:ae:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=4dafa6d0-bb9a-4bf4-8c4f-4e295941adea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:2f:14:dd:5d:29:13:20:07:5f:2d:09:25:
                    bd:79:70:64:a0:3d:29:97:71:4f:21:97:46:32:3a:
                    a3:d8:38:2e:70:b9:fc:9e:fe:6e:fd:06:ec:8c:80:
                    cc:4e:d4:35:ce:73:a9:50:0b:c8:41:c1:a1:27:61:
                    a6:21:72:53:8a:53:b8:69:4a:20:fa:bf:0e:1b:40:
                    0b:0b:a5:28:f9:0f:52:e0:81:9e:dc:68:97:f0:cb:
                    bc:cb:a5:c0:b1:99:32:92:15:91:e0:ca:6a:c7:e0:
                    26:59:60:68:01:e9:f6:5d:7a:4b:8b:64:58:52:6f:
                    5e:52:d0:84:4d:c0:d0:0b:5d:d8:06:d5:29:59:24:
                    88:35:3f:2c:d9:82:30:7a:61:bc:f3:d0:5e:a9:2b:
                    28:d5:75:e4:6b:8c:eb:61:ae:e9:ca:ce:52:02:9b:
                    fd:70:b2:43:70:67:81:56:52:a9:e2:7b:1e:a8:10:
                    4d:7b:d7:71:a0:c1:04:82:38:7c:f0:35:2e:db:02:
                    ef:47:8c:8d:bf:01:9a:8e:87:80:78:e2:48:35:0e:
                    ec:79:51:12:20:28:63:2d:d2:53:f2:73:17:a6:92:
                    65:14:55:57:f8:c5:d1:9d:af:22:27:6a:10:5c:6d:
                    75:e8:8d:a7:74:b3:4d:72:05:cb:ed:62:79:b1:6d:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:89:3A:F2:ED:00:26:D8:D7:DD:21:22:6B:65:28:32:72:62:37:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fb6193d-78a0-366a-8f79-a04e4d8fae39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:92:be:30:94:7b:cb:5a:14:88:3b:8a:4b:a2:6e:a7:12:50:
         78:e5:66:bc:3c:3e:bc:3e:ec:a3:d6:1a:dc:98:4b:d2:5d:4e:
         61:48:ad:ef:e5:aa:1a:5a:93:99:76:9d:0f:f5:96:3f:5a:94:
         50:94:77:32:c4:7d:ae:00:d9:54:cb:9d:8b:52:37:a0:bb:1c:
         f4:93:d8:0b:44:b1:e9:46:c7:bc:5e:3b:6f:6c:dc:5c:ce:f5:
         7d:1b:87:f9:43:7c:46:09:68:73:5d:ba:52:46:ec:ca:23:4a:
         1b:f3:29:6d:59:b3:8c:df:37:96:3a:e0:00:9e:c6:1a:ec:a8:
         f9:d6:eb:1e:59:3f:1b:4e:b9:e5:42:38:47:ee:3f:0a:0b:47:
         27:c4:4b:a7:64:9c:62:92:53:7c:a1:01:1e:d6:af:a3:e4:00:
         6f:b3:7a:6b:9a:16:c1:73:aa:24:af:4e:64:d7:fd:fa:88:b9:
         bc:63:76:72:d3:df:59:c1:10:dd:df:f9:33:33:19:23:10:f3:
         56:57:e7:e7:eb:a3:dc:bb:f6:ab:0e:0b:61:26:36:7f:de:5f:
         8e:97:c8:b7:49:3e:03:a2:7c:37:b3:8f:fb:bc:53:8d:22:13:
         c5:2c:b5:c7:26:49:05:95:d8:52:15:79:c3:ec:37:32:fb:af:
         d0:8b:b4:5d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8QN58EE0W6Htmu5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NGRhZmE2ZDAtYmI5YS00YmY0LThjNGYtNGUyOTU5NDFhZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNwvFN1dKRMgB18tCSW9eXBkoD0pl3FPIZdG
Mjqj2DgucLn8nv5u/QbsjIDMTtQ1znOpUAvIQcGhJ2GmIXJTilO4aUog+r8OG0AL
C6Uo+Q9S4IGe3GiX8Mu8y6XAsZkykhWR4Mpqx+AmWWBoAen2XXpLi2RYUm9eUtCE
TcDQC13YBtUpWSSINT8s2YIwemG889BeqSso1XXka4zrYa7pys5SApv9cLJDcGeB
VlKp4nseqBBNe9dxoMEEgjh88DUu2wLvR4yNvwGajoeAeOJINQ7seVESIChjLdJT
8nMXppJlFFVX+MXRna8iJ2oQXG116I2ndLNNcgXL7WJ5sW3MYwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMCJOvLtACbY190hImtlKDJyYjfdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGZiNjE5M2QtNzhhMC0z
NjZhLThmNzktYTA0ZTRkOGZhZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAUkr4wlHvLWhSIO4pLom6nElB45Wa8PD68Puyj
1hrcmEvSXU5hSK3v5aoaWpOZdp0P9ZY/WpRQlHcyxH2uANlUy52LUjeguxz0k9gL
RLHpRse8XjtvbNxczvV9G4f5Q3xGCWhzXbpSRuzKI0ob8yltWbOM3zeWOuAAnsYa
7Kj51useWT8bTrnlQjhH7j8KC0cnxEunZJxiklN8oQEe1q+j5ABvs3prmhbBc6ok
r05k1/36iLm8Y3Zy099ZwRDd3/kzMxkjEPNWV+fn66Pcu/arDgthJjZ/3l+Ol8i3
ST4Donw3s4/7vFONIhPFLLXHJkkFldhSFXnD7Dcy+6/Qi7Rd
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:05:38 2026 by rpki-client