Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb3d1b-962d-32e7-8020-e6cf08934b26.roa
File:                     66bb3d1b-962d-32e7-8020-e6cf08934b26.roa (raw, json)
Hash identifier:          67Rf3rcG2X3siiniqTFrYZ9A4KTz3Rafx8Dbn1I9KA8=
Subject key identifier:   FE:15:4B:80:AB:5D:F6:F9:65:60:68:43:87:65:A3:1B:B7:04:95:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B212AC47D85A9CF0127100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb3d1b-962d-32e7-8020-e6cf08934b26.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:12:ac:47:d8:5a:9c:f0:12:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=02df33c1-1501-4a84-b454-8c4c1dbfb404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:06:31:62:2d:59:1e:7d:b2:8f:95:b4:b9:
                    ec:8f:2f:e5:e8:a2:6f:fe:43:86:0b:84:a3:2c:bd:
                    f1:8b:c8:1f:ed:51:25:fe:45:9b:28:74:08:5c:8b:
                    6f:9d:cc:6b:db:c4:d4:3c:4d:f0:90:74:06:db:ee:
                    16:af:9c:55:ac:15:83:a7:70:a1:fa:d9:20:6a:a5:
                    c2:c5:53:5c:34:16:ee:e3:41:67:b3:26:53:45:ec:
                    64:44:e8:7a:a2:02:b2:64:5c:e1:9a:88:31:4c:9e:
                    23:ce:d0:ef:24:e8:6c:39:78:bd:08:53:61:4b:d0:
                    9b:06:35:19:95:2a:08:88:39:2d:99:09:20:6f:27:
                    e1:26:e1:c4:f0:b2:44:65:68:52:87:c3:75:9f:5a:
                    3e:81:45:4d:3a:e9:90:23:f6:61:ea:e8:b5:4a:af:
                    3e:17:a0:40:99:49:10:bd:5c:85:e8:20:29:ab:bc:
                    32:9d:dc:a7:2e:1c:25:3f:7e:84:0b:85:e0:68:57:
                    56:0a:08:a2:67:06:1d:7b:ed:20:82:a5:05:a0:66:
                    0f:a3:65:5a:19:4a:8f:07:af:bd:28:69:04:70:33:
                    5a:0c:14:49:b8:25:6d:2e:25:cc:d6:8f:e2:8f:7c:
                    83:66:5a:33:92:e6:f6:74:2a:08:c9:c2:91:96:4b:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:4B:80:AB:5D:F6:F9:65:60:68:43:87:65:A3:1B:B7:04:95:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb3d1b-962d-32e7-8020-e6cf08934b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:f8:14:d3:8c:a4:94:a2:16:0b:39:6c:7f:15:b5:99:bb:
         9f:30:2f:9c:5e:8c:c4:2c:ea:c3:c6:6a:b3:4c:8a:ab:5d:12:
         e0:60:5a:97:22:bb:6b:df:ce:1d:d4:b3:61:f7:06:2f:30:e9:
         85:ab:84:8f:12:25:b0:6f:a3:96:91:c0:6d:a2:8d:62:3a:ba:
         55:6c:9d:01:16:ba:a8:b6:92:f0:ba:07:f5:c0:d4:49:0b:ca:
         72:77:21:31:11:99:4c:e5:ea:94:d6:c4:40:17:33:27:70:1d:
         66:4f:4f:8f:c3:00:27:03:54:31:69:c1:31:ac:f9:87:06:d6:
         9d:69:2a:ef:67:51:de:84:9d:a9:c7:12:ef:35:30:53:b0:1e:
         e4:59:c0:46:67:7b:a8:f8:94:ef:7f:ce:bd:c0:e2:30:2c:44:
         10:45:5a:6e:59:f1:2f:00:ef:f9:7e:93:71:26:78:9c:5a:81:
         31:28:9f:42:4f:88:2e:96:93:36:66:be:dc:ad:0f:3a:64:e3:
         d6:1a:af:fe:cb:18:d5:93:cd:65:29:09:ab:c5:4b:92:9b:76:
         c1:0f:ea:96:00:6f:5f:b4:aa:aa:8c:f2:49:6e:46:cf:ab:97:
         b2:31:da:5f:e7:57:0e:1b:bb:69:05:5c:ac:bd:8d:ca:b1:2a:
         69:90:f5:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE71shKsR9hanPAScQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDJkZjMzYzEtMTUwMS00YTg0LWI0NTQtOGM0YzFkYmZiNDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxIGMWItWR59so+VtLnsjy/l6KJv/kOGC4Sj
LL3xi8gf7VEl/kWbKHQIXItvncxr28TUPE3wkHQG2+4Wr5xVrBWDp3Ch+tkgaqXC
xVNcNBbu40FnsyZTRexkROh6ogKyZFzhmogxTJ4jztDvJOhsOXi9CFNhS9CbBjUZ
lSoIiDktmQkgbyfhJuHE8LJEZWhSh8N1n1o+gUVNOumQI/Zh6ui1Sq8+F6BAmUkQ
vVyF6CApq7wyndynLhwlP36EC4XgaFdWCgiiZwYde+0ggqUFoGYPo2VaGUqPB6+9
KGkEcDNaDBRJuCVtLiXM1o/ij3yDZlozkub2dCoIycKRlksr9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP4VS4CrXfb5ZWBoQ4dloxu3BJVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjZiYjNkMWItOTYyZC0z
MmU3LTgwMjAtZTZjZjA4OTM0YjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEed+BTTjKSUohYLOWx/FbWZu58wL5xejMQs6sPGarNMiqtdEuBg
Wpciu2vfzh3Us2H3Bi8w6YWrhI8SJbBvo5aRwG2ijWI6ulVsnQEWuqi2kvC6B/XA
1EkLynJ3ITERmUzl6pTWxEAXMydwHWZPT4/DACcDVDFpwTGs+YcG1p1pKu9nUd6E
nanHEu81MFOwHuRZwEZne6j4lO9/zr3A4jAsRBBFWm5Z8S8A7/l+k3EmeJxagTEo
n0JPiC6WkzZmvtytDzpk49Yar/7LGNWTzWUpCavFS5KbdsEP6pYAb1+0qqqM8klu
Rs+rl7Ix2l/nVw4bu2kFXKy9jcqxKmmQ9a4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:59 2026 by rpki-client