Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5a24e5-9147-337a-9cc1-87e3e66e2c3d.roa
File:                     6d5a24e5-9147-337a-9cc1-87e3e66e2c3d.roa (raw, json)
Hash identifier:          g1m3RDG+Q6+aN2YOusK+JCLP8gBRhhQqkWjifShywNE=
Subject key identifier:   CF:A9:B4:B3:E9:78:2D:80:93:BC:69:61:45:77:85:47:07:0F:6A:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD2F592E329CB21C7C5200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5a24e5-9147-337a-9cc1-87e3e66e2c3d.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396583
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:2f:59:2e:32:9c:b2:1c:7c:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=cbf009f5-d41b-46b3-86b5-93017135cf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:fb:a5:a7:26:b7:13:d5:a2:39:70:d8:85:
                    16:aa:a1:d1:71:a6:39:9f:7f:83:9b:08:c6:ee:47:
                    c5:44:17:19:c9:1e:f5:09:b3:49:ce:b3:63:12:e9:
                    45:d5:ed:c6:3d:da:0e:b0:a6:56:6b:3b:ec:29:9f:
                    21:9b:94:22:32:6b:d1:46:4a:1c:9e:95:0d:9a:08:
                    6f:06:35:db:68:81:d8:eb:ba:7b:49:20:20:9c:38:
                    59:3b:6a:05:9d:9d:56:3a:ae:ce:49:c6:32:c6:41:
                    0d:2a:91:40:77:cc:ab:74:6a:3a:49:66:7e:9b:b0:
                    0b:bf:1f:2b:db:54:23:e3:a5:c4:0f:29:e8:7b:66:
                    f1:ca:47:71:0f:01:88:db:13:ff:21:eb:88:70:16:
                    db:de:58:e5:fc:d5:41:8c:4a:62:57:02:3e:5c:b5:
                    c4:3b:da:bc:e0:1a:8d:44:3c:4d:e2:49:f3:01:e6:
                    b9:42:de:af:5a:65:a1:d0:53:c7:1b:49:9d:ba:72:
                    6e:b3:68:61:b9:49:61:5a:32:1a:e2:8b:1b:aa:e8:
                    af:50:53:60:43:c2:94:1b:3b:32:9d:ff:8b:dc:3e:
                    5b:73:2f:fa:de:30:7c:37:19:b4:25:22:a7:67:3b:
                    eb:f1:fd:1b:d5:b8:92:8f:d7:48:4f:23:b9:b3:9f:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:B4:B3:E9:78:2D:80:93:BC:69:61:45:77:85:47:07:0F:6A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5a24e5-9147-337a-9cc1-87e3e66e2c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:93:66:f6:9a:fd:8c:7f:15:e0:8a:13:61:18:90:2f:17:84:
         d2:c8:9a:6c:2a:0c:8a:9d:88:2f:d0:4d:35:ee:c9:63:42:bf:
         67:c0:b1:eb:dc:80:48:4c:04:20:72:33:5d:be:57:b9:f3:91:
         4c:76:d1:06:e6:5a:61:b8:15:5b:fc:f4:66:89:38:90:a1:f2:
         57:58:a0:84:0f:1c:9b:fb:e1:f5:9f:04:e9:79:c9:c9:39:b7:
         fb:f7:79:89:97:8e:bc:08:b6:67:0e:b5:c0:d7:3b:e3:18:59:
         e7:0b:86:38:7e:ca:53:f6:f0:bf:d4:d3:92:2e:0a:ac:cc:5c:
         e1:04:11:0a:06:48:fe:06:eb:17:2a:f0:9f:c7:0f:76:d5:ce:
         17:a0:96:ed:6b:f4:c2:33:3e:c2:0c:b4:f2:29:d0:bc:90:b3:
         25:cf:0d:72:e3:40:96:8f:62:ad:bf:7e:ed:3c:97:69:4f:5d:
         59:3a:61:41:c2:3d:d7:c0:85:d0:41:d3:86:ee:95:2a:7b:77:
         29:a9:49:b7:53:79:e7:2b:53:9f:c7:c5:f2:1c:9e:9b:2f:fc:
         82:8a:2d:64:4f:41:fa:42:7c:d3:ee:fe:8c:fb:6e:89:0c:ff:
         e2:a7:62:ae:c7:6c:59:98:0a:41:57:c3:44:0d:ae:bd:81:3b:
         72:86:44:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvS9ZLjKcshx8UgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
Y2JmMDA5ZjUtZDQxYi00NmIzLTg2YjUtOTMwMTcxMzVjZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMX7pacmtxPVojlw2IUWqqHRcaY5n3+DmwjG
7kfFRBcZyR71CbNJzrNjEulF1e3GPdoOsKZWazvsKZ8hm5QiMmvRRkocnpUNmghv
BjXbaIHY67p7SSAgnDhZO2oFnZ1WOq7OScYyxkENKpFAd8yrdGo6SWZ+m7ALvx8r
21Qj46XEDynoe2bxykdxDwGI2xP/IeuIcBbb3ljl/NVBjEpiVwI+XLXEO9q84BqN
RDxN4knzAea5Qt6vWmWh0FPHG0mdunJus2hhuUlhWjIa4osbquivUFNgQ8KUGzsy
nf+L3D5bcy/63jB8Nxm0JSKnZzvr8f0b1biSj9dITyO5s5/diwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM+ptLPpeC2Ak7xpYUV3hUcHD2qtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ1YTI0ZTUtOTE0Ny0z
MzdhLTljYzEtODdlM2U2NmUyYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAaTZvaa/Yx/FeCKE2EYkC8XhNLImmwqDIqdiC/QTTXuyWNCv2fA
sevcgEhMBCByM12+V7nzkUx20QbmWmG4FVv89GaJOJCh8ldYoIQPHJv74fWfBOl5
yck5t/v3eYmXjrwItmcOtcDXO+MYWecLhjh+ylP28L/U05IuCqzMXOEEEQoGSP4G
6xcq8J/HD3bVzheglu1r9MIzPsIMtPIp0LyQsyXPDXLjQJaPYq2/fu08l2lPXVk6
YUHCPdfAhdBB04bulSp7dympSbdTeecrU5/HxfIcnpsv/IKKLWRPQfpCfNPu/oz7
bokM/+KnYq7HbFmYCkFXw0QNrr2BO3KGRE8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:35:35 2026 by rpki-client