Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
File:                     753a5fd3-7ead-3451-8a4a-8d52bc868907.roa (raw, json)
Hash identifier:          TqTYpkY17nYVKBcqoM0OnDrugb9e97YxrEAn7z1fvWw=
Subject key identifier:   50:12:2C:2F:45:75:46:F9:78:72:3C:75:93:1F:7F:3D:9E:E5:23:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F8A6A93FC90294D1C0080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:8a:6a:93:fc:90:29:4d:1c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=25729891-18f4-4840-a2ae-515e2ac5e23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:4e:d0:6a:cd:d0:e2:d3:c5:05:82:e5:ad:
                    7a:2b:14:95:04:75:8a:28:fd:2d:65:d5:db:8a:58:
                    9e:7f:15:70:fc:8f:9f:99:4f:ae:81:fd:f9:b1:20:
                    ca:57:e2:6c:50:54:67:ea:00:5a:8b:a7:b8:4d:63:
                    80:09:17:d6:cd:b1:b7:8a:50:3a:e8:8c:31:52:c3:
                    97:e9:32:d7:e9:4d:0f:c4:4a:57:0c:87:de:36:20:
                    aa:43:cd:6f:1e:58:54:52:e6:dc:20:f3:4b:f7:42:
                    ad:56:e6:78:c6:a5:74:7c:29:e9:7a:17:b3:35:b8:
                    69:ac:f2:ab:9d:95:55:11:12:4b:de:5a:5b:c3:eb:
                    a6:c9:be:18:bc:53:87:c6:be:ac:3c:11:1c:74:a2:
                    56:db:8b:ce:a5:56:46:e6:f3:2a:b9:10:49:4f:33:
                    cc:dc:9d:29:f7:18:97:36:69:6f:b8:d5:b6:48:e9:
                    34:70:fa:4b:08:26:18:ab:17:55:5c:7d:0f:11:8f:
                    56:be:ca:b8:33:0b:f3:b4:1e:e6:22:e9:9e:ff:18:
                    51:39:48:3e:3f:11:48:6c:d0:68:2d:4f:b4:1a:41:
                    57:7c:a1:30:1b:b1:26:8e:cd:a3:de:e7:32:80:14:
                    30:e1:4a:01:99:9a:0d:85:4b:21:3f:0b:78:a9:dc:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:2C:2F:45:75:46:F9:78:72:3C:75:93:1F:7F:3D:9E:E5:23:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:45:70:b8:65:08:20:62:b0:a7:01:48:2a:f0:9a:19:e3:
         1b:7c:3f:2f:d2:ce:cf:c5:ab:55:cb:f2:e9:08:04:0c:14:09:
         d3:3e:c4:bd:2c:6a:c8:ab:f0:2a:b9:fc:4d:43:df:f8:04:ae:
         dd:3d:14:04:79:d5:cc:15:43:80:d5:bc:e9:20:ec:fa:5e:2e:
         6b:c1:b7:d1:4b:1f:ea:7e:19:be:bd:0d:72:14:09:ef:d2:19:
         08:39:bf:10:05:90:14:1e:f5:d5:fe:06:1c:6a:6a:7d:b1:8c:
         e9:06:12:06:2c:a2:8d:11:8b:a7:bb:53:25:ca:d2:17:35:88:
         04:41:82:cf:91:c5:36:3c:1c:d6:ee:e9:8a:56:83:ba:c9:48:
         6e:4d:1f:b3:62:ac:f2:5e:37:f6:5b:d1:03:13:4f:90:f7:68:
         e6:d7:5c:ee:b2:5a:d6:67:69:26:67:f1:d7:c4:ba:00:6a:bf:
         e1:4f:1d:3f:3b:34:cb:d2:8c:f9:90:dc:c5:b2:4d:0a:ac:86:
         c5:15:30:b4:e1:d4:06:f2:64:fc:a1:5f:0e:74:c4:01:86:a7:
         ed:7c:15:47:c3:75:57:ce:f6:f2:48:f9:b9:2b:e1:39:8b:35:
         b7:d7:51:21:95:7c:34:de:9f:2c:94:b8:22:9f:f5:82:07:74:
         81:ce:d3:88
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf4pqk/yQKU0cAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjU3Mjk4OTEtMThmNC00ODQwLWEyYWUtNTE1ZTJhYzVlMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEdO0GrN0OLTxQWC5a16KxSVBHWKKP0tZdXb
iliefxVw/I+fmU+ugf35sSDKV+JsUFRn6gBai6e4TWOACRfWzbG3ilA66IwxUsOX
6TLX6U0PxEpXDIfeNiCqQ81vHlhUUubcIPNL90KtVuZ4xqV0fCnpehezNbhprPKr
nZVVERJL3lpbw+umyb4YvFOHxr6sPBEcdKJW24vOpVZG5vMquRBJTzPM3J0p9xiX
NmlvuNW2SOk0cPpLCCYYqxdVXH0PEY9Wvsq4MwvztB7mIume/xhROUg+PxFIbNBo
LU+0GkFXfKEwG7Emjs2j3ucygBQw4UoBmZoNhUshPwt4qdxV5wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFASLC9FdUb5eHI8dZMffz2e5SPhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzUzYTVmZDMtN2VhZC0z
NDUxLThhNGEtOGQ1MmJjODY4OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/CEVwuGUIIGKwpwFIKvCaGeMbfD8v0s7PxatV
y/LpCAQMFAnTPsS9LGrIq/AqufxNQ9/4BK7dPRQEedXMFUOA1bzpIOz6Xi5rwbfR
Sx/qfhm+vQ1yFAnv0hkIOb8QBZAUHvXV/gYcamp9sYzpBhIGLKKNEYunu1MlytIX
NYgEQYLPkcU2PBzW7umKVoO6yUhuTR+zYqzyXjf2W9EDE0+Q92jm11zuslrWZ2km
Z/HXxLoAar/hTx0/OzTL0oz5kNzFsk0KrIbFFTC04dQG8mT8oV8OdMQBhqftfBVH
w3VXzvbySPm5K+E5izW311EhlXw03p8slLgin/WCB3SBztOI
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:33:57 2026 by rpki-client