Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a789624-e09d-33d2-837d-87f4b8e89ee0.roa
File:                     7a789624-e09d-33d2-837d-87f4b8e89ee0.roa (raw, json)
Hash identifier:          8hBrE5iPa1nscmh0zJhYrF01qJBLw/5Hu3AGTQr+ZAQ=
Subject key identifier:   C7:26:4F:71:28:D7:3E:50:2A:08:3C:DF:8C:D0:AB:9F:D1:11:CE:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B213662E5A50565F20720C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a789624-e09d-33d2-837d-87f4b8e89ee0.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     397205
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:13:66:2e:5a:50:56:5f:20:72:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=8812e804-505d-4f7d-b6e4-a0d38a9b969b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:d7:b2:69:da:1c:46:2b:04:91:bc:3b:e9:
                    b3:25:d8:cd:78:52:b0:d1:08:60:23:ff:e7:c6:f1:
                    f9:a4:00:0d:bf:af:e0:22:f8:cf:86:a3:b0:1c:d7:
                    27:e6:b8:51:20:9b:66:b2:d8:0b:19:8e:2d:d0:0a:
                    1f:4e:02:30:42:ba:97:8d:ba:80:40:34:85:3e:f5:
                    f2:69:5b:44:1d:46:35:6f:6a:52:93:b9:d3:c4:2f:
                    77:9f:ab:37:d8:8e:ea:86:f5:68:6d:34:93:f0:01:
                    22:f0:b4:74:f7:07:b6:0a:35:61:8a:33:5c:25:ba:
                    74:e1:4f:cc:b6:c6:e1:9f:a0:43:7d:d3:d9:6a:57:
                    1a:13:ae:65:d8:df:9e:89:7a:ff:1c:5a:bd:84:c3:
                    9d:b8:9b:93:ca:fe:ef:96:30:c0:70:c3:bf:db:c6:
                    1f:15:b1:1b:69:03:c4:94:fe:ab:9d:92:8a:f4:c5:
                    91:86:2c:54:20:a9:df:72:dd:04:93:26:66:5e:92:
                    f0:98:f0:64:30:e3:d3:da:31:8e:b3:ed:5c:1e:d6:
                    0f:ff:01:8b:b7:13:48:25:a0:07:11:4f:62:81:51:
                    39:0d:b0:6a:0e:0f:77:52:29:45:86:0e:3a:d9:ab:
                    92:33:c9:f5:ed:34:5d:e1:b7:df:3f:f7:94:04:a7:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:4F:71:28:D7:3E:50:2A:08:3C:DF:8C:D0:AB:9F:D1:11:CE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a789624-e09d-33d2-837d-87f4b8e89ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:39:81:3c:af:65:e2:51:86:ad:c1:9a:d8:e2:9b:9d:37:bd:
         c4:90:f8:47:3b:54:a8:cf:17:e2:02:d6:f0:eb:d5:93:43:1d:
         17:e6:51:db:81:5f:64:33:33:c7:64:be:ff:f1:e3:a7:53:3a:
         2d:5e:ed:89:e4:17:5e:c7:0c:50:fd:76:f3:62:53:4e:c0:88:
         5d:df:5f:2e:41:22:e5:a2:a0:7d:66:75:85:ad:93:4c:f2:6e:
         d0:1e:b3:bf:e6:60:ef:8f:a5:54:2a:7d:e4:8f:65:9a:ea:fc:
         0f:a6:65:61:33:41:2a:97:bb:a1:33:9d:15:c4:5e:8d:7c:1d:
         da:93:e0:f5:47:45:40:b2:f6:cc:9f:95:fd:bc:3c:9d:9c:7e:
         d0:9d:71:22:07:61:c4:09:df:91:02:a7:ed:23:96:9b:c0:91:
         dc:42:22:fa:27:f4:78:8b:88:51:8c:07:b7:41:1f:b6:c1:24:
         f4:7d:52:0d:c7:ff:4c:11:1a:21:84:c0:5c:9f:18:38:f6:0e:
         3f:20:ad:d6:94:92:66:fd:0a:3f:f1:b5:33:22:3b:b2:a9:bd:
         d2:c0:97:c5:87:cd:c4:5c:c8:6d:78:a7:5d:e8:02:fc:35:e7:
         e8:bb:84:38:47:a4:01:12:f2:fd:04:70:23:03:97:8a:24:0c:
         3b:b6:1d:cb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71shNmLlpQVl8gcgwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODgxMmU4MDQtNTA1ZC00ZjdkLWI2ZTQtYTBkMzhhOWI5NjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLXsmnaHEYrBJG8O+mzJdjNeFKw0QhgI//n
xvH5pAANv6/gIvjPhqOwHNcn5rhRIJtmstgLGY4t0AofTgIwQrqXjbqAQDSFPvXy
aVtEHUY1b2pSk7nTxC93n6s32I7qhvVobTST8AEi8LR09we2CjVhijNcJbp04U/M
tsbhn6BDfdPZalcaE65l2N+eiXr/HFq9hMOduJuTyv7vljDAcMO/28YfFbEbaQPE
lP6rnZKK9MWRhixUIKnfct0EkyZmXpLwmPBkMOPT2jGOs+1cHtYP/wGLtxNIJaAH
EU9igVE5DbBqDg93UilFhg462auSM8n17TRd4bffP/eUBKesTQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMcmT3Eo1z5QKgg834zQq5/REc6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E3ODk2MjQtZTA5ZC0z
M2QyLTgzN2QtODdmNGI4ZTg5ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYOYE8r2XiUYatwZrY4pudN73EkPhHO1Sozxfi
Atbw69WTQx0X5lHbgV9kMzPHZL7/8eOnUzotXu2J5BdexwxQ/XbzYlNOwIhd318u
QSLloqB9ZnWFrZNM8m7QHrO/5mDvj6VUKn3kj2Wa6vwPpmVhM0Eql7uhM50VxF6N
fB3ak+D1R0VAsvbMn5X9vDydnH7QnXEiB2HECd+RAqftI5abwJHcQiL6J/R4i4hR
jAe3QR+2wST0fVINx/9MERohhMBcnxg49g4/IK3WlJJm/Qo/8bUzIjuyqb3SwJfF
h83EXMhteKdd6AL8Nefou4Q4R6QBEvL9BHAjA5eKJAw7th3L
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:01 2026 by rpki-client