Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a098429a-c9da-344e-a237-83dc6a00b012.roa
File:                     a098429a-c9da-344e-a237-83dc6a00b012.roa (raw, json)
Hash identifier:          e2Uduh3EfCDJ0ydykK5NYh8iKU0Ok4tCdcki5Je/+1M=
Subject key identifier:   EC:77:D7:37:25:FD:B7:43:1A:04:C9:00:9B:67:01:41:04:84:D0:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CAED59A789F7431E25780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a098429a-c9da-344e-a237-83dc6a00b012.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ae:d5:9a:78:9f:74:31:e2:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=c1c07cca-5c88-4d04-b758-c4737cadea1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:0b:52:4b:b0:0a:4f:16:1c:ec:c8:8c:2c:
                    3b:fc:0b:f2:12:d2:d8:47:53:3b:eb:4e:b1:8b:4d:
                    18:c4:51:1a:f8:80:18:47:c2:c8:da:5d:0e:dd:39:
                    10:9a:df:ce:87:6e:3d:cf:45:f9:fa:84:e3:43:fc:
                    cc:55:e7:89:4a:fd:48:9d:a8:e0:38:73:d3:b2:82:
                    f9:cc:2d:b5:94:ff:d2:6f:60:e3:3c:02:0f:30:1d:
                    74:5c:84:9f:6a:d8:96:e5:d7:06:f7:6b:9b:c1:a6:
                    f0:b6:ed:bf:f5:e1:4b:51:3e:3e:5c:86:ff:c6:d7:
                    77:de:61:03:fb:0a:c6:ac:5f:02:ac:d3:2a:c7:6a:
                    f7:a0:a7:c2:fe:2b:5e:40:e3:42:8f:be:f9:49:da:
                    ae:53:a9:c5:7c:05:e3:a6:90:cb:3f:fd:4a:20:2d:
                    56:3a:f0:82:a3:8a:40:e0:99:20:26:c1:4f:7d:7d:
                    f2:26:d2:8e:8e:ca:09:5c:49:72:45:a3:0f:24:ca:
                    ba:98:84:05:e1:68:c1:8d:94:3f:06:c6:ac:0d:d3:
                    78:c8:1d:ad:88:97:46:4a:f8:18:57:1d:7e:b7:54:
                    52:aa:31:37:dd:43:6e:1a:3f:b5:e5:be:65:f8:d7:
                    1d:06:d2:cd:c4:40:b0:e4:7d:82:40:48:56:81:b2:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:D7:37:25:FD:B7:43:1A:04:C9:00:9B:67:01:41:04:84:D0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a098429a-c9da-344e-a237-83dc6a00b012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:04:94:c6:f4:f8:80:6a:ec:d7:c9:87:fc:44:a8:b1:fd:8d:
         61:f6:0c:6d:46:e2:c9:37:67:22:33:6d:f5:e2:20:e0:c5:d6:
         0d:4f:40:5c:92:65:ba:af:c0:99:5b:62:e9:86:cd:d0:ea:c9:
         93:40:ab:f3:07:4e:fe:de:18:83:4a:e9:5f:8b:5c:a7:6a:7f:
         db:67:97:5e:7f:8a:d6:58:66:56:e9:15:35:d0:d3:43:f2:56:
         f2:b5:a7:b0:fb:8c:23:7e:0f:d5:bf:85:53:52:83:6b:bc:24:
         42:99:6e:e9:f2:ae:de:60:cd:3e:a8:a8:42:65:27:27:cd:fc:
         ff:d1:99:55:35:2a:d7:97:84:02:a7:ab:81:0b:12:63:04:bc:
         d4:61:bd:98:90:30:98:99:77:ad:78:53:c5:8c:84:9c:7c:01:
         0f:a7:27:3b:b3:8e:4f:a1:35:27:3b:c6:38:82:0e:c3:18:37:
         f8:63:34:9d:39:d7:ca:8c:53:93:ed:82:66:90:df:6c:02:8e:
         90:c9:55:bb:ca:12:bc:ba:e0:d6:28:2f:70:25:60:ca:dc:bc:
         80:d2:b6:28:97:ce:9d:b8:88:94:92:47:5f:a2:09:29:5f:47:
         fe:51:13:7a:58:9d:80:5a:d8:d5:60:6d:65:98:b0:43:0b:4f:
         7d:2c:71:3c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHK7VmnifdDHiV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
YzFjMDdjY2EtNWM4OC00ZDA0LWI3NTgtYzQ3MzdjYWRlYTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFALUkuwCk8WHOzIjCw7/AvyEtLYR1M7606x
i00YxFEa+IAYR8LI2l0O3TkQmt/Oh249z0X5+oTjQ/zMVeeJSv1InajgOHPTsoL5
zC21lP/Sb2DjPAIPMB10XISfatiW5dcG92ubwabwtu2/9eFLUT4+XIb/xtd33mED
+wrGrF8CrNMqx2r3oKfC/iteQONCj775SdquU6nFfAXjppDLP/1KIC1WOvCCo4pA
4JkgJsFPfX3yJtKOjsoJXElyRaMPJMq6mIQF4WjBjZQ/BsasDdN4yB2tiJdGSvgY
Vx1+t1RSqjE33UNuGj+15b5l+NcdBtLNxECw5H2CQEhWgbKtdwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOx31zcl/bdDGgTJAJtnAUEEhNBJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA5ODQyOWEtYzlkYS0z
NDRlLWEyMzctODNkYzZhMDBiMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC5BJTG9PiAauzXyYf8RKix/Y1h9gxtRuLJN2ci
M2314iDgxdYNT0BckmW6r8CZW2Lphs3Q6smTQKvzB07+3hiDSulfi1ynan/bZ5de
f4rWWGZW6RU10NND8lbytaew+4wjfg/Vv4VTUoNrvCRCmW7p8q7eYM0+qKhCZScn
zfz/0ZlVNSrXl4QCp6uBCxJjBLzUYb2YkDCYmXeteFPFjIScfAEPpyc7s45PoTUn
O8Y4gg7DGDf4YzSdOdfKjFOT7YJmkN9sAo6QyVW7yhK8uuDWKC9wJWDK3LyA0rYo
l86duIiUkkdfogkpX0f+URN6WJ2AWtjVYG1lmLBDC099LHE8
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:57:04 2026 by rpki-client