Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5d2ecf-8802-3f0a-909b-954eabfaaf6b.roa
File:                     bb5d2ecf-8802-3f0a-909b-954eabfaaf6b.roa (raw, json)
Hash identifier:          4qNQt8Ue0CenYKAm5az6az+X6FPNpbSm0y3PQZZ4LiQ=
Subject key identifier:   3D:56:35:8E:62:25:3C:CC:8E:A1:6B:BE:71:5B:EC:4E:92:C8:56:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CADFF852291B13BE84600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5d2ecf-8802-3f0a-909b-954eabfaaf6b.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ad:ff:85:22:91:b1:3b:e8:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=09b66ece-a3fa-4d1e-8f2a-bc9590dc575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:b4:d6:e8:db:37:1d:e8:08:e1:08:00:12:
                    c5:b0:f3:27:b5:e7:83:2a:de:34:32:74:3a:5f:b8:
                    08:11:c1:8b:8a:d5:ec:23:1d:6d:4c:79:49:25:0f:
                    27:91:5b:f2:a2:0d:1f:80:d3:05:30:ea:f0:43:96:
                    bb:3f:3a:3f:42:21:2e:ae:50:4a:1e:d6:81:69:83:
                    1b:0e:a0:77:9b:54:33:bf:7c:7a:41:c1:d4:aa:57:
                    13:2c:c6:17:7f:b4:54:5c:94:a4:a0:c8:24:a5:73:
                    ac:1c:33:ff:58:f0:76:61:80:46:1b:76:d1:03:eb:
                    24:a3:96:63:81:15:23:4f:87:bd:17:d1:f4:af:83:
                    25:63:03:55:c8:62:04:0e:0c:67:11:b2:a3:52:7d:
                    e9:63:70:05:e4:a4:20:03:41:40:2f:9d:58:c0:4f:
                    bb:84:f2:ae:0b:24:35:a2:5b:de:aa:73:54:36:17:
                    52:9b:57:7c:03:f0:ba:87:9f:4f:08:63:24:23:d1:
                    56:9f:52:6b:a3:ce:bc:f8:01:75:5f:92:c2:74:7c:
                    99:a9:03:eb:3f:53:d9:bd:0a:1e:3a:db:57:fb:c2:
                    1e:0b:c0:81:c6:53:ab:f8:b2:01:6b:1f:ec:68:d9:
                    b9:5d:f4:63:6c:dd:77:8e:75:4f:bf:7d:dc:d4:cf:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:35:8E:62:25:3C:CC:8E:A1:6B:BE:71:5B:EC:4E:92:C8:56:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5d2ecf-8802-3f0a-909b-954eabfaaf6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:3e:99:71:9f:54:96:a1:ea:df:70:6a:b8:44:93:0a:3d:
         7f:3c:84:1a:3f:08:0a:4b:14:61:b4:9c:bd:e1:03:0a:46:4e:
         75:bc:e5:db:48:76:d6:3b:32:8a:df:1b:b7:9f:a7:64:05:00:
         33:91:dc:b2:35:6c:45:b8:17:c3:56:c9:0d:ad:4f:3b:5c:ac:
         ce:a1:52:bd:d0:91:b3:aa:8e:6d:ca:e6:0b:66:e4:1b:f9:38:
         a2:54:73:e3:07:d6:6e:06:f8:c3:29:62:31:18:a1:96:9d:bb:
         45:15:8b:62:b0:81:b0:e9:57:43:fc:4b:c1:1e:f9:06:51:87:
         a9:a7:5e:28:f0:9f:84:8e:dd:c5:2f:cf:e9:91:91:24:7d:1d:
         83:b9:6e:db:d8:72:40:a3:7e:6c:a1:cb:61:3a:3e:e2:72:66:
         54:3f:70:d8:11:74:35:c2:ee:a2:60:72:30:64:8d:5b:67:29:
         db:1c:1e:15:c5:26:59:bf:5d:b4:ce:22:61:1d:dc:84:fc:34:
         ba:6d:39:cf:67:b5:e7:02:76:2d:34:35:a9:c5:7a:f0:4c:6f:
         46:fd:f4:30:ed:33:b6:86:7e:da:47:29:37:5d:89:f1:ba:e7:
         14:a2:5f:ca:f9:55:bf:a2:f7:61:5b:66:7b:9f:2e:4c:de:ac:
         dc:53:81:ee
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHK3/hSKRsTvoRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MDliNjZlY2UtYTNmYS00ZDFlLThmMmEtYmM5NTkwZGM1NzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrS01ujbNx3oCOEIABLFsPMnteeDKt40MnQ6
X7gIEcGLitXsIx1tTHlJJQ8nkVvyog0fgNMFMOrwQ5a7Pzo/QiEurlBKHtaBaYMb
DqB3m1Qzv3x6QcHUqlcTLMYXf7RUXJSkoMgkpXOsHDP/WPB2YYBGG3bRA+sko5Zj
gRUjT4e9F9H0r4MlYwNVyGIEDgxnEbKjUn3pY3AF5KQgA0FAL51YwE+7hPKuCyQ1
olveqnNUNhdSm1d8A/C6h59PCGMkI9FWn1Jro868+AF1X5LCdHyZqQPrP1PZvQoe
OttX+8IeC8CBxlOr+LIBax/saNm5XfRjbN13jnVPv33c1M9gFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD1WNY5iJTzMjqFrvnFb7E6SyFaWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI1ZDJlY2YtODgwMi0z
ZjBhLTkwOWItOTU0ZWFiZmFhZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBxqj6ZcZ9UlqHq33BquESTCj1/PIQaPwgKSxRh
tJy94QMKRk51vOXbSHbWOzKK3xu3n6dkBQAzkdyyNWxFuBfDVskNrU87XKzOoVK9
0JGzqo5tyuYLZuQb+TiiVHPjB9ZuBvjDKWIxGKGWnbtFFYtisIGw6VdD/EvBHvkG
UYepp14o8J+Ejt3FL8/pkZEkfR2DuW7b2HJAo35socthOj7icmZUP3DYEXQ1wu6i
YHIwZI1bZynbHB4VxSZZv120ziJhHdyE/DS6bTnPZ7XnAnYtNDWpxXrwTG9G/fQw
7TO2hn7aRyk3XYnxuucUol/K+VW/ovdhW2Z7ny5M3qzcU4Hu
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:33 2026 by rpki-client