Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8efb61-51de-3d60-92ea-7dcb804fffb6.roa
File:                     cb8efb61-51de-3d60-92ea-7dcb804fffb6.roa (raw, json)
Hash identifier:          rwYceO1QfIErIQvvY4o5MAbin2eo1o9SFlPyTgVPY6k=
Subject key identifier:   D2:03:73:8B:2D:F3:EB:5A:A5:F9:F0:AC:1E:47:6C:37:76:08:C3:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F103791147E4B03D2731E9D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8efb61-51de-3d60-92ea-7dcb804fffb6.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396617
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:91:14:7e:4b:03:d2:73:1e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=384bb530-7dc3-4297-8ca0-5ec6304da971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:d6:ec:e3:57:85:46:f0:7f:06:af:7f:18:
                    26:a9:5b:1e:eb:f0:a3:b0:9d:5d:ee:92:e8:ec:6d:
                    ee:e6:2f:39:d1:5e:4f:9c:68:47:04:15:ef:88:bd:
                    e7:82:67:e2:5f:3a:43:bb:1d:9b:b1:eb:e8:94:fc:
                    e4:ca:43:03:4f:80:5d:65:72:58:61:4d:f5:c8:14:
                    42:cf:e7:bb:5d:e6:c0:e6:c3:41:40:17:4f:5d:58:
                    11:7d:38:7a:26:cd:7c:de:a5:0c:e4:c7:ad:c9:e7:
                    6f:77:74:32:3e:35:fc:21:a7:e8:22:b7:71:0f:97:
                    f3:cc:56:ce:d9:30:aa:45:ce:94:c8:a5:19:6f:e6:
                    30:ba:30:90:2a:64:f9:f7:3b:83:dd:48:7a:e8:1f:
                    b0:d4:d4:1d:9b:ed:3a:e4:6d:97:ab:52:66:11:ed:
                    3b:f8:74:89:d4:9a:e0:cb:b6:38:a9:eb:77:bc:48:
                    40:fb:cc:71:d3:21:ba:19:0f:81:73:4f:61:25:e2:
                    5b:21:96:ee:ec:e8:01:80:fc:0c:95:99:e6:33:9a:
                    14:8f:bf:36:52:0f:c0:4b:3f:6b:79:cc:e5:58:fb:
                    33:11:1b:44:7c:85:70:e3:04:a9:c0:f0:d9:d0:49:
                    7f:d0:1e:21:18:9e:63:8f:ad:13:a2:64:97:a1:2a:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:03:73:8B:2D:F3:EB:5A:A5:F9:F0:AC:1E:47:6C:37:76:08:C3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb8efb61-51de-3d60-92ea-7dcb804fffb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:04:20:de:81:d4:90:22:fa:f7:2f:64:60:db:2b:29:50:
         d6:01:4f:8c:9e:6b:14:e6:40:bd:7b:77:1c:62:0d:32:92:4a:
         bd:86:fd:74:f6:71:e3:44:04:74:16:6d:5f:a7:fa:bb:f0:b9:
         9e:e9:69:f9:01:c6:39:94:2c:5d:6d:89:05:c2:c2:40:4a:54:
         9c:10:55:25:e3:c5:14:98:cc:2c:17:bb:c1:2d:7f:81:1c:e0:
         94:cb:05:b7:ac:b6:dc:4a:2f:83:42:73:c4:fe:af:71:57:57:
         c6:86:d5:64:aa:d3:a1:cc:e6:0a:48:c8:19:57:3a:95:c2:af:
         c6:36:c5:10:07:52:d5:63:13:9a:1a:8e:e3:52:8d:9b:c1:a9:
         f1:15:79:0f:19:a9:5d:61:a5:e7:d0:8d:43:f5:f4:d3:78:49:
         81:77:26:d9:04:4f:db:94:ed:3b:5e:ca:1b:79:78:77:3f:2e:
         ef:7e:5c:1d:c3:06:52:a6:f3:a1:87:31:1d:2d:47:f4:da:72:
         66:9b:76:3a:66:9c:d7:15:03:a8:32:eb:5a:35:a1:d0:58:b1:
         e7:ca:7a:ed:56:aa:a7:36:49:6c:8a:b5:4a:cd:eb:ab:8d:5e:
         d8:a5:56:27:d7:b6:8f:52:93:25:cf:1d:76:05:77:16:8c:55:
         c4:6d:eb:28
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8QN5EUfksD0nMenQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
Mzg0YmI1MzAtN2RjMy00Mjk3LThjYTAtNWVjNjMwNGRhOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzW7ONXhUbwfwavfxgmqVse6/CjsJ1d7pLo
7G3u5i850V5PnGhHBBXviL3ngmfiXzpDux2bsevolPzkykMDT4BdZXJYYU31yBRC
z+e7XebA5sNBQBdPXVgRfTh6Js183qUM5Metyedvd3QyPjX8IafoIrdxD5fzzFbO
2TCqRc6UyKUZb+YwujCQKmT59zuD3Uh66B+w1NQdm+065G2Xq1JmEe07+HSJ1Jrg
y7Y4qet3vEhA+8xx0yG6GQ+Bc09hJeJbIZbu7OgBgPwMlZnmM5oUj782Ug/ASz9r
eczlWPszERtEfIVw4wSpwPDZ0El/0B4hGJ5jj60TomSXoSoGswIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNIDc4st8+tapfnwrB5HbDd2CMOuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I4ZWZiNjEtNTFkZS0z
ZDYwLTkyZWEtN2RjYjgwNGZmZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC1kAQg3oHUkCL69y9kYNsrKVDWAU+MnmsU5kC9
e3ccYg0ykkq9hv109nHjRAR0Fm1fp/q78Lme6Wn5AcY5lCxdbYkFwsJASlScEFUl
48UUmMwsF7vBLX+BHOCUywW3rLbcSi+DQnPE/q9xV1fGhtVkqtOhzOYKSMgZVzqV
wq/GNsUQB1LVYxOaGo7jUo2bwanxFXkPGaldYaXn0I1D9fTTeEmBdybZBE/blO07
XsobeXh3Py7vflwdwwZSpvOhhzEdLUf02nJmm3Y6ZpzXFQOoMutaNaHQWLHnynrt
VqqnNklsirVKzeurjV7YpVYn17aPUpMlzx12BXcWjFXEbeso
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:38:59 2026 by rpki-client