Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6ee42e1-805d-3ccf-897d-b4218a7749b9.roa
File:                     d6ee42e1-805d-3ccf-897d-b4218a7749b9.roa (raw, json)
Hash identifier:          UyBGEaMSGzEu0SKjxvoK4Bn2pRLSQeG9DM+FuOIApD4=
Subject key identifier:   2C:08:2D:3F:F9:61:BD:6E:58:F5:D3:3C:43:B6:F9:5F:F7:15:09:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CA685565140168322CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6ee42e1-805d-3ccf-897d-b4218a7749b9.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396585
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a6:85:56:51:40:16:83:22:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=0afcb098-af0f-456a-a8c0-3e807e1ac866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:f5:21:d9:f9:24:e6:ab:ad:62:19:25:fd:
                    00:d0:a7:50:7a:a3:8f:54:c8:2e:66:74:59:36:aa:
                    22:cd:dc:fb:3c:b5:bf:60:5c:ff:01:a7:58:a5:c9:
                    2e:93:e6:02:46:1d:c8:70:be:02:3b:ae:84:6b:dd:
                    0f:85:59:7f:a1:44:90:23:68:d7:44:c1:66:3b:cd:
                    83:ea:d7:d2:27:be:61:6f:c3:7f:a6:c9:ec:0c:62:
                    ab:ae:97:ce:57:8a:2b:80:e0:c8:ec:1b:8c:81:ce:
                    a1:a2:43:f7:07:18:1c:84:7a:d4:07:40:f7:7e:3e:
                    b1:08:ed:02:26:19:eb:8b:46:f8:66:43:d0:cd:90:
                    79:16:e9:75:9d:af:15:cd:f9:cf:39:f4:3a:41:8f:
                    64:91:6b:ce:f7:06:30:4e:b7:4c:fd:81:c1:9f:e7:
                    1c:73:d1:d3:24:f5:67:31:81:22:9a:ea:8e:90:13:
                    5b:c2:d1:7d:52:98:f0:c6:f5:96:cb:16:0f:73:7f:
                    74:e4:ed:59:61:92:9b:4b:15:3e:86:03:43:05:90:
                    56:bd:1c:7d:50:45:e3:7f:cc:69:dc:0c:51:46:11:
                    ec:af:34:88:29:81:bb:49:e8:62:85:7c:71:b9:04:
                    b0:b6:9e:6a:37:42:21:f1:51:21:78:b4:f7:e5:6c:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:2D:3F:F9:61:BD:6E:58:F5:D3:3C:43:B6:F9:5F:F7:15:09:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6ee42e1-805d-3ccf-897d-b4218a7749b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b9:03:51:06:a3:e9:a1:e7:1b:68:b6:99:34:ee:19:41:08:
         de:36:8d:5a:6b:6b:c5:00:7d:c2:e8:b1:bf:54:75:e5:31:4f:
         31:47:36:4e:7b:c6:28:d7:85:71:37:0a:19:83:0e:30:af:02:
         8d:a4:75:09:0e:f2:7b:18:3d:73:5c:0d:8f:08:37:ba:16:ca:
         f0:e8:ae:0d:d3:72:31:be:bb:9b:d4:c0:2f:b2:4a:3e:d7:fe:
         54:37:f7:5b:6c:e8:3f:08:1b:06:5c:17:66:6d:58:b0:54:10:
         0f:de:3d:57:14:44:7d:d2:e1:04:a5:ae:b8:35:e1:53:a8:ee:
         6b:97:d8:75:29:9c:23:2f:81:84:af:d2:29:2f:5b:7c:f4:d0:
         00:33:d3:78:49:3c:ce:73:20:1f:d8:fe:b0:a0:1b:ac:d7:06:
         0f:4d:c4:8c:a9:4c:43:cf:53:42:d4:10:a6:c1:01:6b:57:b8:
         69:cc:a9:3a:a3:2d:d9:4d:00:24:00:56:c8:3c:73:af:af:78:
         61:03:f9:89:37:1a:e5:b8:59:a6:d5:9c:6b:2f:58:a8:7e:06:
         40:c2:18:1f:48:c6:ab:46:1e:fa:d5:66:9b:ca:54:d6:10:84:
         71:96:74:4a:da:d5:c7:36:76:ff:bb:fc:da:23:e1:5f:a3:61:
         21:7e:48:fe
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHKaFVlFAFoMiywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
MGFmY2IwOTgtYWYwZi00NTZhLWE4YzAtM2U4MDdlMWFjODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4/1Idn5JOarrWIZJf0A0KdQeqOPVMguZnRZ
Nqoizdz7PLW/YFz/AadYpckuk+YCRh3IcL4CO66Ea90PhVl/oUSQI2jXRMFmO82D
6tfSJ75hb8N/psnsDGKrrpfOV4orgODI7BuMgc6hokP3BxgchHrUB0D3fj6xCO0C
Jhnri0b4ZkPQzZB5Ful1na8VzfnPOfQ6QY9kkWvO9wYwTrdM/YHBn+ccc9HTJPVn
MYEimuqOkBNbwtF9UpjwxvWWyxYPc3905O1ZYZKbSxU+hgNDBZBWvRx9UEXjf8xp
3AxRRhHsrzSIKYG7SehihXxxuQSwtp5qN0Ih8VEheLT35WynfwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCwILT/5Yb1uWPXTPEO2+V/3FQkeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDZlZTQyZTEtODA1ZC0z
Y2NmLTg5N2QtYjQyMThhNzc0OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBTuQNRBqPpoecbaLaZNO4ZQQjeNo1aa2vFAH3C
6LG/VHXlMU8xRzZOe8Yo14VxNwoZgw4wrwKNpHUJDvJ7GD1zXA2PCDe6Fsrw6K4N
03Ixvrub1MAvsko+1/5UN/dbbOg/CBsGXBdmbViwVBAP3j1XFER90uEEpa64NeFT
qO5rl9h1KZwjL4GEr9IpL1t89NAAM9N4STzOcyAf2P6woBus1wYPTcSMqUxDz1NC
1BCmwQFrV7hpzKk6oy3ZTQAkAFbIPHOvr3hhA/mJNxrluFmm1ZxrL1iofgZAwhgf
SMarRh761WabylTWEIRxlnRK2tXHNnb/u/zaI+Ffo2Ehfkj+
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:40:54 2026 by rpki-client