Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa
File:                     f3359e85-f33d-3b60-bc7c-daa031cad17e.roa (raw, json)
Hash identifier:          w/TmAbFGa1gDDtmJ5Rrp74yNBFTul3l0WvJq0vEpZIo=
Subject key identifier:   E9:C8:A3:E3:CA:AB:27:BE:3F:B5:00:99:D0:3D:25:AD:26:50:A1:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79D26DEB8BE80DAFEAE15C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396561
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:26:de:b8:be:80:da:fe:ae:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=03f5bff2-c370-4cad-9756-3f132afe0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:2c:2c:a5:c8:03:bc:f4:e5:6d:df:e0:66:
                    d8:78:f1:97:b5:ae:e7:63:b1:1f:70:07:7d:99:37:
                    72:de:89:1e:64:f9:06:71:08:fa:1c:59:bb:c6:99:
                    8c:2b:be:71:da:06:63:7b:f3:78:a0:f1:30:39:5e:
                    63:ef:bc:19:76:f0:88:c5:90:53:73:a3:5c:d2:12:
                    64:41:78:65:7a:3c:86:79:a8:20:bc:53:e1:21:1d:
                    44:22:47:e7:e3:96:6b:72:b0:2e:76:00:44:f6:91:
                    bd:2f:16:8f:44:fb:3b:9f:4e:22:bd:55:60:38:89:
                    82:4b:9c:0b:52:59:19:6a:b5:95:6b:de:3a:71:7d:
                    8f:90:57:6f:11:32:1e:9b:f5:c0:ea:a8:50:81:37:
                    aa:5b:01:48:f5:fd:c7:0d:de:35:37:0d:dc:f5:87:
                    63:c0:d4:e3:06:a2:27:cd:a8:0b:39:3e:2c:c9:30:
                    5f:8e:68:a5:54:ec:b0:c2:e4:f4:f7:8e:be:76:16:
                    a6:29:7c:e6:5d:1c:4a:26:81:b6:7b:da:bf:89:16:
                    a1:a3:01:2d:38:64:19:1f:5f:5d:90:16:e6:90:85:
                    21:a6:ea:35:45:06:98:9c:99:49:b3:fe:72:06:ce:
                    6d:ba:84:ab:c6:c9:f7:cd:39:9f:8f:b6:d3:6c:6c:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C8:A3:E3:CA:AB:27:BE:3F:B5:00:99:D0:3D:25:AD:26:50:A1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:27:b3:4a:53:97:06:d6:6e:d9:b6:9c:75:cb:c6:81:1b:
         53:d3:da:91:a8:b7:b2:ac:e6:15:bd:38:49:e4:cd:d8:d7:3e:
         c6:5b:60:11:f7:90:f0:02:38:fc:0c:a7:c5:f8:93:4d:4f:43:
         f4:d3:ab:6d:80:38:25:10:7c:46:ca:8e:72:38:e2:a4:c0:73:
         08:86:98:ee:e7:77:c0:55:aa:96:23:80:79:2f:e1:d2:f1:98:
         86:c4:0e:8e:ad:6c:4f:c0:2e:f3:63:30:11:73:fb:e9:1e:db:
         1c:5c:08:4b:21:ab:89:5e:9b:e1:6e:3d:9e:d9:8e:7f:83:34:
         79:c0:99:9c:87:7f:65:56:eb:97:ec:d3:fa:6d:4c:38:e7:cf:
         88:7d:02:d6:33:14:bc:b8:d3:ca:a2:83:5a:ff:8d:f3:e5:1a:
         07:80:55:8b:20:ee:81:37:03:70:8b:6a:55:f7:60:e7:c5:ef:
         1b:31:42:26:71:3f:ff:20:a5:52:4f:2c:16:58:c9:27:60:73:
         23:9c:84:13:f4:3e:51:f1:71:69:65:9a:c2:27:87:75:5c:04:
         f3:40:be:9a:f7:c9:c5:e4:1d:d1:89:88:7c:ad:ca:8b:c7:1c:
         17:93:ed:a5:f7:f5:26:c8:92:ee:21:13:70:7a:e0:a6:ff:38:
         7f:51:9f:43
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nnSbeuL6A2v6uFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDNmNWJmZjItYzM3MC00Y2FkLTk3NTYtM2YxMzJhZmUwMDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO4sLKXIA7z05W3f4GbYePGXta7nY7EfcAd9
mTdy3okeZPkGcQj6HFm7xpmMK75x2gZje/N4oPEwOV5j77wZdvCIxZBTc6Nc0hJk
QXhlejyGeaggvFPhIR1EIkfn45ZrcrAudgBE9pG9LxaPRPs7n04ivVVgOImCS5wL
UlkZarWVa946cX2PkFdvETIem/XA6qhQgTeqWwFI9f3HDd41Nw3c9YdjwNTjBqIn
zagLOT4syTBfjmilVOywwuT0946+dhamKXzmXRxKJoG2e9q/iRahowEtOGQZH19d
kBbmkIUhpuo1RQaYnJlJs/5yBs5tuoSrxsn3zTmfj7bTbGxE3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOnIo+PKqye+P7UAmdA9Ja0mUKHwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjMzNTllODUtZjMzZC0z
YjYwLWJjN2MtZGFhMDMxY2FkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBM3SezSlOXBtZu2bacdcvGgRtT09qRqLeyrOYV
vThJ5M3Y1z7GW2AR95DwAjj8DKfF+JNNT0P006ttgDglEHxGyo5yOOKkwHMIhpju
53fAVaqWI4B5L+HS8ZiGxA6OrWxPwC7zYzARc/vpHtscXAhLIauJXpvhbj2e2Y5/
gzR5wJmch39lVuuX7NP6bUw458+IfQLWMxS8uNPKooNa/43z5RoHgFWLIO6BNwNw
i2pV92Dnxe8bMUImcT//IKVSTywWWMknYHMjnIQT9D5R8XFpZZrCJ4d1XATzQL6a
98nF5B3RiYh8rcqLxxwXk+2l9/UmyJLuIRNweuCm/zh/UZ9D
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:58 2026 by rpki-client