Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa
File:                     f4876adb-c5ca-3e0e-90ca-965989eaa373.roa (raw, json)
Hash identifier:          sdUR+A5FCb5LdrbWv0vK/6lLXyrbnJIkHVzztzqV+Og=
Subject key identifier:   89:86:E3:78:E3:AD:E5:B8:B3:F5:C7:FB:71:20:B9:A0:E9:3E:65:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C2808C90B0349483EC5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396616
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:80:8c:90:b0:34:94:83:ec:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=9c5d2d3d-3e29-44a7-bb2b-6a47083c4747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:26:bd:66:4c:62:0d:5f:39:c5:e5:be:4d:
                    d5:e0:13:3e:94:91:2c:6b:68:a8:96:29:aa:d5:be:
                    d1:bf:77:3f:3a:6b:a7:7d:66:d0:bd:b1:ff:24:29:
                    e4:ee:4c:45:96:20:45:1d:ba:f9:ea:2d:12:95:11:
                    f7:01:cf:96:81:16:83:dd:39:70:45:6f:16:1d:51:
                    8f:8c:cc:ad:69:7b:7f:85:21:a5:78:6e:31:58:d8:
                    f0:1c:80:73:bf:2a:8b:81:de:42:5e:03:ce:55:9d:
                    7a:df:3f:9d:0d:47:c7:50:d0:50:cd:49:3d:23:0d:
                    92:de:b5:79:53:9c:79:54:5c:cb:6a:f9:87:a4:65:
                    6a:f2:52:b3:7e:4e:93:15:b0:bd:c9:81:0d:7a:49:
                    d4:d7:26:06:57:9b:52:6a:16:24:4f:83:cf:7d:ef:
                    68:57:b2:86:d4:1d:38:fd:7c:18:ff:4d:29:ba:3e:
                    81:6e:0f:f9:49:4d:ba:1a:77:24:45:ba:0a:45:a7:
                    98:34:45:fc:9a:54:1a:32:e9:4a:a1:eb:8d:88:ec:
                    52:f4:42:45:7c:91:26:13:9c:66:86:45:5a:27:f5:
                    78:45:a0:8f:8e:de:21:7e:e3:ca:3b:20:a1:cd:f0:
                    77:75:de:ae:26:08:1c:0e:33:3f:3b:21:cd:c7:33:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:E3:78:E3:AD:E5:B8:B3:F5:C7:FB:71:20:B9:A0:E9:3E:65:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:2a:04:54:7d:86:36:04:86:92:d7:bb:d1:3f:0a:0b:6d:
         56:fc:4c:8a:0f:c0:5b:01:de:8b:4a:11:76:b7:4e:39:e7:76:
         0c:b0:71:8c:4f:47:a0:14:7b:9d:0e:c1:fe:b6:7e:25:5e:e4:
         85:23:d0:0e:7f:de:fc:c9:60:56:1e:7b:ea:2a:6b:bf:7a:30:
         3a:bd:87:e1:a5:04:ce:26:c1:52:37:2c:30:47:1d:45:5c:e9:
         45:4f:30:c6:92:1f:3b:7f:bc:4f:84:56:92:72:d8:6e:80:0a:
         c1:fc:fe:c6:68:de:b9:b1:ec:ee:50:d9:ef:86:a3:17:21:1e:
         35:e1:6d:ce:97:9f:ec:90:c7:87:3c:32:eb:df:20:a2:e4:da:
         b3:90:6c:88:38:d3:fc:6a:ba:5c:08:ab:88:6b:21:36:c3:dd:
         97:33:74:5b:2b:bd:d0:71:88:c6:e3:06:69:73:39:e3:41:6d:
         17:4c:f8:0f:99:d7:1a:67:84:00:5b:44:1b:02:ad:4e:c4:53:
         ce:8b:71:85:30:42:98:56:cb:6d:32:4f:fc:cb:dc:e4:21:d5:
         74:6e:d2:fa:5a:5b:5a:9a:f2:2d:e9:1c:32:f4:64:bd:f1:98:
         61:5b:5e:ce:9b:80:27:32:cc:ad:88:c0:eb:8c:2e:a0:f4:cf:
         b3:96:f2:a1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoCMkLA0lIPsXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
OWM1ZDJkM2QtM2UyOS00NGE3LWJiMmItNmE0NzA4M2M0NzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/UmvWZMYg1fOcXlvk3V4BM+lJEsa2iolimq
1b7Rv3c/OmunfWbQvbH/JCnk7kxFliBFHbr56i0SlRH3Ac+WgRaD3TlwRW8WHVGP
jMytaXt/hSGleG4xWNjwHIBzvyqLgd5CXgPOVZ163z+dDUfHUNBQzUk9Iw2S3rV5
U5x5VFzLavmHpGVq8lKzfk6TFbC9yYENeknU1yYGV5tSahYkT4PPfe9oV7KG1B04
/XwY/00puj6Bbg/5SU26GnckRboKRaeYNEX8mlQaMulKoeuNiOxS9EJFfJEmE5xm
hkVaJ/V4RaCPjt4hfuPKOyChzfB3dd6uJggcDjM/OyHNxzMM2QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFImG43jjreW4s/XH+3EguaDpPmXDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQ4NzZhZGItYzVjYS0z
ZTBlLTkwY2EtOTY1OTg5ZWFhMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBVySoEVH2GNgSGkte70T8KC21W/EyKD8BbAd6L
ShF2t04553YMsHGMT0egFHudDsH+tn4lXuSFI9AOf978yWBWHnvqKmu/ejA6vYfh
pQTOJsFSNywwRx1FXOlFTzDGkh87f7xPhFaScthugArB/P7GaN65sezuUNnvhqMX
IR414W3Ol5/skMeHPDLr3yCi5NqzkGyIONP8arpcCKuIayE2w92XM3RbK73QcYjG
4wZpcznjQW0XTPgPmdcaZ4QAW0QbAq1OxFPOi3GFMEKYVsttMk/8y9zkIdV0btL6
WltamvIt6Rwy9GS98ZhhW17Om4AnMsytiMDrjC6g9M+zlvKh
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:02:18 2026 by rpki-client