Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6247a37-b0e9-3535-b9d0-8af9dcafdb4a.roa
File:                     f6247a37-b0e9-3535-b9d0-8af9dcafdb4a.roa (raw, json)
Hash identifier:          51oSPa70ykLnTlvKwMR2jkJTiDUGFh66vX0YRoLHnns=
Subject key identifier:   AE:E1:99:9B:D2:8A:18:2D:E1:A9:24:A8:A3:65:8E:64:84:C6:C9:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE60A68DA715C473EE9E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6247a37-b0e9-3535-b9d0-8af9dcafdb4a.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     397210
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e6:0a:68:da:71:5c:47:3e:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=d727ec4c-19c1-4485-8dec-9b7a5bfec561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:34:67:ea:34:9c:23:f6:3b:5b:9f:14:56:
                    a7:13:2e:43:13:71:66:fa:23:c3:0d:d5:1e:c3:05:
                    bf:78:32:e2:e3:ee:32:02:21:c7:71:9e:09:af:b1:
                    64:ce:d3:2f:3d:e5:2b:e9:f9:90:61:86:f0:c4:80:
                    55:e8:f2:6a:e9:c7:d7:fd:39:c5:ad:b2:3f:c6:6b:
                    89:36:ac:90:eb:52:c2:28:90:7d:8c:ae:b2:5c:7c:
                    cd:4a:73:b7:2a:f1:f8:ff:2c:c6:de:9d:c6:77:b1:
                    7d:e9:f2:0c:87:30:b1:fa:22:4d:16:38:58:fd:5d:
                    d2:19:f8:c9:31:6d:7a:51:84:c4:d4:7a:9f:54:c5:
                    52:b5:37:ea:0f:fe:81:cc:9e:fe:90:58:2f:96:a6:
                    9e:13:05:d9:93:96:20:c5:c3:78:28:9a:e3:db:8a:
                    29:be:12:49:77:e6:10:3c:89:6e:80:d2:5a:19:75:
                    6a:14:3d:f0:02:6c:50:72:b9:e3:14:46:bb:87:7b:
                    7c:ee:89:42:d6:4f:4b:23:45:14:be:56:6d:48:76:
                    dc:fc:27:1e:0d:16:d3:c7:67:f4:26:9d:60:4d:9e:
                    d1:23:f2:a5:f1:26:f5:24:6e:13:5f:de:5a:f6:4f:
                    22:23:02:4e:22:b6:4a:cd:2f:9d:b5:5a:64:67:23:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E1:99:9B:D2:8A:18:2D:E1:A9:24:A8:A3:65:8E:64:84:C6:C9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6247a37-b0e9-3535-b9d0-8af9dcafdb4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:e4:05:8e:2f:b5:bf:09:c5:28:2b:71:19:86:7b:fe:ab:
         0b:ce:de:6f:cb:4a:78:a2:a2:5f:62:4c:85:d4:93:06:74:62:
         dc:a3:d9:98:4f:bb:3f:2a:17:75:b8:a6:17:6a:88:33:3f:29:
         29:c5:0a:b5:e3:37:9b:71:6f:7f:a9:78:85:78:36:e9:ab:ed:
         d2:94:ae:12:f0:ca:ae:9a:e8:b8:ca:93:ba:85:42:24:90:e3:
         b0:55:37:b3:97:3f:70:69:f2:45:31:a9:26:2e:13:c8:e6:1c:
         9a:f9:8e:05:32:18:1d:8a:26:1c:90:12:4a:5b:ee:9a:91:ae:
         4e:66:df:3e:8b:29:5c:72:66:4e:31:44:1b:bf:92:0c:eb:00:
         38:1a:69:91:d7:f5:91:77:1d:83:9b:34:bf:1a:74:57:9e:0a:
         5c:90:b2:16:84:98:ee:d2:00:19:25:52:74:4a:a8:30:75:ad:
         cb:48:d3:98:8e:ba:27:5e:ea:b1:6b:07:53:13:1d:6d:35:00:
         b8:4c:1e:44:c8:d6:4e:31:2b:07:b0:c8:3a:0f:17:f6:4e:8f:
         b1:ec:26:9a:13:1a:28:50:21:16:75:0f:47:d4:15:fc:5d:c5:
         48:a4:a2:92:56:45:81:fe:b3:67:d5:e8:fa:1d:af:c0:21:d4:
         53:f0:83:fa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOYKaNpxXEc+6eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZDcyN2VjNGMtMTljMS00NDg1LThkZWMtOWI3YTViZmVjNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA80Z+o0nCP2O1ufFFanEy5DE3Fm+iPDDdUe
wwW/eDLi4+4yAiHHcZ4Jr7FkztMvPeUr6fmQYYbwxIBV6PJq6cfX/TnFrbI/xmuJ
NqyQ61LCKJB9jK6yXHzNSnO3KvH4/yzG3p3Gd7F96fIMhzCx+iJNFjhY/V3SGfjJ
MW16UYTE1HqfVMVStTfqD/6BzJ7+kFgvlqaeEwXZk5YgxcN4KJrj24opvhJJd+YQ
PIlugNJaGXVqFD3wAmxQcrnjFEa7h3t87olC1k9LI0UUvlZtSHbc/CceDRbTx2f0
Jp1gTZ7RI/Kl8Sb1JG4TX95a9k8iIwJOIrZKzS+dtVpkZyM1HQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK7hmZvSihgt4akkqKNljmSExsmIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYyNDdhMzctYjBlOS0z
NTM1LWI5ZDAtOGFmOWRjYWZkYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAOSOQFji+1vwnFKCtxGYZ7/qsLzt5vy0p4oqJf
YkyF1JMGdGLco9mYT7s/Khd1uKYXaogzPykpxQq14zebcW9/qXiFeDbpq+3SlK4S
8Mqumui4ypO6hUIkkOOwVTezlz9wafJFMakmLhPI5hya+Y4FMhgdiiYckBJKW+6a
ka5OZt8+iylccmZOMUQbv5IM6wA4GmmR1/WRdx2DmzS/GnRXngpckLIWhJju0gAZ
JVJ0Sqgwda3LSNOYjronXuqxawdTEx1tNQC4TB5EyNZOMSsHsMg6Dxf2To+x7Caa
ExooUCEWdQ9H1BX8XcVIpKKSVkWB/rNn1ej6Ha/AIdRT8IP6
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:55 2026 by rpki-client