Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa
File:                     fc880457-3b44-302b-80fb-4ba976e47531.roa (raw, json)
Hash identifier:          IuweQST4vKnCUIBfAfSOJWHnbt3/AfAPyXN6LMSeZC4=
Subject key identifier:   89:8A:4B:92:14:96:DB:DD:19:50:CD:87:F7:8B:92:70:CA:5B:42:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788CA6A6235673FBB6C4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36628
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ca:6a:62:35:67:3f:bb:6c:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c670c824-da4c-4728-bf0a-552802dd4e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:5c:36:41:15:54:d3:1a:69:79:6d:a4:ab:
                    fa:94:cd:9d:b5:ce:c7:ce:5f:40:1a:ec:20:b0:4c:
                    fc:c7:8c:47:f7:f4:56:cd:f0:8e:59:30:59:28:dc:
                    7a:ba:00:b6:eb:20:fa:70:62:a4:91:cd:8f:c3:9c:
                    68:02:b1:08:df:3c:44:49:f3:75:38:82:d7:ed:d6:
                    4b:02:c1:62:cf:96:86:2c:30:3d:25:a2:50:a0:82:
                    7c:f1:0a:03:32:b3:c3:f7:68:d0:e0:0f:68:d7:39:
                    93:9d:8c:fd:19:f6:8c:6d:af:35:b3:64:bc:a3:5f:
                    79:3b:8f:38:01:66:a8:58:de:b7:d8:5e:ff:8c:da:
                    e5:37:50:20:e8:84:59:c7:7d:ee:8e:8b:9c:62:47:
                    b4:48:a3:76:c3:92:67:24:94:49:69:73:95:05:62:
                    5b:ec:5f:b0:67:a8:aa:78:5d:10:df:c1:18:93:91:
                    9c:7b:d1:1e:54:11:31:d0:63:bb:3e:ef:14:9a:12:
                    bb:10:d2:a0:c9:61:5a:6a:b5:9d:bb:38:80:d7:19:
                    20:be:71:49:a5:41:79:bf:65:b4:1e:19:13:5f:3d:
                    6d:cf:9a:e0:f5:96:d3:ba:1f:48:d5:e3:79:dd:97:
                    ef:fc:c7:dd:64:8d:43:f3:6c:f0:8f:41:9e:bc:83:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:4B:92:14:96:DB:DD:19:50:CD:87:F7:8B:92:70:CA:5B:42:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:80:f2:49:cd:f7:4e:24:59:23:56:56:3e:18:66:a6:94:
         cb:32:52:8e:e5:76:81:cd:5f:68:6d:9d:40:30:c4:1d:35:75:
         49:fd:f8:a8:c9:4f:b5:20:d6:d7:09:3c:a8:8a:f6:f8:19:b3:
         98:d1:7a:8d:51:7c:47:29:05:0b:0b:7b:5f:ef:ef:c8:8a:5b:
         2b:4d:97:97:39:cc:26:c7:e8:55:32:32:1f:c6:9b:96:e5:08:
         dc:52:d4:6e:dc:89:b5:71:cf:57:ea:b8:cc:d1:3a:56:a6:8b:
         dd:0a:a9:62:b7:70:87:aa:75:e8:db:e6:c6:78:87:a0:bc:71:
         23:f7:df:54:dd:a9:a3:dd:79:f2:07:08:0f:51:d8:55:9b:56:
         4b:9c:74:18:b0:f8:b6:4b:0f:da:75:35:18:ab:51:67:ba:b9:
         32:d0:5c:7f:7e:7a:03:e8:de:7d:71:30:0b:cf:ab:45:1b:b6:
         de:52:f7:a3:b5:c2:9b:0f:c3:38:4f:a7:94:1a:c8:f9:3e:b6:
         50:e4:8d:14:d2:c2:53:cd:35:e7:54:b8:39:00:51:2e:0e:b2:
         37:24:f5:d0:43:3e:60:36:a0:16:37:03:50:1e:20:c5:cc:23:
         1c:d3:f2:b0:59:93:d1:c1:55:18:42:12:7f:43:2c:a1:24:00:
         09:12:59:9b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niMpqYjVnP7tsRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzY3MGM4MjQtZGE0Yy00NzI4LWJmMGEtNTUyODAyZGQ0ZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9hcNkEVVNMaaXltpKv6lM2dtc7Hzl9AGuwg
sEz8x4xH9/RWzfCOWTBZKNx6ugC26yD6cGKkkc2Pw5xoArEI3zxESfN1OILX7dZL
AsFiz5aGLDA9JaJQoIJ88QoDMrPD92jQ4A9o1zmTnYz9GfaMba81s2S8o195O484
AWaoWN632F7/jNrlN1Ag6IRZx33ujoucYke0SKN2w5JnJJRJaXOVBWJb7F+wZ6iq
eF0Q38EYk5Gce9EeVBEx0GO7Pu8UmhK7ENKgyWFaarWduziA1xkgvnFJpUF5v2W0
HhkTXz1tz5rg9ZbTuh9I1eN53Zfv/MfdZI1D82zwj0GevIMmuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFImKS5IUltvdGVDNh/eLknDKW0JqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmM4ODA0NTctM2I0NC0z
MDJiLTgwZmItNGJhOTc2ZTQ3NTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQACzYDySc33TiRZI1ZWPhhmppTLMlKO5XaBzV9o
bZ1AMMQdNXVJ/fioyU+1INbXCTyoivb4GbOY0XqNUXxHKQULC3tf7+/IilsrTZeX
Ocwmx+hVMjIfxpuW5QjcUtRu3Im1cc9X6rjM0TpWpovdCqlit3CHqnXo2+bGeIeg
vHEj999U3amj3XnyBwgPUdhVm1ZLnHQYsPi2Sw/adTUYq1Fnurky0Fx/fnoD6N59
cTALz6tFG7beUvejtcKbD8M4T6eUGsj5PrZQ5I0U0sJTzTXnVLg5AFEuDrI3JPXQ
Qz5gNqAWNwNQHiDFzCMc0/KwWZPRwVUYQhJ/QyyhJAAJElmb
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:40 2026 by rpki-client