Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00ca61e4-fa92-312e-89f8-1f2b65c87a80.roa
File:                     00ca61e4-fa92-312e-89f8-1f2b65c87a80.roa (raw, json)
Hash identifier:          FlqVSlXW/aljyiCtUVdiAJq0xMP3hvpS1hSPE14Q++k=
Subject key identifier:   1E:75:3E:E6:B3:EF:28:CF:FC:C0:BF:9B:71:DE:E3:E9:04:E9:35:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62CD4F2575E013D7F57E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00ca61e4-fa92-312e-89f8-1f2b65c87a80.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     22547
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cd:4f:25:75:e0:13:d7:f5:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6e6cfd09-d3ef-4ded-af3b-ba1b6df0fa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:ce:2a:57:c6:13:8d:58:8b:67:87:01:93:
                    bc:ef:96:bb:56:6e:10:ea:52:4c:3b:8a:d6:92:47:
                    a7:b3:a8:e0:15:53:07:f8:5b:d5:e2:f2:7b:2f:c6:
                    16:5a:19:83:c8:f3:e3:90:5d:8e:60:c8:99:ec:e1:
                    af:21:43:e7:72:75:a7:90:61:47:8d:ea:ec:1e:49:
                    d5:c7:95:76:ed:67:d2:82:47:4a:f8:5d:a3:ad:34:
                    61:1e:70:2f:f8:52:92:70:d3:9b:77:c0:e7:c7:c9:
                    92:42:08:c8:ec:df:6a:9d:87:0c:af:db:a4:94:13:
                    81:a0:48:f1:94:37:37:69:66:93:44:17:45:23:b7:
                    81:6d:95:de:d0:4e:fc:7e:89:44:9f:6a:42:ee:e9:
                    ae:f4:61:b4:73:cf:51:17:25:ec:ee:49:3c:a5:b2:
                    aa:42:8f:a5:35:14:3f:ae:54:38:7f:fa:f4:4f:66:
                    1c:3b:c4:a2:73:c0:3b:9a:39:33:ba:2f:a5:64:4b:
                    c4:71:f7:54:19:d1:fe:da:4a:eb:dc:54:d1:53:5d:
                    d8:50:c5:69:c8:50:f0:6d:65:80:16:4c:a0:1a:2c:
                    24:db:93:34:2a:b6:aa:e8:af:71:a1:fc:85:66:84:
                    93:c9:98:e3:af:dc:03:7c:53:d8:03:d1:84:40:ba:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:3E:E6:B3:EF:28:CF:FC:C0:BF:9B:71:DE:E3:E9:04:E9:35:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00ca61e4-fa92-312e-89f8-1f2b65c87a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:96:6f:45:d9:91:7b:b3:67:e8:3e:df:3c:02:98:cb:d2:
         8b:77:7a:b5:9c:85:fe:9a:db:1d:e5:31:bf:92:4e:f2:cb:04:
         be:2c:d5:a7:87:e9:f3:06:a5:f0:6b:07:0b:d3:e5:dd:73:1c:
         0f:46:09:6b:da:a5:8d:b6:eb:46:d6:a2:e1:70:43:46:16:e6:
         0b:4a:69:82:96:07:5b:c5:1b:f2:c1:2c:f3:ad:e6:90:cc:9f:
         4b:d9:6d:1e:d5:78:93:5a:48:c9:02:6d:91:10:42:0a:f7:23:
         b0:84:8e:dd:69:b4:1a:bc:99:cf:fa:f3:de:c6:3f:2e:24:c9:
         48:b6:f5:8d:1d:11:8e:b2:6b:09:98:52:d0:fa:08:6b:5f:48:
         4f:d5:7c:c8:65:9a:fe:10:18:16:4a:b5:a9:ad:d4:5f:96:b0:
         f8:d7:00:81:73:8f:3c:5d:99:d2:91:a7:c1:30:51:0a:16:1f:
         1c:8d:0e:ef:9c:9c:4e:23:9b:41:ab:b0:ab:9a:3f:45:6f:db:
         f2:7c:d3:f5:a6:3e:b4:0a:9d:65:a8:63:b3:8c:cf:63:1d:5b:
         26:41:9b:ee:f8:7b:64:a0:74:d6:67:2b:12:95:1e:3a:39:0b:
         a9:5f:64:4e:f8:09:1d:a7:c3:57:35:06:63:33:f1:1c:bb:6c:
         96:24:6d:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYs1PJXXgE9f1fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
NmU2Y2ZkMDktZDNlZi00ZGVkLWFmM2ItYmExYjZkZjBmYTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM3OKlfGE41Yi2eHAZO875a7Vm4Q6lJMO4rW
kkens6jgFVMH+FvV4vJ7L8YWWhmDyPPjkF2OYMiZ7OGvIUPncnWnkGFHjersHknV
x5V27WfSgkdK+F2jrTRhHnAv+FKScNObd8Dnx8mSQgjI7N9qnYcMr9uklBOBoEjx
lDc3aWaTRBdFI7eBbZXe0E78folEn2pC7umu9GG0c89RFyXs7kk8pbKqQo+lNRQ/
rlQ4f/r0T2YcO8Sic8A7mjkzui+lZEvEcfdUGdH+2krr3FTRU13YUMVpyFDwbWWA
FkygGiwk25M0Kraq6K9xofyFZoSTyZjjr9wDfFPYA9GEQLqnNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB51Puaz7yjP/MC/m3He4+kE6TUzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDBjYTYxZTQtZmE5Mi0z
MTJlLTg5ZjgtMWYyYjY1Yzg3YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmTlm9F2ZF7s2foPt88ApjL0ot3erWchf6a2x3lMb+STvLLBL4s
1aeH6fMGpfBrBwvT5d1zHA9GCWvapY2260bWouFwQ0YW5gtKaYKWB1vFG/LBLPOt
5pDMn0vZbR7VeJNaSMkCbZEQQgr3I7CEjt1ptBq8mc/6897GPy4kyUi29Y0dEY6y
awmYUtD6CGtfSE/VfMhlmv4QGBZKtamt1F+WsPjXAIFzjzxdmdKRp8EwUQoWHxyN
Du+cnE4jm0GrsKuaP0Vv2/J80/WmPrQKnWWoY7OMz2MdWyZBm+74e2SgdNZnKxKV
Hjo5C6lfZE74CR2nw1c1BmMz8Ry7bJYkbQo=
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:43:29 2026 by rpki-client