Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c7013a-e30e-30b8-8d86-a14ab5ecfed4.roa
File:                     04c7013a-e30e-30b8-8d86-a14ab5ecfed4.roa (raw, json)
Hash identifier:          hXHryHPmvSBw+OyNrUMkdiXXqfgrR9Pmc6UIa9JXUfQ=
Subject key identifier:   16:B0:FA:FC:93:A0:4D:02:78:3B:A5:19:FF:B6:77:CA:FD:4D:BE:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C4F21ED074E3CE7B96C50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c7013a-e30e-30b8-8d86-a14ab5ecfed4.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     397200
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4f:21:ed:07:4e:3c:e7:b9:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=ac1350dc-082b-4c59-a6c9-eb8044ba0572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:98:76:e0:64:27:64:23:b4:f1:2e:fc:51:
                    a5:06:9b:3a:3a:0c:a5:ef:83:09:99:11:ea:ad:75:
                    21:8d:15:fa:0f:71:f4:86:ee:2d:c8:9c:5c:c6:88:
                    c4:8d:c0:fa:2a:e1:7e:e4:a9:dc:02:1d:3b:f2:e4:
                    47:61:b8:8a:55:84:20:15:4b:c2:6b:8b:6b:7a:5c:
                    dc:a5:25:53:cb:db:2d:5c:15:46:f7:0a:0e:fd:8a:
                    9d:98:e4:c0:3d:fa:e8:9e:1e:3d:5a:ab:65:45:20:
                    94:da:94:73:32:23:9d:ff:9a:54:af:38:ec:8f:6f:
                    0d:ed:32:14:b9:8c:b7:c9:bb:65:5a:4e:29:54:5c:
                    19:6b:db:af:95:da:47:50:65:7f:d7:92:84:b2:26:
                    bf:63:58:23:83:3e:d1:70:18:1f:8f:85:e0:66:7f:
                    20:ae:53:0f:5d:3c:9f:7f:da:ba:fb:f5:b8:04:b6:
                    98:39:4f:90:b3:6d:37:e9:4c:ed:66:28:b0:90:38:
                    d6:42:8d:3d:95:97:18:02:23:39:06:34:7d:9f:7b:
                    ec:a3:1e:17:b1:dc:1e:3e:8c:f4:1a:39:44:35:9a:
                    31:9a:4a:67:7d:70:9e:a2:5f:f8:b5:08:5d:a6:d5:
                    2d:95:ef:97:9a:fb:4d:69:2c:4a:e8:e0:b0:6e:8a:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B0:FA:FC:93:A0:4D:02:78:3B:A5:19:FF:B6:77:CA:FD:4D:BE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c7013a-e30e-30b8-8d86-a14ab5ecfed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:24:b5:93:69:87:0c:3e:ef:99:7b:42:fb:a5:d3:ab:d5:e9:
         25:01:dd:5a:5d:03:bc:c4:54:53:47:83:94:fe:04:7e:45:e7:
         ba:43:4d:62:d4:46:6d:27:76:cf:1a:08:06:f4:04:c7:4d:8e:
         e7:12:74:58:8c:49:b6:94:00:63:ee:c1:0a:2c:1c:b4:cb:c6:
         67:0b:cf:7e:a0:19:07:26:0b:42:87:77:ba:ef:e3:64:bc:1e:
         55:3f:cd:d2:5f:ef:3f:22:6c:26:9a:78:9c:fa:95:53:f1:a8:
         58:f6:ce:3b:1c:28:81:bd:c5:9d:e6:ec:87:a5:59:c2:49:4a:
         8e:ef:0e:40:29:99:21:91:76:db:a1:de:48:a4:88:81:69:ee:
         7b:6e:3a:80:d8:d7:69:09:d8:56:c1:8e:fe:13:7d:b6:b4:e5:
         b1:d2:c6:be:d4:cb:2f:4e:96:38:6b:72:93:8a:9a:5e:0b:bf:
         96:e8:d8:8b:03:61:a7:22:8f:9f:e9:26:73:63:5c:d7:6e:ce:
         59:3d:bb:0b:e0:f8:14:7b:5a:f7:f4:8f:51:a2:e0:a0:83:de:
         a0:32:af:54:34:1a:4c:34:da:1c:ba:ad:12:df:f8:9c:e6:43:
         e0:44:20:67:ed:2e:70:8e:d0:8c:a7:00:58:96:9a:84:d6:bd:
         8b:4b:b0:9e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE61fE8h7QdOPOe5bFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
YWMxMzUwZGMtMDgyYi00YzU5LWE2YzktZWI4MDQ0YmEwNTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3aYduBkJ2QjtPEu/FGlBps6Ogyl74MJmRHq
rXUhjRX6D3H0hu4tyJxcxojEjcD6KuF+5KncAh078uRHYbiKVYQgFUvCa4trelzc
pSVTy9stXBVG9woO/YqdmOTAPfronh49WqtlRSCU2pRzMiOd/5pUrzjsj28N7TIU
uYy3ybtlWk4pVFwZa9uvldpHUGV/15KEsia/Y1gjgz7RcBgfj4XgZn8grlMPXTyf
f9q6+/W4BLaYOU+Qs2036UztZiiwkDjWQo09lZcYAiM5BjR9n3vsox4XsdwePoz0
GjlENZoxmkpnfXCeol/4tQhdptUtle+XmvtNaSxK6OCwborkSQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBaw+vyToE0CeDulGf+2d8r9Tb7OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRjNzAxM2EtZTMwZS0z
MGI4LThkODYtYTE0YWI1ZWNmZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBIJLWTaYcMPu+Ze0L7pdOr1eklAd1aXQO8xFRT
R4OU/gR+Ree6Q01i1EZtJ3bPGggG9ATHTY7nEnRYjEm2lABj7sEKLBy0y8ZnC89+
oBkHJgtCh3e67+NkvB5VP83SX+8/Imwmmnic+pVT8ahY9s47HCiBvcWd5uyHpVnC
SUqO7w5AKZkhkXbbod5IpIiBae57bjqA2NdpCdhWwY7+E322tOWx0sa+1MsvTpY4
a3KTippeC7+W6NiLA2GnIo+f6SZzY1zXbs5ZPbsL4PgUe1r39I9RouCgg96gMq9U
NBpMNNocuq0S3/ic5kPgRCBn7S5wjtCMpwBYlpqE1r2LS7Ce
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:47 2026 by rpki-client