Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177ba7ff-e871-3d3a-869c-449f153c8bb6.roa
File:                     177ba7ff-e871-3d3a-869c-449f153c8bb6.roa (raw, json)
Hash identifier:          NDXGaq4ZiAgk2v2dBDpXVh7bUPgNQHZCfRbIM91HglQ=
Subject key identifier:   FC:6E:3E:56:2C:0A:DC:91:E7:70:D6:2B:C5:65:09:68:F9:9C:A2:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2273DF1582F26DDEE5E8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177ba7ff-e871-3d3a-869c-449f153c8bb6.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     36629
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:3d:f1:58:2f:26:dd:ee:5e:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=40341c1b-7a40-44a8-a82e-76cbfa60be3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:83:8a:10:ef:39:a2:fd:25:01:e6:31:66:
                    04:4c:fd:14:aa:06:2e:b5:07:53:39:ef:47:78:a5:
                    82:ff:42:d2:3c:b3:95:b9:c8:ce:7b:16:dc:12:5e:
                    ff:ed:1b:fc:e4:10:5f:3b:09:2e:f7:b4:cd:71:4d:
                    d6:34:da:fb:77:50:e7:9f:a2:83:7c:41:94:0a:57:
                    48:56:41:8c:bb:6f:32:27:f5:39:8b:79:4b:ca:2d:
                    b5:95:3e:32:fa:98:c7:17:25:e0:b6:c1:06:87:ad:
                    84:2d:15:2d:32:4e:ab:c7:3a:52:95:5d:31:d5:91:
                    d5:0c:45:95:ce:0a:4f:42:5c:1c:ba:23:7f:f7:57:
                    42:c7:90:9d:44:c7:b4:88:ab:31:75:a7:f1:27:01:
                    f3:9b:bf:be:b0:56:eb:31:ae:66:92:b8:3c:3a:02:
                    cc:8c:b6:ee:61:e6:84:de:6b:3e:d8:14:3b:bc:5f:
                    f0:1d:29:73:24:7a:09:7c:c6:a2:04:9a:18:df:ad:
                    67:ea:06:f8:0e:d0:d5:cc:96:38:40:cf:8a:0c:c9:
                    e3:5c:96:e0:49:00:9f:8e:ef:a9:a7:87:85:d3:ee:
                    06:80:e0:47:21:d2:e5:97:eb:d0:5e:1b:79:3b:30:
                    bd:8d:19:20:01:2c:b0:94:ce:b0:55:80:34:05:8b:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6E:3E:56:2C:0A:DC:91:E7:70:D6:2B:C5:65:09:68:F9:9C:A2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177ba7ff-e871-3d3a-869c-449f153c8bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:36:31:a9:5f:60:97:34:07:33:1d:ca:81:d4:d3:03:31:
         fa:0d:db:75:c1:c1:75:28:f3:14:47:ab:85:00:d3:6a:eb:b0:
         ff:21:07:d6:c8:93:35:02:98:11:22:22:6f:74:ff:cc:db:83:
         fa:16:b1:16:52:1b:40:a7:2b:dd:29:11:b1:96:3d:a9:f5:fb:
         c7:98:4e:69:48:38:8d:01:04:ff:9c:73:f0:23:ea:ff:30:38:
         d5:93:d1:fc:52:09:4a:0f:4a:8a:12:08:f3:d7:f9:b0:ca:aa:
         a8:c8:a6:b2:d5:f2:8d:8d:6a:1d:67:d2:40:22:6c:aa:6b:d1:
         fc:d0:12:09:63:ec:f4:85:23:49:ef:bb:38:7b:1c:7e:9b:4c:
         0f:1a:70:88:89:98:e9:8c:ba:09:57:de:2a:da:0d:d2:90:06:
         f7:5e:13:34:dd:0b:52:00:5f:8e:5c:54:1e:20:a4:6c:fb:1e:
         0a:88:b6:1c:03:06:4d:9b:35:81:87:e5:19:f6:a4:bc:4c:55:
         64:8f:17:f7:1f:1c:47:f4:c1:f6:25:0a:39:e7:3b:90:44:b1:
         3c:90:39:3e:39:d8:7d:72:2f:63:6a:68:75:8d:de:5d:26:8e:
         4c:d4:5f:be:fb:0c:63:1e:38:df:d0:34:36:51:1b:9f:1d:26:
         f5:5a:f9:6c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7iJz3xWC8m3e5ejwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
NDAzNDFjMWItN2E0MC00NGE4LWE4MmUtNzZjYmZhNjBiZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZGDihDvOaL9JQHmMWYETP0UqgYutQdTOe9H
eKWC/0LSPLOVucjOexbcEl7/7Rv85BBfOwku97TNcU3WNNr7d1Dnn6KDfEGUCldI
VkGMu28yJ/U5i3lLyi21lT4y+pjHFyXgtsEGh62ELRUtMk6rxzpSlV0x1ZHVDEWV
zgpPQlwcuiN/91dCx5CdRMe0iKsxdafxJwHzm7++sFbrMa5mkrg8OgLMjLbuYeaE
3ms+2BQ7vF/wHSlzJHoJfMaiBJoY361n6gb4DtDVzJY4QM+KDMnjXJbgSQCfju+p
p4eF0+4GgOBHIdLll+vQXht5OzC9jRkgASywlM6wVYA0BYuwgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPxuPlYsCtyR53DWK8VlCWj5nKLaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTc3YmE3ZmYtZTg3MS0z
ZDNhLTg2OWMtNDQ5ZjE1M2M4YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAsazYxqV9glzQHMx3KgdTTAzH6Ddt1wcF1KPMU
R6uFANNq67D/IQfWyJM1ApgRIiJvdP/M24P6FrEWUhtApyvdKRGxlj2p9fvHmE5p
SDiNAQT/nHPwI+r/MDjVk9H8UglKD0qKEgjz1/mwyqqoyKay1fKNjWodZ9JAImyq
a9H80BIJY+z0hSNJ77s4exx+m0wPGnCIiZjpjLoJV94q2g3SkAb3XhM03QtSAF+O
XFQeIKRs+x4KiLYcAwZNmzWBh+UZ9qS8TFVkjxf3HxxH9MH2JQo55zuQRLE8kDk+
Odh9ci9jamh1jd5dJo5M1F+++wxjHjjf0DQ2URufHSb1Wvls
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:48 2026 by rpki-client