Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa
File:                     20744fa0-530d-37c2-bbbb-39764f2a26c6.roa (raw, json)
Hash identifier:          w/4OZmO8ugD0N/fn4StA/9tcPjTw83wVKSq4q+LNlaA=
Subject key identifier:   56:11:17:06:86:E4:4A:E7:56:7F:13:3C:40:20:36:FB:72:9D:B3:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11D0AB048E5C3AC196B440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     36617
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:d0:ab:04:8e:5c:3a:c1:96:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=70be1498-d083-4134-957d-947583d33fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:7d:b5:ab:ca:c7:38:a0:46:ab:4f:de:6c:
                    5b:18:3c:61:85:ef:4c:82:c6:e7:27:1a:2c:ce:0e:
                    33:83:d5:4e:e5:a7:f2:2c:cb:97:20:c8:08:b1:e9:
                    94:20:d2:9f:6a:b2:29:2e:74:2b:a7:82:2e:fe:b2:
                    de:59:78:33:05:5e:a2:94:80:de:05:45:c3:b7:6c:
                    aa:b4:86:6f:01:40:9a:24:a1:1d:5f:0f:1e:37:d7:
                    a2:32:c4:d5:e4:eb:73:78:23:97:cd:9a:85:ba:f4:
                    80:21:25:49:4c:0f:1a:b5:d2:4c:a1:f3:4b:77:e3:
                    f5:d4:4c:b1:b0:9b:9f:1a:31:78:0b:63:e1:ee:9a:
                    d7:38:86:a6:5c:4c:0c:f3:4d:c3:9c:8a:66:77:86:
                    be:bc:06:f0:a9:f6:73:ff:4b:2f:e5:02:8a:46:52:
                    43:26:ae:75:01:12:01:08:60:10:0e:f6:cd:d2:01:
                    f6:ca:11:e7:b6:67:4d:c6:8c:d3:c2:8d:cd:0a:83:
                    19:1e:5e:f8:bf:2a:a3:69:9a:1e:d1:69:e7:32:e3:
                    b9:19:b0:d9:63:ea:9b:90:01:6b:34:5a:9f:d1:ac:
                    70:93:46:79:41:b1:0d:35:94:ae:c9:39:ab:61:bb:
                    a4:34:b2:fb:ef:08:f1:79:1e:5e:ce:53:2f:36:e8:
                    13:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:17:06:86:E4:4A:E7:56:7F:13:3C:40:20:36:FB:72:9D:B3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:51:36:4e:46:3d:3e:e0:d9:b4:0c:99:43:1d:91:19:2e:
         5f:59:a0:a8:d0:0b:27:ca:a5:e8:3a:b8:25:52:50:37:49:43:
         17:90:4e:e4:ba:55:73:d8:77:a5:7f:09:6f:70:d1:22:32:dd:
         d9:6d:59:33:0f:bc:b7:81:b2:13:13:e9:26:9f:06:c5:5f:cf:
         09:4d:81:e0:93:24:9a:71:73:46:57:11:29:89:ce:51:05:16:
         d9:e3:cf:3d:50:35:7b:a7:ae:c7:f3:da:0c:db:a9:0c:70:0a:
         a3:f9:7e:7b:a8:28:92:f2:e5:8e:9b:5d:22:ea:fe:90:ed:c0:
         5f:b0:a4:9b:55:23:85:9a:fd:40:d4:11:da:cd:e0:85:73:78:
         d4:ad:a3:b9:cb:3e:b9:7e:75:24:08:22:60:04:bb:e1:29:ef:
         f1:d1:bd:a3:68:f9:4c:26:44:78:54:cb:6c:96:f5:4e:02:6b:
         ac:fe:bc:5c:6b:7d:d4:38:e5:fd:17:24:db:5b:b8:fd:8b:92:
         5b:0c:ee:55:7e:f7:9b:5d:0d:b7:f1:7b:97:d5:39:86:86:b4:
         64:28:6e:2b:da:c2:dc:a6:3f:37:58:5f:bf:e1:b5:e8:a0:d4:
         da:75:3b:6a:aa:72:5a:12:d3:ea:33:2b:f2:2d:58:4e:4b:f6:
         60:ef:e3:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EdCrBI5cOsGWtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
NzBiZTE0OTgtZDA4My00MTM0LTk1N2QtOTQ3NTgzZDMzZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iV9tavKxzigRqtP3mxbGDxhhe9MgsbnJxos
zg4zg9VO5afyLMuXIMgIsemUINKfarIpLnQrp4Iu/rLeWXgzBV6ilIDeBUXDt2yq
tIZvAUCaJKEdXw8eN9eiMsTV5OtzeCOXzZqFuvSAISVJTA8atdJMofNLd+P11Eyx
sJufGjF4C2Ph7prXOIamXEwM803DnIpmd4a+vAbwqfZz/0sv5QKKRlJDJq51ARIB
CGAQDvbN0gH2yhHntmdNxozTwo3NCoMZHl74vyqjaZoe0WnnMuO5GbDZY+qbkAFr
NFqf0axwk0Z5QbENNZSuyTmrYbukNLL77wjxeR5ezlMvNugTOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFYRFwaG5ErnVn8TPEAgNvtynbNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA3NDRmYTAtNTMwZC0z
N2MyLWJiYmItMzk3NjRmMmEyNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADXgUTZORj0+4Nm0DJlDHZEZLl9ZoKjQCyfKpeg6uCVSUDdJQxeQ
TuS6VXPYd6V/CW9w0SIy3dltWTMPvLeBshMT6SafBsVfzwlNgeCTJJpxc0ZXESmJ
zlEFFtnjzz1QNXunrsfz2gzbqQxwCqP5fnuoKJLy5Y6bXSLq/pDtwF+wpJtVI4Wa
/UDUEdrN4IVzeNSto7nLPrl+dSQIImAEu+Ep7/HRvaNo+UwmRHhUy2yW9U4Ca6z+
vFxrfdQ45f0XJNtbuP2LklsM7lV+95tdDbfxe5fVOYaGtGQobivawtymPzdYX7/h
teig1Np1O2qqcloS0+ozK/ItWE5L9mDv45I=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:04:53 2026 by rpki-client