Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa
File:                     27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa (raw, json)
Hash identifier:          MaEcVoY55Xc4zQ04B7WvBi4AZXdJ2Ty3NZzki/N+OWw=
Subject key identifier:   0F:60:99:41:86:7F:F3:12:2D:BD:2D:D1:59:2B:9F:F7:71:5A:B9:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C5B8DC4FDDB8D5CBBE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396588
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c5:b8:dc:4f:dd:b8:d5:cb:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d877f366-eb12-40b2-8600-03a4325da290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:c4:70:5d:7e:d0:64:f9:d2:ce:09:ff:3d:
                    f8:25:1c:f9:ae:7a:df:d4:f7:42:8a:38:02:0d:34:
                    74:ed:89:c8:09:bf:8f:3c:d7:66:a3:ea:b1:b3:32:
                    1e:40:3d:ec:c2:98:68:e6:ed:48:ce:f4:e3:bb:3d:
                    e7:28:64:96:76:3b:b3:9c:da:bf:23:b3:ed:64:7f:
                    01:2f:22:30:07:f0:eb:64:67:73:8a:02:44:85:4f:
                    32:ea:f5:20:82:02:ee:42:d7:8a:da:08:e5:f5:3b:
                    39:43:df:39:06:5d:54:87:be:01:aa:1f:41:68:9c:
                    77:40:6e:d3:31:03:e6:80:2a:d9:58:8f:56:5e:5b:
                    3e:fe:15:da:0a:a7:28:4f:d3:1f:c4:02:1e:72:3d:
                    8d:0e:41:33:22:50:32:65:da:55:f2:6b:3e:c6:ae:
                    21:72:2b:72:cd:a2:34:24:b3:37:7b:d9:8c:5c:fd:
                    d0:f1:88:cd:24:2a:97:55:22:2e:f0:e8:98:8c:58:
                    c7:a3:31:0e:08:59:22:23:c1:43:7e:7e:1c:91:cf:
                    d8:e2:6c:5f:88:be:d7:cf:e0:50:4e:eb:4d:ce:00:
                    b2:6a:65:58:39:80:cf:98:5a:60:84:f4:da:26:2d:
                    01:20:03:93:79:b2:72:80:40:38:de:8e:38:7a:d2:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:99:41:86:7F:F3:12:2D:BD:2D:D1:59:2B:9F:F7:71:5A:B9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:fc:15:24:42:d9:6d:50:81:57:78:4f:e0:a4:d5:ec:6c:
         75:06:d8:0e:89:26:31:ab:e6:2e:97:2b:0b:fc:68:b3:97:15:
         68:30:de:7f:0c:fd:18:f5:66:7e:6e:aa:71:19:c3:61:75:96:
         1c:43:90:cf:d5:19:3c:8d:8c:06:56:53:40:95:91:13:47:fe:
         0a:d6:45:3b:82:63:05:39:7d:ad:d0:98:51:22:57:f5:37:ee:
         16:58:2b:3c:e2:b0:f1:87:ec:ad:ae:59:88:67:3b:8a:2c:c6:
         6a:3a:25:8f:3d:6c:df:de:06:45:bc:d2:c6:60:bd:09:9b:a7:
         dc:95:e4:6a:a8:21:7e:66:d4:ce:59:57:40:77:a8:ed:4f:eb:
         3c:20:40:2c:ab:fe:b7:8d:24:b1:41:66:74:ab:b3:8e:6b:cd:
         c9:d6:ae:9e:e3:65:9a:b9:c0:12:e9:71:2c:14:0b:3b:eb:0e:
         f4:32:26:7f:ac:fa:ed:d7:af:a2:c5:4d:96:02:86:59:16:9b:
         2e:bb:bd:00:8c:d8:cb:ed:f4:d3:f7:2b:4f:0b:8f:05:28:f9:
         5a:22:bf:c9:9f:1f:91:db:00:fb:ce:ec:b2:d0:ad:d5:53:3a:
         72:c1:ef:3d:8b:61:16:fc:91:76:d2:75:da:cb:db:f1:e3:8d:
         98:a3:c3:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksW43E/duNXLvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZDg3N2YzNjYtZWIxMi00MGIyLTg2MDAtMDNhNDMyNWRhMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+LEcF1+0GT50s4J/z34JRz5rnrf1PdCijgC
DTR07YnICb+PPNdmo+qxszIeQD3swpho5u1IzvTjuz3nKGSWdjuznNq/I7PtZH8B
LyIwB/DrZGdzigJEhU8y6vUgggLuQteK2gjl9Ts5Q985Bl1Uh74Bqh9BaJx3QG7T
MQPmgCrZWI9WXls+/hXaCqcoT9MfxAIecj2NDkEzIlAyZdpV8ms+xq4hcityzaI0
JLM3e9mMXP3Q8YjNJCqXVSIu8OiYjFjHozEOCFkiI8FDfn4ckc/Y4mxfiL7Xz+BQ
TutNzgCyamVYOYDPmFpghPTaJi0BIAOTebJygEA43o44etLyNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA9gmUGGf/MSLb0t0Vkrn/dxWrkKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjdlZDY1ODYtMzdhMy0z
ZGZjLThkMmUtYWE4MjJmMWMwMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3t/BUkQtltUIFXeE/gpNXsbHUG2A6JJjGr5i6XKwv8aLOXFWgw
3n8M/Rj1Zn5uqnEZw2F1lhxDkM/VGTyNjAZWU0CVkRNH/grWRTuCYwU5fa3QmFEi
V/U37hZYKzzisPGH7K2uWYhnO4osxmo6JY89bN/eBkW80sZgvQmbp9yV5GqoIX5m
1M5ZV0B3qO1P6zwgQCyr/reNJLFBZnSrs45rzcnWrp7jZZq5wBLpcSwUCzvrDvQy
Jn+s+u3Xr6LFTZYChlkWmy67vQCM2Mvt9NP3K08LjwUo+Voiv8mfH5HbAPvO7LLQ
rdVTOnLB7z2LYRb8kXbSddrL2/HjjZijwwo=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:12:33 2026 by rpki-client