Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34036718-c365-3716-a0e1-e523c84f9d64.roa
File:                     34036718-c365-3716-a0e1-e523c84f9d64.roa (raw, json)
Hash identifier:          gLLB27EEdtnlMSCQuw25oZDkclb6xNEtTTipHIwNq/4=
Subject key identifier:   17:36:BB:8B:9F:72:86:5F:9F:45:EC:C3:21:46:2A:0E:42:8D:28:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB2B19ACC61BE7B66F8479080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34036718-c365-3716-a0e1-e523c84f9d64.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396605
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:9a:cc:61:be:7b:66:f8:47:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=6ad12940-f693-4735-9257-48598922a9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:91:92:df:b4:ff:f0:0f:c2:12:15:a2:ef:
                    3b:82:da:84:12:49:de:6a:28:d9:32:1c:7f:6f:a0:
                    e1:f6:e7:ea:4e:83:cc:bf:f7:44:f8:0e:54:e0:a9:
                    7c:f5:cf:10:f8:f4:6d:72:a8:fe:e3:58:a1:c8:e7:
                    2e:df:e0:de:33:e4:06:bf:10:58:a9:14:8a:5f:99:
                    3d:39:1e:1c:db:72:db:0b:dc:b0:7a:13:42:e8:b6:
                    42:96:eb:ac:ca:9c:c9:02:55:3d:69:ce:4a:9a:64:
                    66:03:8f:9d:0c:2f:c2:fc:60:d1:08:1d:c3:6b:10:
                    60:62:4c:34:ec:60:d0:e0:97:9c:58:10:b0:cc:51:
                    58:94:51:50:62:c2:ba:ef:c5:7d:f7:84:0d:37:68:
                    a2:49:53:dc:0e:56:0d:a4:1c:37:d7:b6:a8:97:fa:
                    bd:29:6d:4e:5c:40:3e:6b:01:02:56:3d:27:27:06:
                    fb:3a:9b:45:18:5e:dc:96:2a:a9:7d:be:90:8e:f2:
                    bc:72:6a:bb:fe:be:07:c5:3b:3b:1d:b5:7c:45:56:
                    30:0e:59:38:94:d9:c0:ec:e1:f7:e0:52:77:37:fe:
                    73:bc:ae:19:d2:8f:36:fb:db:ce:65:0b:55:37:8c:
                    a8:62:c4:57:8a:9f:e9:4b:5a:21:fa:e2:65:32:14:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:BB:8B:9F:72:86:5F:9F:45:EC:C3:21:46:2A:0E:42:8D:28:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34036718-c365-3716-a0e1-e523c84f9d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:58:c9:88:07:79:2e:98:5e:6d:5d:61:4b:de:91:6f:b9:46:
         bd:d6:29:a6:b8:0d:df:28:fc:46:60:33:c5:5a:11:1f:8d:97:
         97:3a:34:0c:23:42:0a:a2:81:9a:f0:5b:c6:9e:60:9b:45:59:
         2b:3e:2a:a4:66:cb:83:81:dc:b9:bb:c3:87:2c:3e:53:af:e7:
         1d:f2:e8:0d:02:70:b8:f1:f3:0a:d3:4c:9d:2a:fe:23:ba:7d:
         c6:18:f9:0e:1c:3e:67:18:2b:36:07:5f:9f:db:cf:c4:b7:01:
         21:7e:f1:dd:21:9c:13:ac:28:30:b7:f0:31:c5:71:41:2b:25:
         a3:34:78:bb:30:c3:8e:43:ec:81:d3:85:32:46:43:61:bb:09:
         2d:ff:13:73:5b:a5:c8:1f:b9:03:24:8b:b2:e4:4f:10:38:b4:
         45:45:f3:7f:de:b4:62:74:62:e3:ac:f2:f5:94:ec:ff:d4:42:
         52:b9:dc:3d:7a:9e:b3:0a:54:98:67:12:46:6e:b1:15:6d:ab:
         cf:bd:1f:e2:e1:15:1a:1a:82:4a:b5:a8:be:82:bd:72:e9:f7:
         fe:79:1c:df:30:09:8c:22:67:98:04:83:47:59:fe:8d:60:20:
         97:0b:88:f2:b7:3a:44:4b:ae:45:f8:18:d4:6e:92:b3:7f:f4:
         4a:a7:51:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ysZrMYb57ZvhHkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NmFkMTI5NDAtZjY5My00NzM1LTkyNTctNDg1OTg5MjJhOWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorGRkt+0//APwhIVou87gtqEEkneaijZMhx/
b6Dh9ufqToPMv/dE+A5U4Kl89c8Q+PRtcqj+41ihyOcu3+DeM+QGvxBYqRSKX5k9
OR4c23LbC9ywehNC6LZCluusypzJAlU9ac5KmmRmA4+dDC/C/GDRCB3DaxBgYkw0
7GDQ4JecWBCwzFFYlFFQYsK678V994QNN2iiSVPcDlYNpBw317aol/q9KW1OXEA+
awECVj0nJwb7OptFGF7cliqpfb6QjvK8cmq7/r4HxTs7HbV8RVYwDlk4lNnA7OH3
4FJ3N/5zvK4Z0o82+9vOZQtVN4yoYsRXip/pS1oh+uJlMhQ30QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBc2u4ufcoZfn0XswyFGKg5CjSjNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQwMzY3MTgtYzM2NS0z
NzE2LWEwZTEtZTUyM2M4NGY5ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFBYyYgHeS6YXm1dYUvekW+5Rr3WKaa4Dd8o/EZgM8VaER+Nl5c6
NAwjQgqigZrwW8aeYJtFWSs+KqRmy4OB3Lm7w4csPlOv5x3y6A0CcLjx8wrTTJ0q
/iO6fcYY+Q4cPmcYKzYHX5/bz8S3ASF+8d0hnBOsKDC38DHFcUErJaM0eLsww45D
7IHThTJGQ2G7CS3/E3NbpcgfuQMki7LkTxA4tEVF83/etGJ0YuOs8vWU7P/UQlK5
3D16nrMKVJhnEkZusRVtq8+9H+LhFRoagkq1qL6CvXLp9/55HN8wCYwiZ5gEg0dZ
/o1gIJcLiPK3OkRLrkX4GNRukrN/9EqnUWg=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:14 2026 by rpki-client