Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/379d7e03-d14a-31f9-8b7d-fc52753e139a.roa
File:                     379d7e03-d14a-31f9-8b7d-fc52753e139a.roa (raw, json)
Hash identifier:          6gLdMf1qMu4Tzug1mBuF2M3QVha843Z4RUcdxlcPSzs=
Subject key identifier:   68:4E:3A:19:DB:83:BB:FD:53:D1:75:A3:B0:7F:D7:7D:D6:F7:A5:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292D023FB4B10C71541AF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/379d7e03-d14a-31f9-8b7d-fc52753e139a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     40717
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d0:23:fb:4b:10:c7:15:41:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=02deaac7-76cd-497c-ae7b-23fda67ef7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:9a:ef:f0:17:6d:58:a4:5f:96:45:0b:bf:
                    86:60:ca:5e:d6:a5:23:13:6e:17:a0:4b:7a:cc:19:
                    06:ba:ab:c9:b8:e5:3b:79:af:16:59:9f:f4:7e:a5:
                    34:0b:21:93:8b:29:5d:fe:75:1d:d8:30:c2:7b:3c:
                    13:a7:6f:3c:35:94:e8:dc:95:ad:91:9e:23:98:31:
                    ee:42:3a:f4:6a:10:e8:27:d1:b6:6c:a3:2f:46:40:
                    1f:89:1c:89:19:df:0d:8e:e2:16:b6:f9:f4:21:c2:
                    d7:18:36:5f:9c:09:5c:89:0d:93:ba:cd:81:4f:fa:
                    f2:94:9c:e2:ef:04:9d:d0:49:c3:b6:41:d4:29:2d:
                    0a:cb:7b:bd:b3:49:ff:fe:97:3a:9b:87:58:30:2c:
                    95:27:2f:7f:b0:ec:90:a9:fc:a3:9b:2c:fe:23:49:
                    7e:bf:83:81:6d:77:4e:20:fd:20:cb:b0:91:e8:5e:
                    71:8f:e2:43:55:5a:3b:5b:b4:3e:c5:55:46:57:4b:
                    e8:45:23:9a:75:a4:9a:a3:a3:8b:0e:d3:00:86:1d:
                    c7:b2:f1:64:50:3f:a7:76:a9:bc:55:27:cf:61:97:
                    c3:62:eb:2f:f3:06:88:e6:ac:b6:75:87:71:e8:c0:
                    21:ac:f2:08:f2:8d:4f:32:c2:53:a5:77:50:32:a1:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:3A:19:DB:83:BB:FD:53:D1:75:A3:B0:7F:D7:7D:D6:F7:A5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/379d7e03-d14a-31f9-8b7d-fc52753e139a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:8e:7e:99:7e:0f:20:af:26:98:39:ed:1c:73:d6:db:b5:
         60:c4:06:0a:59:5d:df:a1:ec:30:14:fb:bd:f3:9b:b6:cc:aa:
         7b:01:62:62:b5:91:6a:ea:53:1a:1f:f6:c4:d9:5f:39:64:99:
         ce:77:6d:33:36:fb:80:ca:bf:2f:11:ab:f2:69:8b:61:6c:b4:
         b8:09:60:e6:da:44:6b:5d:d3:64:98:df:a7:d8:cf:94:52:60:
         67:98:d5:06:b9:fe:09:59:fd:88:b6:7a:39:5c:05:7c:bd:a9:
         d0:4f:88:73:d5:e1:33:02:b3:a5:45:95:64:ed:88:5b:7d:b4:
         22:52:06:c0:18:16:c7:0a:47:55:33:de:b5:35:29:2c:fe:18:
         2d:32:94:95:81:08:fa:36:5c:c3:5a:df:48:91:9a:86:4f:ff:
         a6:a8:c2:b0:a1:13:12:82:4e:73:7a:97:31:b0:18:b2:d7:5b:
         5a:a5:83:0b:22:2b:60:51:e3:dc:87:c7:47:2d:47:f8:5b:7f:
         4b:7e:6a:20:83:0c:a2:c5:15:69:c1:f4:cf:5c:20:7a:2d:2a:
         ed:8a:e8:e2:c4:cb:b0:76:57:79:1e:3e:52:d4:5d:de:18:2d:
         dc:13:c5:cc:b9:08:f7:8c:dc:1b:8b:ab:20:9b:f6:b1:0d:a0:
         20:fd:4c:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iktAj+0sQxxVBr0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MDJkZWFhYzctNzZjZC00OTdjLWFlN2ItMjNmZGE2N2VmN2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Ca7/AXbVikX5ZFC7+GYMpe1qUjE24XoEt6
zBkGuqvJuOU7ea8WWZ/0fqU0CyGTiyld/nUd2DDCezwTp288NZTo3JWtkZ4jmDHu
Qjr0ahDoJ9G2bKMvRkAfiRyJGd8NjuIWtvn0IcLXGDZfnAlciQ2Tus2BT/rylJzi
7wSd0EnDtkHUKS0Ky3u9s0n//pc6m4dYMCyVJy9/sOyQqfyjmyz+I0l+v4OBbXdO
IP0gy7CR6F5xj+JDVVo7W7Q+xVVGV0voRSOadaSao6OLDtMAhh3HsvFkUD+ndqm8
VSfPYZfDYusv8waI5qy2dYdx6MAhrPII8o1PMsJTpXdQMqHQbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGhOOhnbg7v9U9F1o7B/133W96VqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzc5ZDdlMDMtZDE0YS0z
MWY5LThiN2QtZmM1Mjc1M2UxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEeejn6Zfg8gryaYOe0cc9bbtWDEBgpZXd+h7DAU+73zm7bMqnsB
YmK1kWrqUxof9sTZXzlkmc53bTM2+4DKvy8Rq/Jpi2FstLgJYObaRGtd02SY36fY
z5RSYGeY1Qa5/glZ/Yi2ejlcBXy9qdBPiHPV4TMCs6VFlWTtiFt9tCJSBsAYFscK
R1Uz3rU1KSz+GC0ylJWBCPo2XMNa30iRmoZP/6aowrChExKCTnN6lzGwGLLXW1ql
gwsiK2BR49yHx0ctR/hbf0t+aiCDDKLFFWnB9M9cIHotKu2K6OLEy7B2V3kePlLU
Xd4YLdwTxcy5CPeM3BuLqyCb9rENoCD9TII=
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:31:44 2026 by rpki-client