Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/380d0a71-997d-3759-b2cd-5ba82310f2f8.roa
File:                     380d0a71-997d-3759-b2cd-5ba82310f2f8.roa (raw, json)
Hash identifier:          +IqSN3+kKEHXQQBB4FaSIMTkCYyYzi1H5UgfMrQU76A=
Subject key identifier:   7E:5E:2B:6B:BA:BA:95:8A:14:A0:33:89:0F:60:6F:06:B9:BC:82:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA8EC35A6186B33ECC0F92400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/380d0a71-997d-3759-b2cd-5ba82310f2f8.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     20431
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:35:a6:18:6b:33:ec:c0:f9:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=3a6c2b24-3e8f-44a1-a22f-82497fc56f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:36:61:b5:73:cf:ea:a9:33:57:8a:a0:e3:
                    b3:61:a4:19:b7:f8:9b:ff:6e:79:aa:68:38:15:1a:
                    3f:a0:c9:5c:6d:a1:67:fd:8f:8f:8e:dc:4a:6e:bd:
                    66:35:64:68:ed:34:20:87:ea:a9:37:fe:16:50:6e:
                    f0:1a:25:f9:ae:21:9f:0e:75:b3:df:22:e3:ac:e9:
                    f6:6d:c2:e4:04:03:8b:e8:bd:e4:9e:0b:36:33:d5:
                    42:a7:f1:6c:12:3d:8a:00:02:16:14:28:71:22:c4:
                    da:15:d6:1e:79:bc:31:78:65:01:c4:fe:2f:ec:9a:
                    f0:01:f6:b4:c7:8a:75:d4:16:b7:2a:5c:42:2e:3f:
                    83:11:51:cc:36:13:7a:c2:65:68:03:97:ae:dc:71:
                    96:c8:e7:d7:c5:54:b3:24:2d:a2:d2:90:2e:48:62:
                    a5:c5:c3:c3:56:7f:e6:0e:79:d7:82:7b:9e:dd:1b:
                    ff:94:5f:5b:98:11:f4:43:96:52:79:ea:54:47:22:
                    a0:03:06:c6:42:05:a8:77:0c:61:7c:12:92:4f:f6:
                    52:05:08:df:5d:16:7b:b3:2c:7d:e7:aa:d6:f9:d5:
                    03:0f:7f:ee:40:9a:59:ba:cb:7a:9b:e4:0d:c4:bc:
                    ae:bc:5a:41:df:7e:3f:df:d8:65:bf:b4:60:07:54:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5E:2B:6B:BA:BA:95:8A:14:A0:33:89:0F:60:6F:06:B9:BC:82:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/380d0a71-997d-3759-b2cd-5ba82310f2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:af:c8:ff:bc:dd:98:41:1b:85:62:de:bd:81:09:17:41:5e:
         0c:11:d7:ba:ab:c0:48:5b:5f:ce:b1:fc:aa:46:e9:59:34:c7:
         fa:ab:40:e6:54:79:e3:a7:10:f8:3f:ed:1b:29:ac:f7:8c:1b:
         ed:b3:5d:20:15:9c:42:ff:9d:71:68:5f:18:3d:04:1c:33:3c:
         9e:07:b0:01:9b:05:79:2b:20:2e:94:b0:41:a6:44:26:6e:af:
         eb:f8:de:ab:1a:f2:b4:01:4c:67:d2:08:c8:bb:06:10:e4:cb:
         9f:b6:64:c7:60:fd:2e:5f:bc:77:bd:6d:d1:a9:0d:0a:3b:dd:
         d4:87:0e:9f:50:ff:ba:9b:d6:36:21:eb:07:29:52:21:59:3d:
         d4:55:11:7d:4d:94:89:a8:56:a9:49:38:54:73:89:28:3f:85:
         2a:5c:85:59:f9:8a:e1:f3:c4:13:33:e0:c5:5c:6e:70:d5:aa:
         ec:98:8b:f5:75:6f:58:0f:53:78:28:11:d5:bd:f2:c9:77:68:
         be:d5:aa:fc:6e:6a:de:8e:ca:f4:88:31:c2:32:d6:80:e0:a5:
         99:06:33:36:cc:71:13:6d:53:e7:69:8d:9f:e5:9e:60:72:93:
         12:d7:ed:7a:4a:d7:a6:94:50:3e:b5:32:73:99:75:7c:69:6d:
         59:78:16:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6o7DWmGGsz7MD5JAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
M2E2YzJiMjQtM2U4Zi00NGExLWEyMmYtODI0OTdmYzU2ZjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh82YbVzz+qpM1eKoOOzYaQZt/ib/255qmg4
FRo/oMlcbaFn/Y+PjtxKbr1mNWRo7TQgh+qpN/4WUG7wGiX5riGfDnWz3yLjrOn2
bcLkBAOL6L3kngs2M9VCp/FsEj2KAAIWFChxIsTaFdYeebwxeGUBxP4v7JrwAfa0
x4p11Ba3KlxCLj+DEVHMNhN6wmVoA5eu3HGWyOfXxVSzJC2i0pAuSGKlxcPDVn/m
DnnXgnue3Rv/lF9bmBH0Q5ZSeepURyKgAwbGQgWodwxhfBKST/ZSBQjfXRZ7syx9
56rW+dUDD3/uQJpZust6m+QNxLyuvFpB334/39hlv7RgB1Tf9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH5eK2u6upWKFKAziQ9gbwa5vIJSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgwZDBhNzEtOTk3ZC0z
NzU5LWIyY2QtNWJhODIzMTBmMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSvyP+83ZhBG4Vi3r2BCRdBXgwR17qrwEhbX86x/KpG6Vk0x/qr
QOZUeeOnEPg/7RsprPeMG+2zXSAVnEL/nXFoXxg9BBwzPJ4HsAGbBXkrIC6UsEGm
RCZur+v43qsa8rQBTGfSCMi7BhDky5+2ZMdg/S5fvHe9bdGpDQo73dSHDp9Q/7qb
1jYh6wcpUiFZPdRVEX1NlImoVqlJOFRziSg/hSpchVn5iuHzxBMz4MVcbnDVquyY
i/V1b1gPU3goEdW98sl3aL7Vqvxuat6OyvSIMcIy1oDgpZkGMzbMcRNtU+dpjZ/l
nmBykxLX7XpK16aUUD61MnOZdXxpbVl4FhA=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:05:05 2026 by rpki-client