Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be93b5e-1937-300f-b724-4dfe9435a631.roa
File:                     7be93b5e-1937-300f-b724-4dfe9435a631.roa (raw, json)
Hash identifier:          ReIVMhXPxPvII/sDeh2idJtdkUpjfOXDpvk7f4p0T7E=
Subject key identifier:   D4:87:D2:2B:0A:AC:99:EB:2E:09:33:1A:80:43:51:F4:F1:48:A2:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11B66C35406950375517C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be93b5e-1937-300f-b724-4dfe9435a631.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b6:6c:35:40:69:50:37:55:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=6fed3981-6df0-4a6d-a9f9-f14fc68d94a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:1f:31:73:1e:55:b7:11:cb:6b:ae:1e:86:
                    dc:03:ae:97:15:06:42:94:14:b8:45:61:11:4e:94:
                    ff:7c:a6:8f:0b:89:2a:24:5a:f4:e6:12:68:08:0f:
                    34:d2:b2:c8:a8:03:a5:15:86:fa:9c:69:b3:06:26:
                    8d:2c:35:b0:ae:ea:79:81:83:ed:83:b4:3b:05:e1:
                    64:bc:18:60:b8:eb:82:26:95:ac:56:57:4f:fc:db:
                    36:0c:02:8b:49:88:e5:e0:d7:1f:ec:98:9d:a5:e0:
                    b0:20:92:10:38:1d:b3:a5:b3:c2:fe:ae:a5:cd:5d:
                    31:b1:da:e9:52:fb:ed:74:41:ce:e6:a7:e2:a3:c1:
                    c3:e9:82:39:be:96:8d:0b:29:15:32:18:25:61:4f:
                    bd:ef:48:3a:da:96:2b:5b:e6:32:78:08:86:d2:60:
                    6f:1b:ac:24:2a:f3:44:d9:cf:9a:a1:c9:b2:f2:8c:
                    01:56:1f:46:9e:56:9e:cb:50:a7:3a:f3:a7:55:22:
                    0c:26:b8:f7:2b:dd:42:c3:04:e3:fa:b3:22:df:6d:
                    e5:c2:36:6a:e9:66:7d:55:5e:8a:59:c6:ce:f1:e7:
                    5a:6f:c7:ec:94:96:1b:f8:57:a3:82:30:58:ec:f4:
                    b4:50:b4:a9:51:3e:8f:ca:2a:27:59:c2:62:27:54:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:87:D2:2B:0A:AC:99:EB:2E:09:33:1A:80:43:51:F4:F1:48:A2:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be93b5e-1937-300f-b724-4dfe9435a631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:33:d4:9c:58:93:a9:cc:e2:05:cc:c0:f8:76:36:d6:29:
         78:68:cf:44:d0:8c:e0:df:37:fe:26:5b:9a:72:2c:d2:47:d8:
         c3:a5:c4:b5:f1:41:64:0b:66:66:21:da:79:56:94:79:f1:f2:
         ad:f9:5b:59:92:4e:1e:74:8c:49:fe:e3:4f:e3:7a:f1:16:61:
         0a:28:6b:15:2d:78:1b:33:1e:81:51:45:16:5a:d6:4b:ca:ea:
         29:a7:ee:cf:62:dd:dc:64:d8:26:a2:ae:87:45:db:01:62:2d:
         6d:85:f6:8b:8a:66:fd:ce:9d:76:16:be:9a:10:f1:75:97:b0:
         14:25:ad:04:d2:36:cf:7a:89:70:d1:ef:65:1c:a2:4e:5f:f4:
         2c:da:1f:e4:45:be:47:ea:eb:f4:7e:86:2b:8a:67:9f:47:8e:
         dd:db:ee:a3:22:69:0c:70:a0:52:1e:6d:04:c3:e2:80:29:67:
         80:72:12:99:28:4a:ce:83:8b:58:d6:27:a8:1c:ec:5d:e5:65:
         9a:04:68:f2:84:69:3b:8a:e0:af:64:d5:81:9d:d9:ee:30:03:
         7d:48:23:c8:63:3c:1a:22:13:ee:e9:fe:79:a6:8b:27:a3:82:
         ac:3c:5d:e8:70:5b:eb:18:03:98:87:26:6c:33:3e:2c:4c:9a:
         34:bb:86:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EbZsNUBpUDdVF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
NmZlZDM5ODEtNmRmMC00YTZkLWE5ZjktZjE0ZmM2OGQ5NGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PsfMXMeVbcRy2uuHobcA66XFQZClBS4RWER
TpT/fKaPC4kqJFr05hJoCA800rLIqAOlFYb6nGmzBiaNLDWwrup5gYPtg7Q7BeFk
vBhguOuCJpWsVldP/Ns2DAKLSYjl4Ncf7JidpeCwIJIQOB2zpbPC/q6lzV0xsdrp
UvvtdEHO5qfio8HD6YI5vpaNCykVMhglYU+970g62pYrW+YyeAiG0mBvG6wkKvNE
2c+aocmy8owBVh9Gnlaey1CnOvOnVSIMJrj3K91CwwTj+rMi323lwjZq6WZ9VV6K
WcbO8edab8fslJYb+FejgjBY7PS0ULSpUT6PyionWcJiJ1RwYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNSH0isKrJnrLgkzGoBDUfTxSKJ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2JlOTNiNWUtMTkzNy0z
MDBmLWI3MjQtNGRmZTk0MzVhNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABmhM9ScWJOpzOIFzMD4djbWKXhoz0TQjODfN/4mW5pyLNJH2MOl
xLXxQWQLZmYh2nlWlHnx8q35W1mSTh50jEn+40/jevEWYQooaxUteBszHoFRRRZa
1kvK6imn7s9i3dxk2CairodF2wFiLW2F9ouKZv3OnXYWvpoQ8XWXsBQlrQTSNs96
iXDR72Ucok5f9CzaH+RFvkfq6/R+hiuKZ59Hjt3b7qMiaQxwoFIebQTD4oApZ4By
EpkoSs6Di1jWJ6gc7F3lZZoEaPKEaTuK4K9k1YGd2e4wA31II8hjPBoiE+7p/nmm
iyejgqw8XehwW+sYA5iHJmwzPixMmjS7hlI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:16 2026 by rpki-client