Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908f5ba0-bd1a-322d-bd78-e6bdecb20a6f.roa
File:                     908f5ba0-bd1a-322d-bd78-e6bdecb20a6f.roa (raw, json)
Hash identifier:          Iv5t1PQdZn5Ynw075Pu9dmg0S6OE8qviodjcJy/aEO8=
Subject key identifier:   31:05:81:40:5A:1E:9F:7C:EC:B4:8A:EB:4B:77:3E:D5:D2:57:97:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7883B17637CC65EAE3E0D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908f5ba0-bd1a-322d-bd78-e6bdecb20a6f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396567
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:3b:17:63:7c:c6:5e:ae:3e:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=057974a1-7f9d-419c-bc0c-044699da35e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:c6:83:d9:97:cb:e0:a1:cc:56:76:44:bd:
                    49:04:f3:f1:73:d1:30:78:f2:7c:fd:82:be:6c:e8:
                    8e:3f:23:20:e5:f8:ea:b9:71:2b:09:09:a1:b5:41:
                    9f:b0:b8:72:87:f4:03:18:26:17:47:b7:c9:67:5c:
                    53:df:cd:ea:b2:cf:7f:36:4e:22:f5:91:5c:1d:60:
                    38:ce:0b:fa:61:09:a1:1e:ef:1f:1a:ef:5d:80:01:
                    72:d6:a6:14:7e:d3:d9:c1:c9:e1:86:d9:6d:16:73:
                    4a:db:d6:a0:16:f1:25:00:ff:fc:74:ef:8c:53:37:
                    e0:7c:87:e2:f0:56:c9:c4:6d:93:5d:4c:fc:cf:c9:
                    25:0e:2c:9f:21:b1:88:d2:ae:b7:75:28:47:36:48:
                    78:e3:84:ba:25:74:8b:7d:1c:20:94:ee:fc:bd:9b:
                    42:05:90:96:32:3b:87:76:79:fd:9a:9c:8f:fa:5e:
                    be:5f:5d:66:5d:1e:da:6c:d8:b3:ef:f5:d2:a3:4f:
                    83:91:bd:77:9d:18:df:af:d6:39:5a:c9:b9:dc:38:
                    ab:0e:14:aa:28:14:a9:67:dd:fc:78:01:9b:db:ff:
                    b3:e3:ec:e0:5b:6b:50:b7:5f:31:c9:2e:3b:7d:e0:
                    74:fd:2f:bd:38:ad:ff:a7:b8:3e:32:39:f6:fb:dc:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:05:81:40:5A:1E:9F:7C:EC:B4:8A:EB:4B:77:3E:D5:D2:57:97:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/908f5ba0-bd1a-322d-bd78-e6bdecb20a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b1:f0:f5:c8:53:09:87:99:0f:85:53:3f:e6:84:2a:69:47:
         e7:f1:a6:19:83:b9:c3:ad:49:8c:e4:d2:2e:c4:82:79:ff:50:
         e7:f2:d0:d3:37:10:22:d0:64:95:d0:e8:c6:fe:72:08:01:0a:
         f1:e7:0a:76:50:4d:22:f5:c1:e5:16:3d:fc:f4:a9:ad:91:fc:
         96:e3:b0:ba:d2:f1:d8:3c:90:c6:db:5c:cb:ea:b6:a3:56:5c:
         1f:79:b8:32:cd:81:6f:32:be:e7:3e:52:50:30:81:ca:fb:c8:
         d5:24:19:ca:48:89:f8:9d:37:74:6b:9b:68:90:a3:44:2a:36:
         25:2e:e2:fb:0b:88:2d:67:49:32:4d:c7:4e:ec:6f:02:d2:24:
         7e:0b:a6:6b:c7:4e:95:8e:20:30:a4:d9:1f:00:cc:5e:34:c4:
         bf:3e:fc:7e:da:71:22:83:dc:f8:b3:c5:8d:63:ea:e5:f8:f5:
         16:64:41:d2:b3:ce:1d:ba:d5:29:03:d5:67:3e:2e:63:88:de:
         9e:50:67:d7:63:7c:7d:19:b0:d6:c4:28:51:dd:53:6c:56:f7:
         b6:9d:ed:6c:1a:5c:2d:94:0d:77:61:ec:9d:48:39:2b:e9:be:
         59:b4:d3:4d:04:5c:db:41:13:21:01:4f:47:0c:f1:ba:84:df:
         ae:0d:45:88
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niDsXY3zGXq4+DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDU3OTc0YTEtN2Y5ZC00MTljLWJjMGMtMDQ0Njk5ZGEzNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle3Gg9mXy+ChzFZ2RL1JBPPxc9EwePJ8/YK+
bOiOPyMg5fjquXErCQmhtUGfsLhyh/QDGCYXR7fJZ1xT383qss9/Nk4i9ZFcHWA4
zgv6YQmhHu8fGu9dgAFy1qYUftPZwcnhhtltFnNK29agFvElAP/8dO+MUzfgfIfi
8FbJxG2TXUz8z8klDiyfIbGI0q63dShHNkh444S6JXSLfRwglO78vZtCBZCWMjuH
dnn9mpyP+l6+X11mXR7abNiz7/XSo0+Dkb13nRjfr9Y5Wsm53DirDhSqKBSpZ938
eAGb2/+z4+zgW2tQt18xyS47feB0/S+9OK3/p7g+Mjn2+9xLyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDEFgUBaHp987LSK60t3PtXSV5e5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA4ZjViYTAtYmQxYS0z
MjJkLWJkNzgtZTZiZGVjYjIwYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA+x8PXIUwmHmQ+FUz/mhCppR+fxphmDucOtSYzk0i7Egnn/UOfy
0NM3ECLQZJXQ6Mb+cggBCvHnCnZQTSL1weUWPfz0qa2R/JbjsLrS8dg8kMbbXMvq
tqNWXB95uDLNgW8yvuc+UlAwgcr7yNUkGcpIifidN3Rrm2iQo0QqNiUu4vsLiC1n
STJNx07sbwLSJH4LpmvHTpWOIDCk2R8AzF40xL8+/H7acSKD3PizxY1j6uX49RZk
QdKzzh261SkD1Wc+LmOI3p5QZ9djfH0ZsNbEKFHdU2xW97ad7WwaXC2UDXdh7J1I
OSvpvlm0000EXNtBEyEBT0cM8bqE364NRYg=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:12 2026 by rpki-client