Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa
File:                     9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa (raw, json)
Hash identifier:          XdDwOtk7ezeg4OCOmGP9MOET10YNEfmfdaggrcV1IjY=
Subject key identifier:   9D:53:23:FE:5A:48:00:71:EA:3C:07:62:95:66:0B:D2:95:72:89:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11C51F7BE23980A3E568C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c5:1f:7b:e2:39:80:a3:e5:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=9f19a510-5fac-4c29-867a-8510f6e120af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:c6:fd:86:43:a1:46:7d:61:7f:f6:54:2a:
                    ab:6c:ab:b4:16:34:1b:0e:98:f3:4b:f8:c2:e5:3a:
                    be:20:10:e5:e9:a7:85:a2:dc:4c:db:00:08:11:cc:
                    b8:18:5d:06:88:a9:1b:b3:5a:a1:72:e5:d0:d2:f9:
                    5c:dd:12:98:52:97:ed:c6:69:f9:e6:09:83:80:55:
                    65:de:4a:a2:8a:f1:61:e7:3a:ab:ff:a4:64:1b:5e:
                    0a:c0:53:ad:8e:50:f5:61:4b:18:eb:17:08:1f:8f:
                    d8:c8:30:3a:70:bc:e8:13:6f:f7:90:6a:d3:f8:25:
                    52:bd:88:1b:75:84:3a:5f:63:a4:e4:0e:8d:2b:83:
                    8d:a7:9c:de:ba:ce:91:5e:32:23:80:01:ce:68:ee:
                    d2:c9:90:7d:d6:ea:8b:05:2d:01:2f:ce:d3:09:61:
                    92:72:09:25:30:67:e8:c4:ae:22:77:83:3c:e9:dc:
                    3a:72:3d:9d:d0:b7:bc:77:c5:ae:fc:d5:97:70:ec:
                    bc:8e:c2:e5:48:7d:26:b4:04:08:25:fb:cf:a7:57:
                    9a:6f:cf:69:6c:7e:ed:03:d6:fa:d0:42:d8:c3:99:
                    2f:4b:67:16:fc:c3:09:4c:5a:36:b9:e9:9e:67:68:
                    31:c0:ac:03:6c:e8:81:eb:65:3e:fc:c6:a7:2d:32:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:23:FE:5A:48:00:71:EA:3C:07:62:95:66:0B:D2:95:72:89:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:15:6e:e0:6d:00:45:d3:80:fb:93:45:62:52:c4:56:10:0f:
         5a:9c:c0:5f:72:e4:58:a0:2f:45:ed:a0:13:dd:1f:10:25:9d:
         17:d9:45:41:df:f2:1f:c7:52:64:43:78:18:f5:30:99:67:56:
         55:40:18:ec:dc:0c:b4:2d:2e:a3:63:99:ac:84:e5:65:d2:ba:
         ea:d3:b5:76:ad:a1:fd:92:c4:fd:be:d0:8b:1d:7d:34:7f:91:
         cb:9d:fb:eb:a6:60:21:59:06:a7:5f:35:5d:be:39:9f:85:31:
         41:3d:60:37:91:13:f8:de:39:63:10:6e:37:eb:39:5f:22:2e:
         b8:85:f1:f8:10:2d:35:71:51:0f:ac:a2:c0:60:e1:13:f6:fc:
         28:4c:aa:51:05:d5:a5:1d:22:e0:7a:e8:c1:75:40:e4:42:40:
         a8:e4:b2:bf:55:b2:16:00:ef:f1:33:b2:61:38:7d:ac:ff:88:
         db:e4:58:b5:50:1e:c1:94:52:d6:4f:51:0f:86:47:25:50:8f:
         93:82:f4:48:37:4e:d6:b8:ea:4f:ff:45:42:f0:96:cf:7a:46:
         df:ca:5c:da:b6:f7:ae:a6:37:17:e8:e5:58:2c:6a:e8:22:04:
         be:ed:54:f8:3b:de:db:04:54:71:88:f0:18:51:94:b9:0f:a2:
         c1:3c:64:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EcUfe+I5gKPlaMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
OWYxOWE1MTAtNWZhYy00YzI5LTg2N2EtODUxMGY2ZTEyMGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7G/YZDoUZ9YX/2VCqrbKu0FjQbDpjzS/jC
5Tq+IBDl6aeFotxM2wAIEcy4GF0GiKkbs1qhcuXQ0vlc3RKYUpftxmn55gmDgFVl
3kqiivFh5zqr/6RkG14KwFOtjlD1YUsY6xcIH4/YyDA6cLzoE2/3kGrT+CVSvYgb
dYQ6X2Ok5A6NK4ONp5zeus6RXjIjgAHOaO7SyZB91uqLBS0BL87TCWGScgklMGfo
xK4id4M86dw6cj2d0Le8d8Wu/NWXcOy8jsLlSH0mtAQIJfvPp1eab89pbH7tA9b6
0ELYw5kvS2cW/MMJTFo2uemeZ2gxwKwDbOiB62U+/ManLTIwBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ1TI/5aSABx6jwHYpVmC9KVcomdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTE3NGNiOTQtODBkMi0z
MmFhLTkwMWMtMGU3ZTFjMTI2YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACgVbuBtAEXTgPuTRWJSxFYQD1qcwF9y5FigL0XtoBPdHxAlnRfZ
RUHf8h/HUmRDeBj1MJlnVlVAGOzcDLQtLqNjmayE5WXSuurTtXatof2SxP2+0Isd
fTR/kcud++umYCFZBqdfNV2+OZ+FMUE9YDeRE/jeOWMQbjfrOV8iLriF8fgQLTVx
UQ+sosBg4RP2/ChMqlEF1aUdIuB66MF1QORCQKjksr9VshYA7/EzsmE4faz/iNvk
WLVQHsGUUtZPUQ+GRyVQj5OC9Eg3Tta46k//RULwls96Rt/KXNq2966mNxfo5Vgs
augiBL7tVPg73tsEVHGI8BhRlLkPosE8ZJ8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:24:39 2026 by rpki-client