Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa
File:                     9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa (raw, json)
Hash identifier:          24qvRWAX8mwEbNttZw1Ew63mF/HmUsLwNwARSWeS0/k=
Subject key identifier:   65:02:BD:F9:F8:2B:A1:D1:EF:B7:4D:3A:42:D7:58:5B:D4:34:4B:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F62931D01B5AC1A7DD2AE2180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     40717
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1d:01:b5:ac:1a:7d:d2:ae:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=6f2f5227-8ee2-43e6-8fc9-34b64bc481bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:55:ca:b0:c8:6f:ac:2a:3a:cd:fb:d9:6e:
                    8e:c3:9d:b5:5f:d4:51:dd:12:3a:4e:dd:bf:34:d5:
                    62:a3:e2:73:3f:b1:e7:98:b8:0d:ed:69:e2:12:59:
                    93:57:a9:2e:43:4a:e8:c1:f5:58:66:7c:5a:bf:db:
                    78:36:48:61:99:64:8e:49:ee:44:e8:af:93:c9:53:
                    66:65:26:e4:da:57:00:43:71:ba:df:a4:25:bb:8c:
                    79:97:48:d2:8f:7f:3d:6c:e6:18:cc:8d:82:da:51:
                    b9:16:b7:20:6d:c3:c0:7d:2c:24:12:37:3a:49:cf:
                    0d:13:cb:90:48:a7:f5:06:3f:32:d4:57:fc:28:dc:
                    9f:32:af:39:dc:e9:b0:53:91:bf:f2:55:4c:e5:a6:
                    7f:dc:62:cb:fb:fe:bb:1b:ca:bf:ae:b0:09:aa:62:
                    ab:f7:89:65:d8:42:d7:ec:ea:5b:93:52:fd:76:79:
                    71:85:3d:b2:34:5c:8e:13:54:e2:c0:5c:5c:a8:d7:
                    42:8f:37:f9:c8:cf:f1:a1:a2:77:2f:f6:b3:43:b0:
                    b8:ed:c8:ca:85:11:79:3f:a2:08:e2:ef:6a:67:ac:
                    23:de:2b:d4:07:1b:43:75:fe:ff:43:7f:ec:65:b1:
                    41:03:cb:3f:ad:24:f6:bd:aa:e5:87:b7:4b:9b:f4:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:BD:F9:F8:2B:A1:D1:EF:B7:4D:3A:42:D7:58:5B:D4:34:4B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:a3:fc:7a:fb:15:8e:3e:25:f3:c6:fa:aa:0c:8a:e3:95:
         d7:f7:e2:a3:eb:71:6c:1c:be:9b:d7:b3:23:50:4a:41:af:f5:
         dc:df:bd:b4:01:ef:ef:c1:31:88:47:e9:41:3c:31:0a:c2:0f:
         30:d8:47:90:98:ce:cc:91:22:83:c0:00:56:f7:db:53:ff:1a:
         3d:e3:36:fa:59:e9:0a:d7:a9:10:e3:8c:97:3a:67:ec:08:1c:
         b6:8f:00:bc:2f:98:5d:e6:57:05:37:60:de:52:de:11:38:c7:
         51:e0:90:51:ba:e3:e2:41:c2:86:03:ed:19:84:a6:bd:97:7b:
         29:28:f3:94:6b:e9:90:fe:7f:37:92:26:c3:2f:fb:45:5d:4b:
         58:b1:1f:85:a5:38:21:7f:c2:cd:5e:c3:d4:3b:7d:20:e0:c3:
         a9:41:8c:ad:7c:d6:31:d3:01:ef:7a:c1:a8:1a:9c:df:cb:b8:
         1d:7c:f6:52:15:e7:bc:76:ef:67:a2:ac:2a:56:0d:42:31:b1:
         6a:ed:79:14:3f:06:0f:dc:72:94:2b:5c:48:e7:43:c0:13:6a:
         64:af:ad:17:79:6b:76:5f:1d:60:2b:c4:84:a7:17:ed:c1:ec:
         32:09:3f:18:02:91:4d:e7:78:07:fb:34:0e:69:ef:68:a7:a6:
         f0:b4:e6:0d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikx0BtawafdKuIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NmYyZjUyMjctOGVlMi00M2U2LThmYzktMzRiNjRiYzQ4MWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ZVyrDIb6wqOs372W6Ow521X9RR3RI6Tt2/
NNVio+JzP7HnmLgN7WniElmTV6kuQ0rowfVYZnxav9t4NkhhmWSOSe5E6K+TyVNm
ZSbk2lcAQ3G636Qlu4x5l0jSj389bOYYzI2C2lG5FrcgbcPAfSwkEjc6Sc8NE8uQ
SKf1Bj8y1Ff8KNyfMq853OmwU5G/8lVM5aZ/3GLL+/67G8q/rrAJqmKr94ll2ELX
7Opbk1L9dnlxhT2yNFyOE1TiwFxcqNdCjzf5yM/xoaJ3L/azQ7C47cjKhRF5P6II
4u9qZ6wj3ivUBxtDdf7/Q3/sZbFBA8s/rST2varlh7dLm/QT+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGUCvfn4K6HR77dNOkLXWFvUNEvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFiODBjM2MtOWI2OS0z
MGQ1LTlhMWQtYTM2ZWFlNDY5NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQdo/x6+xWOPiXzxvqqDIrjldf34qPrcWwcvpvXsyNQSkGv9dzf
vbQB7+/BMYhH6UE8MQrCDzDYR5CYzsyRIoPAAFb321P/Gj3jNvpZ6QrXqRDjjJc6
Z+wIHLaPALwvmF3mVwU3YN5S3hE4x1HgkFG64+JBwoYD7RmEpr2Xeyko85Rr6ZD+
fzeSJsMv+0VdS1ixH4WlOCF/ws1ew9Q7fSDgw6lBjK181jHTAe96waganN/LuB18
9lIV57x272eirCpWDUIxsWrteRQ/Bg/ccpQrXEjnQ8ATamSvrRd5a3ZfHWArxISn
F+3B7DIJPxgCkU3neAf7NA5p72inpvC05g0=
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:11:25 2026 by rpki-client