Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
File:                     a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa (raw, json)
Hash identifier:          91oXHtzsfYjLKk7o1e2KApG/oGxwUyLIOgOxop8sFxg=
Subject key identifier:   D5:90:0A:AE:E8:2D:EF:E1:75:36:58:F7:CA:B1:F2:D6:65:96:CB:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498630A27FB04844CC764680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:30:a2:7f:b0:48:44:cc:76:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=36c8d126-312d-4f71-9e42-bdf031e6b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:51:55:5d:c9:03:51:2b:8e:a7:98:88:31:
                    1a:94:e4:e5:fc:af:62:85:75:77:3b:cd:27:fe:bf:
                    87:92:c3:bf:dd:36:50:e9:e9:20:2b:a3:8e:57:24:
                    f8:01:2a:e4:1e:ff:d9:f7:30:df:0d:67:cc:19:9c:
                    5e:03:93:b4:62:3d:6e:fb:09:ad:9d:cf:2e:4b:9b:
                    68:51:ea:9a:1d:9e:6d:0d:2b:6b:19:48:b7:9a:7b:
                    2b:c5:13:e0:41:eb:2d:7e:c9:0f:5a:31:ad:84:f8:
                    db:da:cc:9a:78:75:b7:3d:ce:89:64:91:d9:db:8d:
                    c5:11:51:00:e6:a8:18:31:72:c7:5c:04:9b:9f:47:
                    c0:0b:de:56:b3:02:13:c2:1d:9e:62:25:dc:4e:3b:
                    db:bc:9e:cb:d2:0e:3b:2e:7b:9a:01:2c:c1:17:a7:
                    0a:f8:ac:2f:34:51:a4:f5:17:d4:04:97:b0:2e:ea:
                    1b:22:7c:58:10:98:f6:a0:a9:0e:49:96:f1:b9:e7:
                    fa:ea:e1:a8:ff:c1:51:69:21:06:91:11:94:92:7a:
                    9c:b3:78:28:c6:f0:e2:7d:4c:7b:da:0b:76:c4:08:
                    d7:1c:62:2e:62:ea:b8:20:58:1f:af:95:a1:39:40:
                    ea:8a:b2:71:7b:94:ef:96:43:29:0a:a5:99:a0:60:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:0A:AE:E8:2D:EF:E1:75:36:58:F7:CA:B1:F2:D6:65:96:CB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:40:34:f9:8e:ab:3c:9c:1e:69:e1:bc:b9:ea:dd:a1:4f:d4:
         88:dc:b5:b1:c1:ca:14:f0:94:e6:67:6c:fb:66:35:1c:03:6a:
         fe:ff:61:f7:98:be:b3:9e:0e:0a:bd:af:08:77:7e:82:8d:da:
         a4:ff:de:77:b1:f6:5c:8b:f1:b3:ac:f5:71:91:90:e3:9f:fe:
         0b:22:d6:9e:9e:d0:d3:2c:b8:8f:4a:14:46:08:20:27:aa:c8:
         c2:cf:9c:e5:52:66:36:ab:9d:a1:66:28:b3:84:22:16:ae:de:
         2e:45:a4:83:a9:e7:a5:31:91:42:a7:67:fb:eb:19:5e:6f:6b:
         b0:91:c2:a0:2f:6a:ad:4c:a1:f3:9e:79:41:03:93:f3:16:ef:
         ee:c7:71:9d:c9:4d:4e:b2:79:7e:e6:86:75:b2:bd:88:74:08:
         3b:81:a2:39:46:6d:29:65:5e:8e:b9:3c:97:b2:e0:f7:e9:1a:
         14:fe:8c:3a:c7:29:b7:fe:85:b1:0f:24:d6:1a:6c:c7:50:01:
         e4:4f:a5:40:97:5d:e9:76:5e:a5:09:bc:87:9c:57:d7:7f:b1:
         67:4e:37:fc:ea:7e:70:c3:39:32:be:b9:1f:13:c3:58:8c:ef:
         36:14:df:82:7e:74:0c:da:01:58:36:ca:58:94:ca:6a:af:eb:
         b8:38:3e:1b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhjCif7BIRMx2RoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzZjOGQxMjYtMzEyZC00ZjcxLTllNDItYmRmMDMxZTZiMzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLRRVV3JA1ErjqeYiDEalOTl/K9ihXV3O80n
/r+HksO/3TZQ6ekgK6OOVyT4ASrkHv/Z9zDfDWfMGZxeA5O0Yj1u+wmtnc8uS5to
UeqaHZ5tDStrGUi3mnsrxRPgQestfskPWjGthPjb2syaeHW3Pc6JZJHZ243FEVEA
5qgYMXLHXASbn0fAC95WswITwh2eYiXcTjvbvJ7L0g47LnuaASzBF6cK+KwvNFGk
9RfUBJewLuobInxYEJj2oKkOSZbxuef66uGo/8FRaSEGkRGUknqcs3goxvDifUx7
2gt2xAjXHGIuYuq4IFgfr5WhOUDqirJxe5TvlkMpCqWZoGAbowIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNWQCq7oLe/hdTZY98qx8tZllsuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBkNjFmYmUtYzJiNC0z
Y2Q4LTg4MWItYzVmMDU2ZTAxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCxQDT5jqs8nB5p4by56t2hT9SI3LWxwcoU8JTm
Z2z7ZjUcA2r+/2H3mL6zng4Kva8Id36Cjdqk/953sfZci/GzrPVxkZDjn/4LItae
ntDTLLiPShRGCCAnqsjCz5zlUmY2q52hZiizhCIWrt4uRaSDqeelMZFCp2f76xle
b2uwkcKgL2qtTKHznnlBA5PzFu/ux3GdyU1Osnl+5oZ1sr2IdAg7gaI5Rm0pZV6O
uTyXsuD36RoU/ow6xym3/oWxDyTWGmzHUAHkT6VAl13pdl6lCbyHnFfXf7FnTjf8
6n5wwzkyvrkfE8NYjO82FN+CfnQM2gFYNspYlMpqr+u4OD4b
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:54 2026 by rpki-client