Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fd92e2-90d4-35bc-bbce-434c1f172fde.roa
File:                     a5fd92e2-90d4-35bc-bbce-434c1f172fde.roa (raw, json)
Hash identifier:          2BX9BIqMcCbWZ46vXNXkAQX4HzM9fH5rAqNvm6dVGCg=
Subject key identifier:   2E:9B:5C:96:E3:D5:55:25:4D:04:0E:0C:B5:9A:A0:8F:E6:CE:BB:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497317E86B7B59E14952C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fd92e2-90d4-35bc-bbce-434c1f172fde.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36623
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:17:e8:6b:7b:59:e1:49:52:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0364afe8-201f-4c9f-bf39-73f61653b9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:56:0d:8c:1e:22:7b:f2:da:1c:35:ea:1f:
                    5d:fe:69:98:0f:0c:11:99:3b:80:5a:19:0f:01:ca:
                    f8:92:e1:c5:68:92:94:c4:03:ad:66:57:49:86:e1:
                    2a:3d:df:5c:67:4d:f2:6a:36:39:7b:d4:cf:51:e3:
                    60:4b:d2:8e:ea:75:72:87:5d:b1:39:99:68:8a:ea:
                    f4:1c:54:f3:d7:cd:2f:c8:8b:c2:15:31:40:84:06:
                    fe:0d:ec:34:49:12:1c:63:ea:de:82:50:9e:23:65:
                    1e:61:a4:53:61:59:07:74:d6:00:f8:43:74:43:b8:
                    fa:35:aa:9b:39:7d:bb:8b:11:73:03:3b:3a:73:91:
                    66:3d:af:dd:50:04:b9:1b:71:f6:a9:1b:d5:c6:88:
                    e0:48:83:d5:fe:63:a5:1a:04:fb:6e:4b:35:63:1b:
                    e4:1e:db:8f:58:70:3e:3f:49:86:44:b4:ec:11:16:
                    31:ef:b3:ae:4a:8e:34:45:31:90:c2:ee:3f:24:de:
                    f2:82:af:f0:45:8e:e1:49:0c:7e:db:84:e1:91:c6:
                    f3:29:f6:3c:6f:e5:7b:1b:4a:df:91:a8:f9:58:74:
                    6d:09:6c:6d:79:cd:cb:f5:6b:a1:3c:cf:fe:2a:28:
                    03:c3:92:ff:97:dc:aa:7e:2f:5c:a0:4c:fe:ce:ce:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:5C:96:E3:D5:55:25:4D:04:0E:0C:B5:9A:A0:8F:E6:CE:BB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fd92e2-90d4-35bc-bbce-434c1f172fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:49:98:61:d3:88:76:6d:1c:ac:53:15:ad:85:75:22:05:3e:
         a5:09:a9:4f:05:0c:58:ef:17:a1:95:cc:65:a7:15:40:61:02:
         fe:aa:7f:23:b2:11:06:53:c0:f7:74:ed:ae:85:21:a7:ec:6b:
         fd:0e:59:77:d4:13:50:d4:98:94:b3:e1:ef:1f:ba:24:bf:eb:
         e3:ed:24:9d:2d:12:08:15:8f:f0:1b:ab:d5:2d:7f:9a:c2:23:
         fa:e1:eb:0e:b4:2a:40:bc:08:45:8c:2d:30:46:9e:ae:7c:f3:
         bc:07:91:ca:34:b1:b0:b3:77:21:be:ca:b5:3a:60:d7:c2:fc:
         fc:df:c2:c4:cb:86:54:f2:ff:8e:10:d2:5d:2a:d1:3f:80:37:
         c6:be:49:00:7e:cc:46:22:ec:fc:76:ab:2e:6d:a3:00:a4:3f:
         b5:96:15:61:60:7c:08:6a:e0:80:21:86:3b:22:e9:ff:67:fb:
         83:4a:bf:50:57:a2:80:32:6b:44:e5:2f:22:c4:e3:e5:b1:ec:
         d4:61:ca:df:2e:14:f9:26:ee:3d:74:54:e9:29:4b:6d:59:0d:
         ab:eb:70:72:bb:cf:2f:85:24:b9:73:dd:60:c3:b4:04:b8:4f:
         6e:36:bd:a7:b5:9d:e2:f4:46:27:65:67:3a:d4:d1:87:5d:52:
         26:c5:37:b3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jcxfoa3tZ4UlSwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDM2NGFmZTgtMjAxZi00YzlmLWJmMzktNzNmNjE2NTNiOWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKVWDYweInvy2hw16h9d/mmYDwwRmTuAWhkP
Acr4kuHFaJKUxAOtZldJhuEqPd9cZ03yajY5e9TPUeNgS9KO6nVyh12xOZloiur0
HFTz180vyIvCFTFAhAb+Dew0SRIcY+reglCeI2UeYaRTYVkHdNYA+EN0Q7j6Naqb
OX27ixFzAzs6c5FmPa/dUAS5G3H2qRvVxojgSIPV/mOlGgT7bks1YxvkHtuPWHA+
P0mGRLTsERYx77OuSo40RTGQwu4/JN7ygq/wRY7hSQx+24ThkcbzKfY8b+V7G0rf
kaj5WHRtCWxtec3L9WuhPM/+KigDw5L/l9yqfi9coEz+zs7P7wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC6bXJbj1VUlTQQODLWaoI/mzrvXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTVmZDkyZTItOTBkNC0z
NWJjLWJiY2UtNDM0YzFmMTcyZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCUSZhh04h2bRysUxWthXUiBT6lCalPBQxY7xeh
lcxlpxVAYQL+qn8jshEGU8D3dO2uhSGn7Gv9Dll31BNQ1JiUs+HvH7okv+vj7SSd
LRIIFY/wG6vVLX+awiP64esOtCpAvAhFjC0wRp6ufPO8B5HKNLGws3chvsq1OmDX
wvz838LEy4ZU8v+OENJdKtE/gDfGvkkAfsxGIuz8dqsubaMApD+1lhVhYHwIauCA
IYY7Iun/Z/uDSr9QV6KAMmtE5S8ixOPlsezUYcrfLhT5Ju49dFTpKUttWQ2r63By
u88vhSS5c91gw7QEuE9uNr2ntZ3i9EYnZWc61NGHXVImxTez
-----END CERTIFICATE-----
Generated at Tue Oct 6 16:06:40 2026 by rpki-client