Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af32ff80-c7de-3ca0-9f7b-e4c32aa636c3.roa
File:                     af32ff80-c7de-3ca0-9f7b-e4c32aa636c3.roa (raw, json)
Hash identifier:          wbfLyIzXWn8jNM+mnf1RGQGZWbjxzBWDMl5aum4oplA=
Subject key identifier:   DE:7C:32:70:DC:98:10:1D:7C:CE:E9:7E:CF:15:66:1B:2C:55:42:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2274607967BA87365498480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af32ff80-c7de-3ca0-9f7b-e4c32aa636c3.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396540
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:46:07:96:7b:a8:73:65:49:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=7b98883a-dcd5-4f34-b9c1-ff3c69bba6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:34:a0:88:82:ce:b8:11:a5:fe:15:2f:ea:
                    30:4a:86:c6:86:f3:95:4a:a8:7d:a6:92:9b:fb:61:
                    bb:ba:73:e6:1f:5c:0c:2d:ec:82:7c:f2:e8:e8:94:
                    d6:50:e8:22:62:49:f0:0f:d2:aa:c0:54:50:4e:71:
                    d9:27:8d:95:a1:14:46:70:d5:a1:df:77:ec:41:a3:
                    c4:95:1d:1f:cf:cb:a0:bf:4b:57:b5:8c:da:c3:0c:
                    c7:3f:e5:50:64:15:f0:82:17:c0:08:ba:51:84:0f:
                    0b:ae:99:71:29:d9:7e:c7:ef:bb:c9:fb:9f:99:fc:
                    4e:53:9b:24:fd:a5:cc:e4:5c:1b:e8:bf:8e:01:47:
                    d8:2f:27:5e:16:58:36:50:25:91:a0:e0:d2:88:5c:
                    7f:38:e3:bf:f6:59:ec:29:64:cc:4d:28:90:9f:5e:
                    a4:b0:b2:bc:1f:f4:f3:76:6d:14:cf:86:51:f7:42:
                    bb:54:ee:f1:a6:76:2d:3d:08:50:6a:6b:17:2d:1c:
                    25:5d:e8:69:4a:1d:15:96:5f:43:25:71:9c:15:4a:
                    0c:89:22:d0:31:58:8a:87:a8:5d:e5:51:e1:41:aa:
                    2c:78:51:f6:14:b5:e5:0f:d9:39:67:5c:af:e0:c6:
                    5e:ef:fe:13:22:6f:fe:7a:14:2d:3d:80:af:ca:25:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:32:70:DC:98:10:1D:7C:CE:E9:7E:CF:15:66:1B:2C:55:42:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af32ff80-c7de-3ca0-9f7b-e4c32aa636c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:f5:48:a0:7a:b8:f6:fe:59:6f:58:ae:26:12:30:46:1f:
         93:07:a2:7f:15:c2:0e:74:11:5c:71:8f:65:84:86:77:a3:9c:
         7d:9d:00:a9:4c:e2:35:62:36:81:fb:84:64:53:59:6e:53:41:
         b5:7e:24:08:23:b9:9c:b8:5f:3e:f8:f2:f2:0d:85:c5:10:4d:
         f6:7c:d6:2a:e6:3d:85:4a:a2:5c:26:84:11:de:72:29:5b:bb:
         17:62:66:eb:8d:0f:44:4e:34:ed:87:dd:e8:6b:b1:f9:0b:a0:
         2c:2b:6a:4d:6c:03:1d:a2:33:7d:be:da:72:59:6a:33:24:9a:
         fb:1b:2c:29:c1:da:df:4a:0d:f7:79:87:42:e7:74:ff:cf:25:
         5b:9a:7f:d3:56:af:f0:27:49:77:41:7a:25:f9:fd:94:41:2d:
         9e:b0:05:40:96:d3:d6:fe:45:68:7b:1d:ab:f6:fd:1d:e1:23:
         09:76:6f:ff:c5:b7:33:c2:53:f2:95:d3:5a:ef:eb:14:b6:59:
         c7:ea:6d:f9:dc:96:1f:21:41:e4:01:ef:2a:dd:15:ab:ff:a0:
         9f:7d:f3:75:3e:2a:40:a6:25:be:95:90:a9:41:03:97:4f:64:
         a1:6e:f7:77:af:24:8b:ec:d3:c3:35:62:6e:a0:74:99:bf:c1:
         81:8f:9b:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7iJ0YHlnuoc2VJhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
N2I5ODg4M2EtZGNkNS00ZjM0LWI5YzEtZmYzYzY5YmJhNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS40oIiCzrgRpf4VL+owSobGhvOVSqh9ppKb
+2G7unPmH1wMLeyCfPLo6JTWUOgiYknwD9KqwFRQTnHZJ42VoRRGcNWh33fsQaPE
lR0fz8ugv0tXtYzawwzHP+VQZBXwghfACLpRhA8LrplxKdl+x++7yfufmfxOU5sk
/aXM5Fwb6L+OAUfYLydeFlg2UCWRoODSiFx/OOO/9lnsKWTMTSiQn16ksLK8H/Tz
dm0Uz4ZR90K7VO7xpnYtPQhQamsXLRwlXehpSh0Vll9DJXGcFUoMiSLQMViKh6hd
5VHhQaoseFH2FLXlD9k5Z1yv4MZe7/4TIm/+ehQtPYCvyiX0KQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN58MnDcmBAdfM7pfs8VZhssVUJnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYzMmZmODAtYzdkZS0z
Y2EwLTlmN2ItZTRjMzJhYTYzNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB64PVIoHq49v5Zb1iuJhIwRh+TB6J/FcIOdBFc
cY9lhIZ3o5x9nQCpTOI1YjaB+4RkU1luU0G1fiQII7mcuF8++PLyDYXFEE32fNYq
5j2FSqJcJoQR3nIpW7sXYmbrjQ9ETjTth93oa7H5C6AsK2pNbAMdojN9vtpyWWoz
JJr7GywpwdrfSg33eYdC53T/zyVbmn/TVq/wJ0l3QXol+f2UQS2esAVAltPW/kVo
ex2r9v0d4SMJdm//xbczwlPyldNa7+sUtlnH6m353JYfIUHkAe8q3RWr/6CfffN1
PipApiW+lZCpQQOXT2Shbvd3rySL7NPDNWJuoHSZv8GBj5vf
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:48 2026 by rpki-client