Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ed5ccb-b0bc-38fe-b4d2-9f55731c24db.roa
File:                     b3ed5ccb-b0bc-38fe-b4d2-9f55731c24db.roa (raw, json)
Hash identifier:          ewpus8vkYLxkezY5KCLl+bNzhkryieIC8Cn9eUrbTcI=
Subject key identifier:   F1:4B:CE:6D:89:DA:A3:0D:49:5F:55:03:55:48:05:09:AD:E9:2C:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7883FBCC276126245E45280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ed5ccb-b0bc-38fe-b4d2-9f55731c24db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19836
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:3f:bc:c2:76:12:62:45:e4:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94f84cc7-7391-4b54-b0ce-777af6ff7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:26:1d:56:0a:cf:9e:c6:8d:90:bb:a5:19:
                    09:61:1b:ee:0b:7a:90:64:f1:66:c1:65:b0:72:27:
                    c4:49:81:d8:10:63:49:22:8f:74:8a:84:93:4c:55:
                    b7:b7:fa:9d:c8:4e:47:7d:bc:52:ed:4d:1a:ab:9e:
                    d1:73:5f:a7:af:4f:52:21:35:ad:37:de:d5:ab:47:
                    46:c9:35:38:88:34:3a:cc:91:5a:b1:94:3d:bc:2f:
                    f9:22:ae:fb:01:8a:7c:d0:89:b8:c5:f2:e8:41:83:
                    80:4d:de:e2:a3:2b:59:bd:c8:e9:3e:03:99:c1:dc:
                    78:e0:e4:e1:2c:ad:c9:5c:ee:c6:d9:4d:3e:5b:59:
                    cf:a8:37:f3:ef:ca:9a:fb:7b:ca:e3:7b:56:ef:18:
                    9a:10:9f:3a:a9:00:23:a2:32:c4:f4:05:f4:3d:e2:
                    e4:65:01:7a:c4:82:04:67:b3:4b:16:33:43:b4:5a:
                    77:8c:a8:32:d3:b7:d2:4d:fd:dd:3b:ba:a5:33:d9:
                    97:41:54:cf:e1:9b:07:21:3d:35:65:d5:93:97:6a:
                    7e:a2:47:9b:c6:ca:e3:ae:c5:f3:dd:c2:d2:3c:c1:
                    f4:2b:92:59:c8:d7:0a:aa:33:db:c8:ee:2f:9a:13:
                    6c:36:fc:e6:98:82:2d:cd:17:5f:7d:01:e1:d8:60:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:CE:6D:89:DA:A3:0D:49:5F:55:03:55:48:05:09:AD:E9:2C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ed5ccb-b0bc-38fe-b4d2-9f55731c24db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:4b:1f:7a:3f:38:4b:e7:33:db:ab:b4:f5:59:5e:f2:d4:
         08:15:0f:34:53:0c:c2:48:c0:8b:ba:c4:8e:a9:83:9c:62:2a:
         7b:2d:bd:9c:ba:37:38:85:9f:02:ea:dc:2f:3b:78:fc:fb:d9:
         40:a8:4b:06:83:4a:d8:47:6d:56:9e:6f:09:5c:f1:1d:ab:3a:
         99:bf:c8:73:fe:40:bb:2f:35:b5:b8:a7:ed:53:d6:e4:41:f9:
         8b:62:2d:6e:92:8a:3e:b5:29:0b:62:0f:88:a9:fc:5c:e4:82:
         65:bd:1b:6f:28:9e:c3:65:10:35:32:1c:0f:8b:45:76:1f:6c:
         fc:d0:15:24:91:85:18:56:ba:68:6e:8f:47:f9:75:40:2a:71:
         6c:3d:21:52:45:39:aa:32:5b:5f:71:d4:5a:2d:f7:17:cf:bb:
         ee:31:90:cc:ed:66:ee:ba:eb:17:88:7b:90:97:4d:89:92:2c:
         27:72:c5:15:fc:0c:fa:14:21:31:24:64:c8:26:cc:01:7b:11:
         98:04:54:06:26:db:e9:12:74:39:0a:ca:38:59:26:2d:91:a9:
         5b:87:3c:5f:4e:2d:8b:d2:f1:36:ec:4a:7a:53:5d:8a:dd:ff:
         f3:3b:06:ea:3a:7a:5d:0d:a1:68:92:5e:5d:bc:8c:44:54:2c:
         17:7c:74:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niD+8wnYSYkXkUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTRmODRjYzctNzM5MS00YjU0LWIwY2UtNzc3YWY2ZmY3NjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbomHVYKz57GjZC7pRkJYRvuC3qQZPFmwWWw
cifESYHYEGNJIo90ioSTTFW3t/qdyE5HfbxS7U0aq57Rc1+nr09SITWtN97Vq0dG
yTU4iDQ6zJFasZQ9vC/5Iq77AYp80Im4xfLoQYOATd7ioytZvcjpPgOZwdx44OTh
LK3JXO7G2U0+W1nPqDfz78qa+3vK43tW7xiaEJ86qQAjojLE9AX0PeLkZQF6xIIE
Z7NLFjNDtFp3jKgy07fSTf3dO7qlM9mXQVTP4ZsHIT01ZdWTl2p+okebxsrjrsXz
3cLSPMH0K5JZyNcKqjPbyO4vmhNsNvzmmIItzRdffQHh2GCO+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPFLzm2J2qMNSV9VA1VIBQmt6SxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjNlZDVjY2ItYjBiYy0z
OGZlLWI0ZDItOWY1NTczMWMyNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGo9Sx96PzhL5zPbq7T1WV7y1AgVDzRTDMJIwIu6xI6pg5xiKnst
vZy6NziFnwLq3C87ePz72UCoSwaDSthHbVaebwlc8R2rOpm/yHP+QLsvNbW4p+1T
1uRB+YtiLW6Sij61KQtiD4ip/FzkgmW9G28onsNlEDUyHA+LRXYfbPzQFSSRhRhW
umhuj0f5dUAqcWw9IVJFOaoyW19x1Fot9xfPu+4xkMztZu666xeIe5CXTYmSLCdy
xRX8DPoUITEkZMgmzAF7EZgEVAYm2+kSdDkKyjhZJi2RqVuHPF9OLYvS8TbsSnpT
XYrd//M7Buo6el0NoWiSXl28jERULBd8dBI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:16:08 2026 by rpki-client