Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa
File:                     dc6e9d8f-049e-363a-891a-f9a198b047ee.roa (raw, json)
Hash identifier:          JOjuueyK9OZTZwqPXApXx/5+sjFDh589/I7mFIs3ZXQ=
Subject key identifier:   11:0A:76:E2:52:2C:86:73:DE:9C:F6:5C:91:EE:FE:4B:2D:65:AA:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7879046CC31F995C495AA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396597
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:90:46:cc:31:f9:95:c4:95:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f394782b-50cb-43f7-b582-98a061bbb82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:6a:ea:c3:bf:c4:0f:33:34:b9:84:b6:0b:
                    36:2a:fe:09:a2:6d:c1:e3:3a:0a:14:cd:f0:58:de:
                    a2:62:4f:cf:33:dd:09:01:a3:3e:81:13:d3:9c:92:
                    de:57:44:3b:92:ce:a3:fc:e6:dc:c5:f3:cf:fd:d2:
                    6f:c4:e7:9c:a4:cf:4b:ff:38:d9:89:46:4d:16:3a:
                    40:c2:7a:23:26:ed:e5:d5:f9:de:57:49:ac:1e:15:
                    53:f4:ed:38:a7:2c:8d:d2:5f:d4:07:32:82:74:a9:
                    e2:4f:bd:4b:42:6e:6b:bc:45:d1:f3:88:b6:40:d2:
                    b9:d3:4a:1b:11:94:ea:95:bb:45:e7:2c:a3:7e:7e:
                    6a:76:9e:36:a3:be:c9:73:a4:be:e8:4f:7d:60:d3:
                    25:01:dc:52:9c:b4:45:56:e5:39:93:58:2f:c2:b6:
                    b4:ac:76:e4:8e:4a:22:65:31:47:fd:4f:55:4b:14:
                    9b:57:e4:d4:2f:58:36:3d:5e:02:0f:21:ac:f4:d4:
                    06:41:74:80:33:cb:e8:0d:6b:8e:68:6f:b6:b5:6c:
                    88:11:e8:5e:68:4f:b5:82:93:10:53:a5:e9:2b:f7:
                    30:e3:fa:30:f2:70:0e:6f:3a:83:2b:67:b3:8e:8f:
                    90:d4:f9:c4:ef:9b:bd:cd:2f:11:91:cd:7b:b5:b6:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:76:E2:52:2C:86:73:DE:9C:F6:5C:91:EE:FE:4B:2D:65:AA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:2a:4e:7b:37:61:6d:91:6b:83:8f:23:dd:d6:36:fa:77:
         65:34:9c:e7:01:55:48:a3:e6:1f:4b:74:a7:48:e6:df:58:7b:
         3a:c0:e4:53:9d:7d:4f:ef:f7:5a:bc:c8:5c:ce:3f:ca:8d:24:
         ab:55:01:d6:85:88:20:2d:3f:99:da:f4:4f:2e:8e:ee:83:01:
         db:5d:a7:31:b5:30:32:43:d0:d2:a5:7c:2a:82:52:fb:86:97:
         ed:0f:15:f7:69:21:e1:c6:4d:92:00:ad:fa:9f:d5:fe:14:2c:
         3f:34:67:78:0a:e4:70:23:84:d6:68:ba:a0:07:9f:19:b3:b9:
         b2:f7:82:44:5f:6d:56:eb:9a:17:54:08:24:25:5e:f8:93:31:
         63:c7:e9:36:4d:3c:d8:20:24:9a:6b:45:08:f3:36:e3:64:a1:
         a5:70:2e:d6:d2:cb:2b:c7:3f:5d:b8:70:85:59:d1:a4:c6:f8:
         7c:59:3a:f9:8b:ea:79:4e:0a:68:01:ef:fe:50:58:78:56:7e:
         1a:5c:cb:45:6c:5d:c4:a1:2a:b6:c6:c7:46:44:03:11:c3:22:
         2b:1b:bf:68:94:b4:a0:fb:1e:e2:19:e0:52:f5:ec:f5:0b:2f:
         b9:c2:d6:c3:87:1b:81:74:ea:1d:d4:0d:27:fa:c8:84:0f:94:
         6c:2a:9e:77
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nh5BGzDH5lcSVqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM5NDc4MmItNTBjYi00M2Y3LWI1ODItOThhMDYxYmJiODJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9dq6sO/xA8zNLmEtgs2Kv4Jom3B4zoKFM3w
WN6iYk/PM90JAaM+gRPTnJLeV0Q7ks6j/ObcxfPP/dJvxOecpM9L/zjZiUZNFjpA
wnojJu3l1fneV0msHhVT9O04pyyN0l/UBzKCdKniT71LQm5rvEXR84i2QNK500ob
EZTqlbtF5yyjfn5qdp42o77Jc6S+6E99YNMlAdxSnLRFVuU5k1gvwra0rHbkjkoi
ZTFH/U9VSxSbV+TUL1g2PV4CDyGs9NQGQXSAM8voDWuOaG+2tWyIEeheaE+1gpMQ
U6XpK/cw4/ow8nAObzqDK2ezjo+Q1PnE75u9zS8Rkc17tbYjawIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBEKduJSLIZz3pz2XJHu/kstZapOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM2ZTlkOGYtMDQ5ZS0z
NjNhLTg5MWEtZjlhMTk4YjA0N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCM2SpOezdhbZFrg48j3dY2+ndlNJznAVVIo+Yf
S3SnSObfWHs6wORTnX1P7/davMhczj/KjSSrVQHWhYggLT+Z2vRPLo7ugwHbXacx
tTAyQ9DSpXwqglL7hpftDxX3aSHhxk2SAK36n9X+FCw/NGd4CuRwI4TWaLqgB58Z
s7my94JEX21W65oXVAgkJV74kzFjx+k2TTzYICSaa0UI8zbjZKGlcC7W0ssrxz9d
uHCFWdGkxvh8WTr5i+p5TgpoAe/+UFh4Vn4aXMtFbF3EoSq2xsdGRAMRwyIrG79o
lLSg+x7iGeBS9ez1Cy+5wtbDhxuBdOod1A0n+siED5RsKp53
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:48:08 2026 by rpki-client