Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
File:                     ddc02893-df28-3f75-97c1-785b64e1dafd.roa (raw, json)
Hash identifier:          IhiPNe/QvUp1Y+iQzXqKy2fSjBiKUpJqvJ3giE0I2nk=
Subject key identifier:   A5:E7:07:5D:89:58:CA:1B:FD:7F:93:5E:9B:C0:E6:5A:52:88:97:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D04E367A72796E711180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     27544
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d0:4e:36:7a:72:79:6e:71:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=dcaf5cda-d46d-432b-a853-13ea0d20c06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:c2:ef:02:85:d9:a0:28:5c:ce:6a:d4:70:
                    3b:59:bf:f8:e5:8d:4c:53:92:66:3e:e9:05:6a:ca:
                    0e:69:7d:4a:7b:47:be:e8:f3:15:d7:ad:ee:2d:ff:
                    27:84:b7:de:96:5d:6c:b0:91:92:73:e0:ff:13:b0:
                    94:a4:80:90:39:fd:aa:2d:15:5c:c8:08:e1:e3:60:
                    9b:e0:84:9e:58:08:90:5a:c3:d7:0d:3a:c1:8d:d6:
                    f3:94:75:55:40:cb:47:70:a9:cc:cd:8c:3b:89:71:
                    5e:f6:40:82:8a:ea:b3:75:f7:4d:73:7f:52:df:78:
                    fb:54:b9:b7:c1:e8:f5:6b:23:c1:77:da:19:08:cc:
                    0d:ee:8a:8d:85:d9:d9:df:ba:1b:9b:37:d7:27:b0:
                    7a:25:6f:5c:c9:82:08:0c:fb:6d:cb:19:61:6b:5f:
                    7b:58:49:5e:fb:d8:f1:60:f7:4e:15:9f:73:4c:c0:
                    44:af:66:8b:78:09:ab:fc:fd:ae:46:0a:55:ac:b5:
                    72:d8:5f:5a:30:49:3d:82:6b:d1:3d:4a:d2:2b:c9:
                    a2:3e:e1:9f:2d:71:06:34:2e:2f:3f:40:b5:31:e8:
                    e2:c4:40:81:1e:c9:ba:f8:e8:5f:bd:ca:00:39:00:
                    63:9f:c9:de:47:f6:81:2e:0c:69:4d:77:58:e3:ee:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E7:07:5D:89:58:CA:1B:FD:7F:93:5E:9B:C0:E6:5A:52:88:97:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:61:3a:79:b4:b4:00:90:fe:24:89:e2:5c:f3:08:9b:e0:
         c3:d9:16:e6:88:3f:10:cd:97:77:7f:5a:a5:3b:1d:3b:19:13:
         bd:4b:82:d4:a7:d3:0d:ee:68:35:88:d4:d0:20:c4:d5:de:b5:
         90:09:96:23:8b:2a:04:ff:62:2d:52:cd:77:62:ce:1e:ab:e1:
         59:0d:5d:e0:72:0d:87:7b:c0:04:46:c6:a4:a5:04:15:33:1e:
         06:22:79:ad:d5:87:bd:74:a7:51:a2:0a:b1:ef:9b:0a:7d:2c:
         fc:f6:e5:76:87:38:c9:9a:89:36:73:88:fc:eb:81:d4:6a:fd:
         dc:4b:cb:d8:90:b9:18:48:87:7b:cc:0c:e7:6f:b7:d2:9a:a5:
         e9:a7:47:73:65:7d:7e:7f:d8:02:c8:b3:d1:b8:31:81:9b:9c:
         bc:a4:e4:a1:06:5f:9a:a9:7a:f7:e9:61:83:f5:80:2d:73:58:
         f1:16:7f:20:ea:84:45:f2:e7:97:77:eb:af:cd:12:7f:f1:9f:
         fd:ab:99:24:c0:48:90:a8:24:e5:fd:6e:d5:e6:7b:d5:68:5d:
         83:32:63:84:c2:dc:85:cc:78:39:90:e2:8d:ee:14:81:a0:03:
         a1:ba:e9:ea:33:f3:e5:ae:b9:c0:f6:ae:ac:3c:b5:cc:18:0a:
         f3:1a:96:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYtBONnpyeW5xEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
ZGNhZjVjZGEtZDQ2ZC00MzJiLWE4NTMtMTNlYTBkMjBjMDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKDC7wKF2aAoXM5q1HA7Wb/45Y1MU5JmPukF
asoOaX1Ke0e+6PMV163uLf8nhLfell1ssJGSc+D/E7CUpICQOf2qLRVcyAjh42Cb
4ISeWAiQWsPXDTrBjdbzlHVVQMtHcKnMzYw7iXFe9kCCiuqzdfdNc39S33j7VLm3
wej1ayPBd9oZCMwN7oqNhdnZ37obmzfXJ7B6JW9cyYIIDPttyxlha197WEle+9jx
YPdOFZ9zTMBEr2aLeAmr/P2uRgpVrLVy2F9aMEk9gmvRPUrSK8miPuGfLXEGNC4v
P0C1MejixECBHsm6+OhfvcoAOQBjn8neR/aBLgxpTXdY4+71XQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKXnB12JWMob/X+TXpvA5lpSiJfPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRjMDI4OTMtZGYyOC0z
Zjc1LTk3YzEtNzg1YjY0ZTFkYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKZoYTp5tLQAkP4kieJc8wib4MPZFuaIPxDNl3d/WqU7HTsZE71L
gtSn0w3uaDWI1NAgxNXetZAJliOLKgT/Yi1SzXdizh6r4VkNXeByDYd7wARGxqSl
BBUzHgYiea3Vh710p1GiCrHvmwp9LPz25XaHOMmaiTZziPzrgdRq/dxLy9iQuRhI
h3vMDOdvt9KapemnR3NlfX5/2ALIs9G4MYGbnLyk5KEGX5qpevfpYYP1gC1zWPEW
fyDqhEXy55d366/NEn/xn/2rmSTASJCoJOX9btXme9VoXYMyY4TC3IXMeDmQ4o3u
FIGgA6G66eoz8+WuucD2rqw8tcwYCvMaljk=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:03:35 2026 by rpki-client