Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44053e9-2648-3aa1-b814-e7d0acb3f0af.roa
File:                     e44053e9-2648-3aa1-b814-e7d0acb3f0af.roa (raw, json)
Hash identifier:          cer90n36jbMKtUK8RiDV5manqAN1E6pQRZLqEZg/fXg=
Subject key identifier:   25:F7:0C:8E:01:ED:C2:B5:29:68:1E:33:88:6A:9C:F5:12:70:98:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986EA501E8E56836737FF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44053e9-2648-3aa1-b814-e7d0acb3f0af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396595
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:ea:50:1e:8e:56:83:67:37:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4aaadc58-55df-48ee-8844-e50e6e8da6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:05:99:e6:21:a7:fd:ec:21:44:72:97:37:
                    4b:4c:26:5c:d8:f6:17:55:21:79:26:20:82:89:60:
                    a4:6d:1e:34:5b:54:6a:c9:d4:de:e3:1a:bf:0a:f9:
                    e2:29:ad:ae:0b:04:93:9e:a0:b5:1a:e9:93:93:77:
                    40:f8:76:24:76:8c:7a:f0:b3:ce:e4:d4:55:a6:04:
                    9a:c0:d5:a2:d8:ab:ba:b9:83:da:c7:c4:c8:5b:6e:
                    3f:0f:a0:c2:f9:3d:79:90:1e:29:a1:98:ce:3c:69:
                    d2:b4:5f:8b:9c:09:66:db:ff:20:53:d0:f1:61:13:
                    a9:60:12:e9:5e:d9:cb:16:22:e3:e1:d8:d3:92:20:
                    b2:0d:0f:f3:c0:cb:1e:77:b1:71:77:e6:a5:04:31:
                    63:19:96:42:4a:b3:a9:d0:a5:bb:5f:3b:3c:3f:e1:
                    95:3e:6f:67:ac:5c:78:1f:e9:98:ea:ec:c0:be:57:
                    f0:e3:70:97:8d:35:e5:0a:6f:69:14:45:1d:db:1f:
                    2b:6b:18:77:e2:d0:83:bd:3f:66:ad:db:e6:a3:e7:
                    de:d1:d5:36:d3:cf:36:96:22:2d:53:1d:7b:c3:e7:
                    52:8f:d2:74:9b:db:66:66:8c:56:aa:d8:be:cc:48:
                    38:3d:3c:75:09:4f:d6:85:ff:b4:b3:16:f2:2f:19:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:0C:8E:01:ED:C2:B5:29:68:1E:33:88:6A:9C:F5:12:70:98:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44053e9-2648-3aa1-b814-e7d0acb3f0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:18:b5:68:41:b7:c6:c8:ca:bc:40:ae:1b:07:82:bf:ab:79:
         fe:40:fb:94:51:ea:8b:a2:54:77:4b:70:aa:40:d6:9b:25:f4:
         6a:9d:ae:f4:eb:51:cd:c3:38:aa:5b:b0:99:c4:bb:58:04:14:
         9d:85:ab:b7:76:eb:d8:ee:56:91:d1:21:4d:0c:fc:19:6d:cc:
         b4:63:f4:bc:44:7c:c2:39:f4:aa:99:cd:26:c7:49:36:1a:0e:
         de:1b:75:9f:c8:f9:3e:09:13:57:6d:7a:d8:6c:5b:13:e8:2f:
         e3:ee:30:34:d0:e9:5a:80:b9:50:7e:1d:3c:19:02:d1:4b:f9:
         d1:a0:de:45:33:5a:d5:d2:2c:57:28:96:84:89:91:90:96:b0:
         7f:6d:a1:f5:ff:ae:75:4e:3b:43:0d:63:95:78:5d:be:31:86:
         68:16:e9:b8:1f:b7:ce:d2:e7:79:f3:40:6c:38:9f:06:10:8c:
         19:91:e1:b4:dc:51:66:77:e8:61:f0:38:5a:9d:17:91:b7:49:
         fa:22:a1:b8:1d:98:88:95:04:3a:0e:fd:ca:71:e7:fa:91:dc:
         5a:c2:39:ae:50:51:2a:59:39:f0:74:3b:d6:72:91:b0:9d:69:
         33:43:0c:cb:45:d3:60:91:b5:21:e0:d1:bb:86:6e:e3:5b:b1:
         54:7d:35:83
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhupQHo5Wg2c3/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGFhYWRjNTgtNTVkZi00OGVlLTg4NDQtZTUwZTZlOGRhNmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ4FmeYhp/3sIURylzdLTCZc2PYXVSF5JiCC
iWCkbR40W1RqydTe4xq/CvniKa2uCwSTnqC1GumTk3dA+HYkdox68LPO5NRVpgSa
wNWi2Ku6uYPax8TIW24/D6DC+T15kB4poZjOPGnStF+LnAlm2/8gU9DxYROpYBLp
XtnLFiLj4djTkiCyDQ/zwMsed7Fxd+alBDFjGZZCSrOp0KW7Xzs8P+GVPm9nrFx4
H+mY6uzAvlfw43CXjTXlCm9pFEUd2x8raxh34tCDvT9mrdvmo+fe0dU20882liIt
Ux17w+dSj9J0m9tmZoxWqti+zEg4PTx1CU/Whf+0sxbyLxkFgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCX3DI4B7cK1KWgeM4hqnPUScJgwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQ0MDUzZTktMjY0OC0z
YWExLWI4MTQtZTdkMGFjYjNmMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB2GLVoQbfGyMq8QK4bB4K/q3n+QPuUUeqLolR3
S3CqQNabJfRqna7061HNwziqW7CZxLtYBBSdhau3duvY7laR0SFNDPwZbcy0Y/S8
RHzCOfSqmc0mx0k2Gg7eG3WfyPk+CRNXbXrYbFsT6C/j7jA00OlagLlQfh08GQLR
S/nRoN5FM1rV0ixXKJaEiZGQlrB/baH1/651TjtDDWOVeF2+MYZoFum4H7fO0ud5
80BsOJ8GEIwZkeG03FFmd+hh8DhanReRt0n6IqG4HZiIlQQ6Dv3Kcef6kdxawjmu
UFEqWTnwdDvWcpGwnWkzQwzLRdNgkbUh4NG7hm7jW7FUfTWD
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:18:01 2026 by rpki-client