Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e1c983-e920-3d0e-b3ac-c78520d75938.roa
File:                     e6e1c983-e920-3d0e-b3ac-c78520d75938.roa (raw, json)
Hash identifier:          o3nu3zdPUvz8nIJ9C3Pe1qToG0lSb85AcVm9jAMoOag=
Subject key identifier:   C2:A0:52:F4:6C:EC:79:93:36:3D:A4:C6:A0:2A:C5:E4:D1:88:DC:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C37EBD963416203B6AE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e1c983-e920-3d0e-b3ac-c78520d75938.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396669
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:37:eb:d9:63:41:62:03:b6:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=a3fc3181-f218-4095-a7e5-15cdb173b537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:3f:b2:df:4c:e6:33:f2:12:cf:7f:90:58:
                    ea:26:7b:e7:52:60:12:07:46:83:d8:67:69:b3:66:
                    f7:2c:8b:b9:25:bc:49:fe:4f:a5:bc:0c:ad:3f:3a:
                    d1:43:b4:ac:ba:1a:8d:46:b9:67:9a:34:e1:54:86:
                    7b:8b:98:83:e2:a1:46:8d:23:81:dd:a8:d8:98:03:
                    b9:70:7d:ae:fa:37:01:68:8b:48:07:44:b7:7d:1a:
                    07:2d:85:67:a6:0a:2b:aa:f7:b2:b1:d3:d6:23:f4:
                    53:f6:4c:d0:d5:d2:ca:26:a9:08:08:b2:eb:24:cf:
                    ab:c7:58:55:ff:34:82:e9:ef:d2:5e:0e:d4:1f:b0:
                    e2:ad:c2:21:8a:e8:7e:61:14:75:a3:b0:fa:d1:4b:
                    50:3e:a0:9c:89:bb:8d:87:31:22:9c:63:8e:45:ec:
                    7c:98:6c:c2:25:87:ca:d3:44:62:e2:ce:91:7a:e5:
                    7c:f4:d6:f6:d1:99:70:b2:51:bb:58:c7:8f:82:d1:
                    9f:67:d9:04:ec:20:b9:dd:0b:30:b2:bb:b6:a1:7c:
                    cb:c8:6b:cf:58:e1:13:ab:09:30:1b:43:b4:31:b4:
                    7f:fe:c2:9d:85:84:5a:58:71:0e:60:42:79:83:34:
                    bc:99:f3:88:05:a6:a5:f0:f9:d8:09:bc:1b:7e:ed:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A0:52:F4:6C:EC:79:93:36:3D:A4:C6:A0:2A:C5:E4:D1:88:DC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e1c983-e920-3d0e-b3ac-c78520d75938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:22:90:9e:3a:9c:4a:e0:3a:3f:6c:82:a5:69:95:32:21:
         20:78:27:5b:26:2c:e8:94:03:7a:44:bc:48:18:0d:3e:82:be:
         60:87:48:2e:60:47:ec:78:d5:ab:af:37:45:d1:27:3d:5e:68:
         5d:e4:d8:3e:92:ee:ae:c0:92:a9:df:06:1c:95:5c:61:c1:d6:
         2a:96:d5:ea:1c:d7:17:6e:22:27:ce:a5:a5:99:05:c4:49:02:
         a7:23:be:09:9b:7e:12:1f:74:07:a0:46:64:4f:c6:ab:83:a6:
         ad:4a:a9:84:5d:f1:88:6c:98:e5:42:83:b8:1d:12:54:90:4c:
         dc:03:b0:ad:ac:7e:3a:f3:76:5c:fc:5b:24:9a:e1:77:e7:50:
         66:76:7d:24:51:42:fa:03:c3:d3:a9:76:4a:26:33:96:c5:36:
         a1:1c:58:c7:69:dc:4f:d9:aa:e7:8a:de:ec:85:b4:d3:a4:b7:
         d4:84:5a:4c:cd:82:3f:ce:d4:99:7d:b2:c6:89:19:ea:49:ce:
         a6:9c:41:5f:c9:98:36:6d:7f:f1:87:d0:08:9e:54:33:c5:a2:
         17:25:c0:7f:6e:ba:23:30:1c:2d:cf:69:77:0b:5c:ca:96:ba:
         f7:80:ec:fd:ec:0d:56:9c:d7:6c:c3:a5:09:86:85:b5:fe:07:
         ee:da:3c:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHDfr2WNBYgO2rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
YTNmYzMxODEtZjIxOC00MDk1LWE3ZTUtMTVjZGIxNzNiNTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnM/st9M5jPyEs9/kFjqJnvnUmASB0aD2Gdp
s2b3LIu5JbxJ/k+lvAytPzrRQ7SsuhqNRrlnmjThVIZ7i5iD4qFGjSOB3ajYmAO5
cH2u+jcBaItIB0S3fRoHLYVnpgorqveysdPWI/RT9kzQ1dLKJqkICLLrJM+rx1hV
/zSC6e/SXg7UH7DircIhiuh+YRR1o7D60UtQPqCcibuNhzEinGOORex8mGzCJYfK
00Ri4s6ReuV89Nb20ZlwslG7WMePgtGfZ9kE7CC53Qswsru2oXzLyGvPWOETqwkw
G0O0MbR//sKdhYRaWHEOYEJ5gzS8mfOIBaal8PnYCbwbfu3uxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMKgUvRs7HmTNj2kxqAqxeTRiNxiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTZlMWM5ODMtZTkyMC0z
ZDBlLWIzYWMtYzc4NTIwZDc1OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOgIpCeOpxK4Do/bIKlaZUyISB4J1smLOiUA3pEvEgYDT6CvmCH
SC5gR+x41auvN0XRJz1eaF3k2D6S7q7AkqnfBhyVXGHB1iqW1eoc1xduIifOpaWZ
BcRJAqcjvgmbfhIfdAegRmRPxquDpq1KqYRd8YhsmOVCg7gdElSQTNwDsK2sfjrz
dlz8WySa4XfnUGZ2fSRRQvoDw9OpdkomM5bFNqEcWMdp3E/ZqueK3uyFtNOkt9SE
WkzNgj/O1Jl9ssaJGepJzqacQV/JmDZtf/GH0AieVDPFohclwH9uuiMwHC3PaXcL
XMqWuveA7P3sDVac12zDpQmGhbX+B+7aPJA=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:48:39 2026 by rpki-client