Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa
File:                     f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa (raw, json)
Hash identifier:          Vtt40Id8K6+ewAxBroKBc39qZQxyxZ6feKLUsKZeSBk=
Subject key identifier:   D8:9F:F3:2F:7D:47:72:6E:11:0D:0A:69:83:C2:1C:9E:12:3D:A7:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F083179F2242E8E5B7126A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:31:79:f2:24:2e:8e:5b:71:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=0b1bfde5-bc17-4dc1-820e-6fa166868661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:3c:e0:8f:d8:b3:00:8e:66:7d:0b:d5:b8:
                    0e:3b:51:9e:a5:0f:ac:b6:71:eb:17:d7:1e:a3:d3:
                    3f:ff:b4:e9:d4:4e:4f:9a:6e:65:45:7c:42:83:0d:
                    fa:1e:ee:75:f3:dd:84:2a:6f:93:a9:06:81:d0:61:
                    6a:f9:29:30:59:2e:e1:ff:8d:80:69:87:4a:d8:e9:
                    70:08:de:bd:80:b8:3b:b6:db:34:95:12:7d:58:f8:
                    42:19:00:74:92:a4:f5:c4:c2:f3:2a:af:04:55:b8:
                    93:81:5e:f9:39:26:8c:2d:97:5f:7e:a5:3f:51:c7:
                    61:2a:b1:68:f6:55:d2:ea:9e:f1:6f:e1:3d:26:8b:
                    b6:82:be:8b:85:dd:29:fa:dc:46:79:38:5b:01:4d:
                    ee:13:15:5a:90:b6:df:89:7d:04:0f:c1:7e:a1:b8:
                    1b:75:c4:30:7e:2e:07:d9:21:0f:34:75:fb:db:1a:
                    fa:b3:1f:de:3d:d0:17:af:69:69:12:63:da:8f:f5:
                    59:50:6c:5d:77:12:ac:41:0a:58:f7:71:25:a7:38:
                    bf:e6:7b:e7:17:da:e0:87:69:66:36:75:1f:0f:fa:
                    51:8c:c5:7a:b0:cc:e8:55:7b:b7:f6:a3:20:aa:b3:
                    dd:2f:c1:37:68:af:e7:96:4d:32:3f:48:99:1d:65:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9F:F3:2F:7D:47:72:6E:11:0D:0A:69:83:C2:1C:9E:12:3D:A7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f79c753b-5118-3af4-b1e1-02d9f5cf3689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:0b:69:e9:e6:b3:3a:c5:6a:b1:fe:66:36:99:2b:58:f9:
         8a:30:cb:60:83:de:66:1e:b1:5c:cc:da:c0:7f:d4:60:5e:5a:
         1a:ea:f1:35:cc:e4:9c:06:f0:bd:04:28:36:fa:dc:49:a1:00:
         71:26:28:70:aa:6f:f9:95:71:24:b4:b7:f0:7f:56:17:38:88:
         b6:65:d3:46:55:51:f4:23:38:49:3c:2c:5f:86:78:3f:e8:10:
         5e:b5:af:f2:98:3d:0f:ad:c5:5a:0d:0f:d7:8e:56:9d:ad:f0:
         a6:44:83:18:ff:9f:19:93:7f:f2:f0:6d:7b:71:49:be:f5:34:
         3d:6c:df:a7:e8:d5:d5:0f:88:6f:c0:07:0c:93:d6:be:88:5c:
         2d:c3:60:08:65:3b:97:65:56:68:64:3a:35:7e:69:82:80:d2:
         80:1a:44:07:0f:ce:99:ac:ec:b4:dd:72:12:1e:76:bb:0e:69:
         b2:15:63:41:21:16:b9:4a:49:c1:5b:f2:09:e8:06:57:4a:d4:
         7b:b4:5e:95:29:65:b7:0f:07:6d:3e:e2:cb:ee:a5:43:b8:7e:
         7c:9f:b8:a2:b7:15:e8:5d:94:08:b5:0d:1a:69:9a:dd:d6:96:
         0e:32:ba:35:98:0b:e4:99:72:98:f1:64:a6:18:2e:6a:ca:de:
         fc:00:a3:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCDF58iQujltxJqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
MGIxYmZkZTUtYmMxNy00ZGMxLTgyMGUtNmZhMTY2ODY4NjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxU84I/YswCOZn0L1bgOO1GepQ+stnHrF9ce
o9M//7Tp1E5Pmm5lRXxCgw36Hu51892EKm+TqQaB0GFq+SkwWS7h/42AaYdK2Olw
CN69gLg7tts0lRJ9WPhCGQB0kqT1xMLzKq8EVbiTgV75OSaMLZdffqU/UcdhKrFo
9lXS6p7xb+E9Jou2gr6Lhd0p+txGeThbAU3uExVakLbfiX0ED8F+obgbdcQwfi4H
2SEPNHX72xr6sx/ePdAXr2lpEmPaj/VZUGxddxKsQQpY93Elpzi/5nvnF9rgh2lm
NnUfD/pRjMV6sMzoVXu39qMgqrPdL8E3aK/nlk0yP0iZHWWxiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNif8y99R3JuEQ0KaYPCHJ4SPadbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc5Yzc1M2ItNTExOC0z
YWY0LWIxZTEtMDJkOWY1Y2YzNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACxaC2np5rM6xWqx/mY2mStY+Yowy2CD3mYesVzM2sB/1GBeWhrq
8TXM5JwG8L0EKDb63EmhAHEmKHCqb/mVcSS0t/B/Vhc4iLZl00ZVUfQjOEk8LF+G
eD/oEF61r/KYPQ+txVoND9eOVp2t8KZEgxj/nxmTf/LwbXtxSb71ND1s36fo1dUP
iG/ABwyT1r6IXC3DYAhlO5dlVmhkOjV+aYKA0oAaRAcPzpms7LTdchIedrsOabIV
Y0EhFrlKScFb8gnoBldK1Hu0XpUpZbcPB20+4svupUO4fnyfuKK3FehdlAi1DRpp
mt3Wlg4yujWYC+SZcpjxZKYYLmrK3vwAo/M=
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:38 2026 by rpki-client