Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c05e21b-735f-368b-af98-35bdfb81b6e4.roa
File:                     0c05e21b-735f-368b-af98-35bdfb81b6e4.roa (raw, json)
Hash identifier:          pfQfT0c8gzGHWkMkM7jaBnZ05pUdVDEa/fPHFmOfaF8=
Subject key identifier:   E5:33:80:2F:31:06:01:F8:B6:28:72:E3:4F:CF:25:FA:9E:FD:D9:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF911A285255DB795A4680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c05e21b-735f-368b-af98-35bdfb81b6e4.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396589
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:91:1a:28:52:55:db:79:5a:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ec524267-30bf-490c-a54c-2433d992a1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:51:24:53:e8:99:48:13:7c:1b:2b:f2:78:
                    ec:59:ff:9a:a4:c4:66:07:20:d7:a7:3a:80:df:05:
                    fd:7c:2b:53:b9:01:6b:60:58:87:9c:a5:a8:d3:3a:
                    c8:53:b5:8e:18:23:17:7b:6f:2a:74:cb:75:7f:47:
                    1b:e9:c8:60:11:02:d3:da:f6:f0:31:91:a7:37:8d:
                    ad:fa:59:03:9d:bf:7a:b6:5e:80:4b:ee:a6:0d:5b:
                    83:70:c1:19:3f:df:2a:d6:b1:db:25:d2:7f:70:b1:
                    17:ff:96:88:97:13:e2:ae:1a:d9:bb:f3:45:63:9e:
                    4e:cd:71:5f:26:e3:85:71:d5:31:a8:41:af:ff:1c:
                    64:df:7d:18:96:59:82:ae:11:a2:a5:aa:45:6b:6c:
                    8d:3f:49:4a:bd:9d:55:b3:c6:88:76:03:36:a3:fa:
                    79:ca:30:85:24:7b:1d:61:2e:03:19:0e:57:11:da:
                    8d:60:03:7b:ae:32:a9:e1:92:75:2b:a8:6f:85:da:
                    0e:b6:d2:e3:1c:26:c4:c9:db:8f:13:7a:93:e9:4b:
                    c6:43:f9:e0:86:2e:de:58:d1:84:61:c4:14:67:14:
                    20:89:13:75:99:a0:19:d8:a8:c8:da:5c:86:5d:09:
                    6d:03:30:0e:bd:2e:73:4a:dc:50:fd:d7:66:3f:20:
                    d7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:33:80:2F:31:06:01:F8:B6:28:72:E3:4F:CF:25:FA:9E:FD:D9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c05e21b-735f-368b-af98-35bdfb81b6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:34:db:58:a6:eb:1c:60:74:87:40:d9:3e:c7:f1:02:b2:91:
         9c:89:ad:a6:f7:bf:39:24:97:e6:b4:78:c3:5a:7e:28:07:81:
         37:0b:02:af:87:1b:8d:d2:85:6a:68:a4:87:08:ba:5a:a7:3c:
         a1:6b:d9:4e:df:08:69:af:2f:29:79:fb:e2:52:ba:d9:49:f2:
         21:ba:3a:76:b8:4a:b5:7d:b6:5f:fa:76:89:d0:00:85:7b:bd:
         41:19:8f:4a:3f:e3:4c:6f:2f:77:f3:ba:13:f9:f3:e7:2c:34:
         f9:3b:a8:c8:76:52:c4:73:52:06:f8:02:8e:0a:82:4d:8f:c0:
         b6:66:25:03:c8:37:25:00:97:4f:69:66:3a:c9:30:87:07:10:
         e5:50:87:8c:27:b6:6e:cd:be:ef:96:82:d6:7c:51:24:6e:43:
         d3:ba:a5:06:24:08:e4:f6:df:cf:96:40:8e:03:08:bb:8f:66:
         44:cf:49:6b:5d:28:e7:54:64:1e:f5:60:35:7e:7b:d4:a8:40:
         0f:30:5a:a7:b0:1e:3c:4c:96:c3:8c:fc:14:d5:12:76:5a:e9:
         cd:dc:23:db:0f:84:b7:c7:ee:86:92:87:01:0c:bd:fa:e0:59:
         17:af:f8:89:9d:13:c5:2f:8a:e9:c9:bf:3c:55:bc:be:e6:aa:
         97:96:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:48 2026 by rpki-client