Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa
File:                     258d71b9-f760-36ea-90b1-f9035bc9ff71.roa (raw, json)
Hash identifier:          nzn9B5ktayL2p7aYEELSuB4kirIwbnJWxjGi9rfTdM0=
Subject key identifier:   84:7A:89:13:95:08:1E:E7:75:F8:B4:D4:24:24:31:55:8B:84:55:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D149BF5B79967FB35F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396737
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d1:49:bf:5b:79:96:7f:b3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2eac7882-dce3-42e2-961c-dc811cec55be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:16:14:03:a1:db:27:53:e3:4e:d9:7f:43:
                    7f:df:79:7b:8e:7a:5a:79:52:27:3d:8a:2b:e6:6f:
                    59:7f:8b:f4:d2:81:60:e6:10:a1:c3:13:7d:50:d8:
                    5c:8f:13:39:ea:f2:98:f0:ba:89:f4:98:6d:2a:17:
                    c8:c0:a2:5a:57:05:0d:21:90:e3:73:de:d1:a1:e5:
                    28:11:1a:09:7e:1c:fb:9d:3e:b3:c8:17:71:b0:57:
                    da:a5:b7:d1:af:b7:fc:10:13:33:46:13:a6:a4:c1:
                    cd:ac:2c:26:c8:bb:54:d2:fa:4d:d5:57:03:8e:9e:
                    56:25:24:c0:81:c8:67:46:e1:54:9b:f8:60:27:e1:
                    be:c9:5f:5c:51:24:ce:23:55:d0:c0:32:aa:47:c5:
                    0b:b9:ae:80:e9:ad:75:43:71:79:5e:a5:e6:78:6c:
                    ee:ca:e1:36:c9:28:30:bb:77:03:2a:40:bd:b0:53:
                    70:95:92:fd:fc:32:2e:8f:19:af:44:47:90:d1:39:
                    1b:0b:c4:f2:d5:e7:e8:d1:a8:66:98:4d:cc:77:65:
                    86:61:f4:09:e7:e0:d2:5d:2a:4c:0b:e7:0c:6b:a9:
                    67:10:ac:ce:a4:68:8b:78:c7:8c:ce:4a:85:f4:20:
                    e1:ae:92:ba:0a:90:8c:84:99:1f:6d:05:4f:fc:b9:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:89:13:95:08:1E:E7:75:F8:B4:D4:24:24:31:55:8B:84:55:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:38:76:26:5a:4c:40:fe:2f:76:59:45:9f:d6:d9:11:58:
         e6:8f:58:98:b3:ba:7f:79:8d:85:eb:5c:5b:36:0a:15:ce:53:
         6d:1b:27:97:ca:82:a4:f9:c5:c7:5d:77:bd:91:22:ac:59:98:
         f9:fc:6a:b0:71:a5:50:42:a5:2b:eb:3f:39:dd:90:27:0c:88:
         15:a3:ba:90:59:e5:e2:f4:93:ac:0f:11:e5:82:4d:c8:bc:e7:
         bf:66:84:80:ef:bd:5f:d0:2b:84:ab:d7:e4:5b:81:df:a2:57:
         ce:ef:79:0c:c8:33:93:35:95:5c:c9:b7:64:ad:b8:dc:57:60:
         eb:c7:37:d1:8c:46:fd:39:8e:f2:8b:ff:9e:33:95:ed:11:43:
         3b:22:65:63:d1:9b:21:be:17:d8:9b:42:e0:a4:cb:12:4e:9d:
         3f:c8:eb:ce:38:59:bf:1c:84:c2:9a:c9:40:e1:54:66:53:82:
         e1:93:a6:9d:d7:a9:23:07:1b:91:7e:6b:73:e5:b5:e8:f9:4f:
         08:1a:1b:d8:b0:e8:57:23:58:ff:00:52:9f:28:db:d1:71:7a:
         43:d9:40:67:21:33:1e:0c:05:3b:23:70:61:b2:4b:e1:78:0d:
         e7:a5:f9:3b:a5:90:fe:fc:ab:fb:6b:fa:d7:74:8f:06:79:21:
         30:b6:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:43:49 2026 by rpki-client