Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f27802-db4b-3430-a5f3-500193ec2ecb.roa
File:                     26f27802-db4b-3430-a5f3-500193ec2ecb.roa (raw, json)
Hash identifier:          mDn/B319xUHt1AmqQNMqufc/By2Sr3OINfqkzOjEHDg=
Subject key identifier:   B5:D7:28:22:21:01:95:10:BE:3B:61:00:5C:99:CF:72:C7:E5:FA:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD1F60746AEE61CDFDB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f27802-db4b-3430-a5f3-500193ec2ecb.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396704
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d1:f6:07:46:ae:e6:1c:df:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=50d27221-085c-4530-97c9-c9c08de6ec79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:02:a9:bc:07:43:ac:fb:ee:63:15:c1:6d:
                    20:21:b0:9a:6a:09:7c:d4:07:59:66:f7:69:b2:d9:
                    50:4a:b8:9f:65:fb:0c:2b:f0:9d:2c:f1:5d:d9:c8:
                    75:48:b8:8d:f0:83:e2:ac:86:dc:eb:a5:80:c3:33:
                    a3:37:e3:e2:4f:c9:28:c6:a5:ea:13:6b:fd:8c:34:
                    af:51:ff:a8:1c:0b:d3:9e:04:b8:e2:70:e2:c2:41:
                    0f:58:e0:99:c5:b6:27:1c:9a:51:7e:0c:0e:1b:18:
                    74:56:ab:fa:df:eb:0e:84:19:6e:82:24:95:d4:40:
                    93:b8:27:58:6d:b1:06:8c:ae:df:e4:8e:a4:d3:b9:
                    11:7f:30:14:62:2a:2b:6c:63:14:60:7f:3b:46:2e:
                    fa:ac:b0:57:39:d5:e6:2b:de:d3:e8:3a:dd:a0:92:
                    a6:54:82:7d:c0:2d:c4:39:65:1f:b4:f6:05:ab:be:
                    6c:bd:86:e3:b8:c7:b3:51:45:5f:6f:7e:98:ba:c7:
                    c3:f0:ff:26:e5:c9:88:8d:a3:e0:21:04:f7:74:96:
                    50:56:ca:6c:cc:b1:93:3b:02:a3:ca:b0:c8:63:a7:
                    07:af:bc:32:cc:2e:26:ae:0c:58:b7:14:90:59:b1:
                    3d:c5:2d:c4:47:f7:ad:f4:9f:18:a2:f6:6c:32:c0:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:28:22:21:01:95:10:BE:3B:61:00:5C:99:CF:72:C7:E5:FA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26f27802-db4b-3430-a5f3-500193ec2ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:cb:8b:93:2d:46:42:29:fa:63:5c:eb:57:48:42:10:e1:f6:
         d3:33:70:81:c0:25:5a:8e:63:96:00:23:99:a5:f6:16:70:1f:
         94:88:59:dd:54:db:f0:5c:ac:32:e4:5d:12:48:2f:78:71:17:
         5d:2a:32:18:63:f0:26:02:0a:86:60:d2:bd:c5:ee:91:c6:ca:
         34:61:01:c7:8c:fc:0b:04:a0:76:e8:da:2b:8e:be:2a:77:e3:
         b8:27:6d:28:ec:0e:30:29:11:4b:04:10:2d:dd:9f:7b:ec:54:
         31:f2:d5:3e:20:73:53:80:7b:e7:3d:f8:73:eb:ba:1a:71:a0:
         d2:18:30:77:91:41:3f:8d:c9:e7:12:62:73:d2:4b:47:53:e3:
         2f:3c:93:ef:4b:8d:e0:f7:fa:d5:a3:51:fc:0e:2d:90:32:a4:
         85:9e:b2:1a:ff:62:d2:55:df:4e:9d:49:7d:55:79:9e:50:d2:
         df:fc:bf:13:08:86:55:30:70:1a:62:c7:30:38:3c:1d:39:f2:
         3a:ff:97:2d:0a:09:45:04:ac:cc:dc:e1:7c:0a:7b:8f:d6:2e:
         d2:d8:25:92:72:9a:b1:aa:d6:fb:8f:12:56:02:81:45:5b:b6:
         e4:52:a7:4b:15:ea:aa:19:9c:40:43:a7:85:3e:4f:3a:f2:c4:
         03:84:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:04 2025 by rpki-client