Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa
File:                     27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa (raw, json)
Hash identifier:          jP+1zUFDMNGxJvMM6EO7xaJqlnzONV/TMJOLERWEcx8=
Subject key identifier:   E4:ED:35:E8:0E:FF:C1:62:A1:19:8E:8C:EA:7E:55:04:CD:13:BB:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A25590B5A5CF8DE564900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396641
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:25:59:0b:5a:5c:f8:de:56:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=6a4e3278-6f0c-4458-8012-4b93bf891e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:4b:b3:59:be:d6:93:6d:f1:97:26:f7:95:
                    49:78:91:90:fd:49:ed:7b:51:4a:ac:25:0e:e2:10:
                    e4:c1:a8:32:54:4e:c6:6b:96:e2:a7:fc:08:9c:3b:
                    87:93:b7:30:c4:d5:86:aa:25:1d:65:3b:dc:2c:ee:
                    23:57:13:10:d5:b2:bb:96:64:2f:dd:46:02:79:d7:
                    55:4c:56:63:58:fe:1b:96:e1:1d:02:b6:19:63:7f:
                    42:81:68:06:0f:41:73:24:2a:84:89:b3:4f:af:f5:
                    3d:03:46:6b:5f:6f:0a:0d:e4:04:d4:17:3b:89:ef:
                    01:36:09:f7:05:c0:58:89:b1:ec:7e:dc:e3:a1:a3:
                    38:13:47:26:22:a0:ba:91:1f:6d:1a:2d:e8:6f:31:
                    b1:ac:48:49:79:2d:85:23:ac:2f:77:ff:b4:1e:b6:
                    52:40:e9:83:1c:a3:03:61:5f:8f:10:9f:53:f1:03:
                    79:69:b2:31:c1:f3:15:84:be:8a:bb:d8:39:a4:53:
                    fa:60:00:87:b5:44:fd:b2:de:5a:92:02:0f:fb:d9:
                    05:21:b5:eb:90:28:81:bd:cd:e5:74:22:65:51:22:
                    18:36:54:dc:2c:e3:d9:dd:5b:54:d9:15:91:d0:b0:
                    b8:7c:9b:b0:ab:e4:34:24:44:64:ae:65:e9:cc:39:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:35:E8:0E:FF:C1:62:A1:19:8E:8C:EA:7E:55:04:CD:13:BB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:87:04:a6:8e:14:1b:99:06:de:3b:6b:c9:af:7b:69:90:
         90:38:8c:99:b0:f1:93:dc:6c:8a:21:12:62:45:67:37:ee:0b:
         9d:1e:48:f6:57:77:48:3d:da:8f:e2:ab:39:ff:42:a6:70:1f:
         b4:3b:66:d4:89:07:54:9a:3e:69:ea:6b:77:15:11:4b:1c:af:
         dc:b8:cb:f4:10:36:d6:13:a5:03:68:84:86:21:7c:d3:f1:3c:
         c8:44:82:be:c5:58:b1:95:8d:5a:8a:93:82:6b:32:42:92:d1:
         4b:af:c6:13:78:ee:67:71:b7:10:e8:24:40:b3:fa:e5:3b:f0:
         fc:c1:5e:b4:a5:d5:ed:6b:de:bf:20:9c:e6:8b:43:76:aa:82:
         b6:72:80:a8:3b:38:d0:ed:93:92:3e:9e:6a:cb:a5:eb:6c:cc:
         b6:ae:65:bc:5f:bb:be:37:cf:82:11:4a:20:4f:86:be:26:59:
         94:1a:89:29:75:ff:89:6d:06:25:3e:64:80:b0:1b:29:8d:65:
         ab:06:35:62:1c:9b:4d:47:8c:d0:de:e3:fe:30:71:fa:8e:61:
         16:c2:5f:dc:91:5c:d2:61:e6:7f:e0:d5:e6:7c:a2:ac:c0:bf:
         c0:e5:60:a2:69:16:48:f2:90:e9:d9:f2:b7:cc:b8:ef:cf:80:
         97:c5:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:03 2026 by rpki-client