Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44aacdc8-a67c-3e85-81c0-fa903e1440f7.roa
File:                     44aacdc8-a67c-3e85-81c0-fa903e1440f7.roa (raw, json)
Hash identifier:          jAM6GV/Cl2RSURVU4UUxwp2SCW32ue7RvnylSlRwshI=
Subject key identifier:   7E:6B:95:15:D9:1B:BC:90:9A:BF:39:E5:8C:73:7A:43:BD:18:49:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A3514D127D2389766EB78
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44aacdc8-a67c-3e85-81c0-fa903e1440f7.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396714
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:35:14:d1:27:d2:38:97:66:eb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=8d7ece72-22a1-4933-9ad0-1aab3881b171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:da:03:27:32:f7:1a:30:16:5d:63:b4:3c:
                    91:77:9a:a3:93:40:e0:53:ac:f8:b7:30:4c:e1:34:
                    75:d8:e4:6a:81:90:3a:d9:ae:17:e8:fe:89:46:df:
                    39:57:ba:8d:98:ee:a0:13:0d:ce:fc:83:e1:36:d0:
                    1e:ac:f5:01:0b:4e:14:fd:7c:f4:9e:d0:a4:2c:57:
                    b3:4e:04:a1:27:66:3f:55:8d:1e:19:3f:82:cf:e1:
                    c0:5c:9c:ad:19:17:e7:a9:f0:f9:3f:ce:aa:f1:04:
                    a9:bc:0c:7b:d3:71:44:d2:33:42:c4:4d:00:4b:5a:
                    d9:d4:79:e2:3b:d4:ab:08:0c:ad:ac:a5:94:37:f8:
                    91:76:bf:ca:50:04:b6:b2:ec:c0:82:3f:9c:da:62:
                    1d:e6:cf:93:65:0d:d9:db:8d:75:12:5a:11:05:1a:
                    1a:ab:59:b4:08:32:d4:cc:c3:5d:6f:a4:23:3e:0c:
                    0d:15:f7:6b:93:e8:f1:fb:3c:3b:ba:a0:56:f3:c4:
                    65:24:e0:fe:7c:df:d9:71:9d:b1:7b:c5:18:a7:4e:
                    aa:0e:8f:b1:fa:9c:bf:b5:5e:f4:23:e7:00:5c:d5:
                    c5:9c:4f:44:8e:6e:26:d8:d2:5a:2f:13:fe:49:06:
                    4b:3f:34:82:e0:d1:be:43:19:c2:1d:18:58:1b:3c:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:95:15:D9:1B:BC:90:9A:BF:39:E5:8C:73:7A:43:BD:18:49:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44aacdc8-a67c-3e85-81c0-fa903e1440f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:39:e0:ef:f2:3f:33:0e:ed:e9:35:83:23:be:51:be:29:73:
         c7:cc:ac:f3:ea:37:13:91:ad:d5:cd:c8:15:8e:45:f6:8e:ab:
         8b:ff:10:02:42:1d:3f:18:76:76:20:33:72:53:0c:e4:fd:f7:
         55:9f:51:c2:ed:67:2c:25:8a:35:21:84:8d:a8:9d:83:d8:76:
         05:cb:e8:ad:9f:0f:83:13:cd:a8:cf:96:23:cd:71:cf:98:2a:
         c3:64:b8:fe:12:65:5d:fd:ae:82:aa:70:19:62:1c:79:1f:10:
         99:b8:13:59:f3:e6:21:8a:de:2f:55:0e:0d:f9:54:12:17:c3:
         dd:17:e3:b6:61:0d:06:7f:42:9b:24:54:1c:15:74:34:30:15:
         06:93:80:88:3c:b3:a0:68:49:c2:1b:d6:66:08:8f:86:1d:6b:
         de:47:5d:86:51:0e:18:68:46:5f:e2:bc:4f:dd:8e:55:27:0f:
         c4:6e:7d:70:3c:50:6e:25:5a:5a:77:5a:24:c9:65:da:a6:c7:
         db:e9:7c:4d:2f:8c:d2:01:dd:68:20:fe:90:d1:14:02:5f:23:
         69:72:49:86:52:7a:87:1d:aa:ed:37:10:ca:ad:65:54:6b:30:
         02:36:94:00:9d:56:ac:a6:3e:ea:c7:ef:14:08:2b:16:46:da:
         9b:de:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:35 2026 by rpki-client