Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b0d1a9-2051-3cd6-8ea7-5c76308ba593.roa
File:                     45b0d1a9-2051-3cd6-8ea7-5c76308ba593.roa (raw, json)
Hash identifier:          GcrgjE+VRMUiOOSyj7w6rY/XBLTS3/NYQ31pIs4W01U=
Subject key identifier:   D2:16:0A:64:57:72:D2:A5:65:8B:59:3E:8F:DF:DB:46:24:5C:E7:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF8974998288DE63A0F6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b0d1a9-2051-3cd6-8ea7-5c76308ba593.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     27544
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:89:74:99:82:88:de:63:a0:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e4307348-320f-4e47-9d87-e0de2ab1b5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:ad:8d:09:ca:4b:17:de:1b:00:3b:3f:2c:
                    c1:32:8a:91:4e:7d:ad:90:01:e4:5f:ee:2b:d5:ad:
                    10:9b:fe:67:25:ad:6d:bb:b5:27:9d:91:25:c4:86:
                    5b:94:1e:b8:a3:a1:68:2a:64:ac:76:dc:db:ee:23:
                    c5:0e:4c:e2:95:46:26:82:42:31:66:90:fd:f3:6b:
                    95:4e:e7:94:06:1d:dc:38:83:c6:73:59:38:c5:19:
                    b1:b0:fc:95:4e:0e:e5:28:11:4e:4f:e6:d1:74:97:
                    1c:8b:27:69:32:d1:02:19:eb:c8:56:31:ee:f8:b2:
                    33:85:94:9c:10:95:39:9d:a2:a2:93:af:0a:3b:4f:
                    ed:cb:87:ca:4a:10:82:d4:9f:05:5b:53:85:6f:0b:
                    c5:7a:58:05:11:0c:7f:71:b9:c1:91:dd:79:4a:a8:
                    d2:81:1a:89:ec:e5:b4:75:b4:1a:48:58:18:77:cd:
                    c0:82:d2:91:26:11:e6:b0:26:e3:f6:15:41:20:75:
                    4a:1a:34:9d:01:bc:0a:a7:d8:2b:97:e4:11:7c:64:
                    fb:88:df:e2:7f:59:9a:76:23:a8:c0:b9:17:8f:97:
                    2a:fe:0c:f9:b4:b9:bd:ee:d2:86:b7:dc:46:ec:21:
                    e7:6b:ac:3e:9a:4a:a1:10:d3:e0:50:df:92:78:41:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:16:0A:64:57:72:D2:A5:65:8B:59:3E:8F:DF:DB:46:24:5C:E7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45b0d1a9-2051-3cd6-8ea7-5c76308ba593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:66:a5:2d:3f:ba:ae:46:6d:9d:9b:f4:ed:15:8f:55:ab:
         0d:ac:56:7b:21:e7:8f:ad:6d:42:c8:3e:d4:2f:57:10:6a:30:
         2c:83:d0:f6:60:e5:2f:0a:86:aa:95:5c:8b:66:eb:c5:21:51:
         81:c1:b9:7a:a1:94:0b:5b:f7:fa:62:a3:16:4e:d7:f9:74:ec:
         32:9a:7b:c0:83:12:f8:a0:bf:9b:03:c7:ad:1d:92:2b:d1:93:
         ae:e2:72:13:3e:7c:3d:55:40:f9:88:74:f5:ba:28:25:db:03:
         f2:48:96:53:87:67:49:36:76:a2:e3:ea:19:81:80:b5:cc:44:
         d6:4c:a4:54:64:4e:b8:e0:48:7d:97:5b:01:42:ff:8a:e2:91:
         ef:33:7b:a0:5f:45:2d:18:d2:65:9b:97:50:b9:36:20:f4:33:
         fb:53:2f:db:7c:04:f8:b0:42:16:7c:ea:55:bf:20:62:67:39:
         87:ae:9c:7e:5a:24:09:0d:08:aa:61:04:5e:70:1b:a3:ad:e5:
         5b:34:a1:27:79:c3:da:94:ad:39:a9:73:c3:da:9c:b9:bb:b3:
         3c:26:9d:44:82:4c:16:7e:d5:11:0f:62:e1:5d:ad:3d:a0:78:
         04:bf:59:3c:f0:f6:fa:5f:2d:5e:16:98:9c:b1:0e:4a:3f:92:
         52:00:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:24 2026 by rpki-client