Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477881ea-5524-3f9c-9430-f3347ec7dcd7.roa
File:                     477881ea-5524-3f9c-9430-f3347ec7dcd7.roa (raw, json)
Hash identifier:          F+2ZJcMv93qMUgwfuSrI17Ki3PkiREvd0QuoAh0mB2Q=
Subject key identifier:   25:51:21:8D:9D:41:51:4B:DD:75:17:88:D0:AD:95:6E:5B:3C:D6:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62B9512106B47F09986E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477881ea-5524-3f9c-9430-f3347ec7dcd7.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     21313
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b9:51:21:06:b4:7f:09:98:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2110e0bf-f0ae-4057-be73-7e21232f2cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:7e:b7:f6:2e:78:d2:20:1e:fc:f8:41:a8:
                    1f:8f:f0:53:4b:2a:1c:83:83:f2:45:09:38:fc:42:
                    6d:1e:f9:16:33:4f:b8:97:00:e3:d1:3e:f1:c5:83:
                    46:69:20:00:75:a7:c9:7b:92:6d:99:c8:d1:88:63:
                    39:6c:ce:32:41:13:1b:92:a3:91:6a:6d:a6:d0:61:
                    af:4c:42:b2:b4:3c:f4:3c:c5:d6:a2:25:3d:86:54:
                    df:37:cb:51:73:34:51:48:79:cd:0a:cd:8f:6b:97:
                    0d:f6:10:e3:5f:9e:ca:fb:ce:ec:d4:ad:0e:96:cb:
                    a4:d7:10:96:ed:b1:27:0f:66:47:c3:62:8f:e9:b4:
                    b3:4a:7e:70:78:6a:10:ed:9a:87:98:f4:0e:da:8c:
                    1a:0e:0e:eb:eb:38:f3:bd:36:58:ff:68:54:1a:99:
                    87:4a:70:38:b7:39:9e:4a:27:e3:de:db:74:81:2b:
                    1e:23:5a:d0:dc:e8:94:1e:a6:9f:b7:db:06:96:ce:
                    dc:d4:27:27:65:46:c0:1a:a8:88:49:b2:07:67:89:
                    fc:be:07:2c:b4:a8:06:e2:f6:bf:7a:ce:bb:63:40:
                    10:be:bf:b0:24:78:a2:b1:17:4f:ae:ce:50:73:83:
                    2d:c5:9e:f8:d7:fe:66:42:a2:93:bb:28:91:96:8d:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:21:8D:9D:41:51:4B:DD:75:17:88:D0:AD:95:6E:5B:3C:D6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477881ea-5524-3f9c-9430-f3347ec7dcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:4c:3e:d0:05:a9:0f:ad:d3:f9:cc:b6:29:8a:ac:5e:7b:
         3e:98:cd:e1:ca:50:9e:6c:3f:a1:7d:7b:e3:7e:07:3c:62:64:
         f4:d0:e7:df:57:b9:71:f0:1e:9d:88:8d:d5:67:99:a8:6b:7a:
         6f:0c:af:8f:61:f6:a3:9e:d7:23:4a:79:5e:16:5b:a1:ed:a9:
         4f:c2:74:c3:cc:fa:49:3b:dc:c0:2f:90:8d:36:1c:cb:7c:45:
         69:4b:d2:5e:a3:89:c1:09:01:50:d1:08:9a:94:20:fd:17:ba:
         62:49:3f:59:5c:06:7b:01:95:3c:ba:dc:b9:b8:c9:62:6e:c6:
         cb:1f:91:f4:fc:1d:6b:46:3e:7e:39:f7:4c:46:eb:1a:13:f1:
         64:af:43:65:b3:01:71:35:7b:68:d7:09:50:1e:07:61:26:04:
         f6:c9:36:84:b9:5a:fa:4f:fc:91:9d:69:04:2b:73:2f:21:58:
         fb:db:66:ae:a2:13:b0:e3:df:82:e9:f5:e2:2e:97:16:d8:44:
         11:6e:bb:ef:9b:6b:35:6e:47:4f:b0:78:d5:9d:c0:e6:ed:71:
         fa:ba:92:71:23:ee:e8:d4:49:4f:d2:4f:86:9f:9f:3c:34:a2:
         0b:72:79:01:35:ee:90:81:7a:72:ae:e4:d2:76:5b:21:b5:ec:
         c5:ec:16:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYrlRIQa0fwmYbiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
MjExMGUwYmYtZjBhZS00MDU3LWJlNzMtN2UyMTIzMmYyY2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn45+t/YueNIgHvz4Qagfj/BTSyocg4PyRQk4
/EJtHvkWM0+4lwDj0T7xxYNGaSAAdafJe5JtmcjRiGM5bM4yQRMbkqORam2m0GGv
TEKytDz0PMXWoiU9hlTfN8tRczRRSHnNCs2Pa5cN9hDjX57K+87s1K0Olsuk1xCW
7bEnD2ZHw2KP6bSzSn5weGoQ7ZqHmPQO2owaDg7r6zjzvTZY/2hUGpmHSnA4tzme
Sifj3tt0gSseI1rQ3OiUHqaft9sGls7c1CcnZUbAGqiISbIHZ4n8vgcstKgG4va/
es67Y0AQvr+wJHiisRdPrs5Qc4MtxZ741/5mQqKTuyiRlo2fyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCVRIY2dQVFL3XUXiNCtlW5bPNYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc3ODgxZWEtNTUyNC0z
ZjljLTk0MzAtZjMzNDdlYzdkY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKLOTD7QBakPrdP5zLYpiqxeez6YzeHKUJ5sP6F9e+N+BzxiZPTQ
599XuXHwHp2IjdVnmahrem8Mr49h9qOe1yNKeV4WW6HtqU/CdMPM+kk73MAvkI02
HMt8RWlL0l6jicEJAVDRCJqUIP0XumJJP1lcBnsBlTy63Lm4yWJuxssfkfT8HWtG
Pn4590xG6xoT8WSvQ2WzAXE1e2jXCVAeB2EmBPbJNoS5WvpP/JGdaQQrcy8hWPvb
Zq6iE7Dj34Lp9eIulxbYRBFuu++bazVuR0+weNWdwObtcfq6knEj7ujUSU/ST4af
nzw0ogtyeQE17pCBenKu5NJ2WyG17MXsFuE=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:28:29 2026 by rpki-client