Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa
File:                     564fb67d-a704-3d60-820c-0421a48cbeb3.roa (raw, json)
Hash identifier:          941k5fGOhc7//EI5Ac5PVSP/q53sFzjFKcc2w+b6gUA=
Subject key identifier:   DF:E3:E0:ED:13:61:5F:CC:36:8D:E4:B7:87:22:F7:35:AA:C3:C5:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A5938580B61404586B480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396550
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:59:38:58:0b:61:40:45:86:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=8ecc3f58-dd25-4d1d-9c8e-2f73eb214f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:02:18:1d:cc:3d:6b:c2:bf:8b:b8:c0:2d:
                    6d:f1:9e:20:38:3a:df:35:7c:1c:35:28:13:fc:80:
                    89:cd:6c:14:9b:85:d0:e5:46:92:54:20:18:8f:56:
                    e2:7a:17:2e:49:35:6f:eb:fb:63:dc:ae:86:13:be:
                    bc:a2:0a:a3:0f:6d:f5:d0:8a:c8:ef:ec:54:0b:47:
                    77:b6:6f:06:04:25:35:3c:35:29:b7:84:61:50:38:
                    f7:a9:ff:1d:ad:30:22:f4:1e:9d:72:ed:ef:d1:6c:
                    48:91:de:6e:db:1c:37:92:b6:31:96:f4:ca:37:f7:
                    45:f1:90:e5:f1:98:2d:f2:04:50:ad:bc:45:79:79:
                    f0:b8:37:8a:c5:9f:7a:bb:17:9a:2b:17:a2:f4:25:
                    71:63:14:dd:ec:41:a6:6d:38:0b:34:93:11:99:64:
                    50:d0:5c:32:c8:e8:5c:4c:8c:87:2c:28:1c:c7:7f:
                    53:e5:75:58:d4:80:3f:85:e6:39:32:68:e9:ee:d9:
                    8f:24:1f:d4:30:6b:56:e0:13:5d:76:e8:94:1c:37:
                    98:a5:44:a4:7b:fa:bb:7e:f8:12:d2:50:af:ba:1e:
                    34:ea:b5:e8:c7:b8:1c:4f:3c:e0:b7:24:3d:b3:94:
                    66:8b:97:1d:1e:c1:ac:1e:34:7b:5b:2e:83:7a:5e:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E3:E0:ED:13:61:5F:CC:36:8D:E4:B7:87:22:F7:35:AA:C3:C5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:94:a0:76:24:22:e3:d0:6a:d7:05:ce:cb:5c:cf:1c:54:78:
         99:a9:08:0b:6b:8e:22:c4:b3:59:26:d7:b3:0b:9b:a1:13:d6:
         50:c6:c9:6a:ad:23:56:05:77:f9:b6:bc:0d:03:d5:90:5a:3f:
         c8:0e:b7:a0:d3:22:9f:de:09:03:1f:eb:03:45:2a:27:86:88:
         72:14:14:d0:5a:ff:0d:27:e5:77:80:73:50:41:b0:3e:f0:32:
         dd:c1:2a:08:7e:6b:13:a6:9d:7f:34:81:f5:33:c4:47:3b:0e:
         d6:85:4c:4e:9f:a6:da:55:04:c4:17:87:e7:68:c2:a6:ea:9b:
         48:13:98:cd:4d:dc:2e:ce:14:eb:b9:dd:8f:ad:7e:91:96:c7:
         bd:a6:3b:55:1a:19:ab:c2:79:50:ed:73:e3:05:c1:d2:66:12:
         4f:b6:55:4d:04:7d:d6:25:76:24:bf:22:e3:3e:4c:56:0a:58:
         f1:3e:d2:8a:70:f3:28:ed:56:cc:30:06:61:63:07:5a:2e:64:
         7a:f0:d4:19:dc:2d:ba:2c:08:95:73:ba:f9:8b:ee:6c:23:eb:
         d9:2b:6f:6e:8a:2f:39:9e:19:d4:6e:ab:39:6c:d9:1e:2e:79:
         cb:bc:72:2c:ee:88:dc:4a:7b:f8:a2:91:3c:ec:0a:15:89:ef:
         ee:17:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:50 2026 by rpki-client