Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa
File:                     5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa (raw, json)
Hash identifier:          P8G7C/bEekJ/QBC67YPFMuC2Er7Cgf/zzAgQoIlxJBc=
Subject key identifier:   02:EE:63:02:36:3C:FB:C9:5A:8E:4A:5F:C8:31:6B:0D:EB:E5:2F:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BAA9037FDD49F1202A180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396585
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:aa:90:37:fd:d4:9f:12:02:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b4711216-1ea6-42c0-8ae8-77f358d64254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:9d:7d:2a:1f:d8:df:30:f4:d4:64:21:3c:
                    cc:51:84:38:6a:48:99:fe:c8:60:aa:1c:6b:e3:bc:
                    5b:82:3a:53:56:bd:84:00:ea:94:30:3e:3f:e3:d8:
                    85:0c:cd:59:85:4b:54:8a:d2:c7:49:68:47:42:21:
                    14:12:a4:87:3b:ed:97:45:90:74:32:ad:55:8f:e5:
                    d4:8b:6d:6f:3b:af:ad:67:95:8f:4c:f9:13:16:51:
                    bd:fa:8e:20:72:48:f7:1f:23:56:b1:17:c7:6c:a8:
                    48:1a:32:bb:b2:57:b0:1a:44:bc:da:bb:e0:f4:fb:
                    fb:bd:b9:cf:6f:b1:33:07:4d:57:ff:a2:62:5b:2b:
                    d3:66:02:06:c5:a2:74:ab:ca:9e:11:97:92:99:76:
                    eb:74:35:7d:7a:87:2b:7b:43:fb:dd:2c:61:c5:80:
                    58:48:44:e4:e9:9b:97:53:48:54:95:3e:7d:d2:b0:
                    71:d1:c4:87:5c:e3:be:81:54:c7:fd:9c:8d:b2:99:
                    d2:2d:f6:9b:11:83:88:7d:34:95:20:f4:9e:a9:0c:
                    d2:2c:00:42:ab:05:14:59:ba:5b:ae:39:0f:ee:a4:
                    5d:9c:04:a1:97:bb:b3:9d:36:7d:0c:3b:dd:26:d1:
                    d5:c5:a4:b9:7b:06:63:b2:ad:87:1b:18:3e:ac:5c:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:63:02:36:3C:FB:C9:5A:8E:4A:5F:C8:31:6B:0D:EB:E5:2F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b2:36:8f:56:df:4f:3c:5a:ec:fa:a2:dc:cb:0f:46:68:72:
         8b:cc:ef:32:27:36:9c:b2:31:a4:49:5d:20:97:4c:2e:f6:d2:
         7d:66:d0:5a:fe:f0:c2:1e:e1:25:f6:b8:87:e5:7a:98:2b:60:
         cf:f0:4c:e1:e8:64:2f:e9:0f:94:92:3d:01:b2:a1:e8:b5:44:
         24:ab:f3:b8:a5:c1:40:6e:d2:b2:7c:63:fd:9c:05:5b:07:1f:
         c3:cd:da:41:78:ef:4d:e8:ee:72:7a:4a:c2:83:95:91:20:6f:
         69:6e:6e:49:59:f6:93:d5:94:90:99:4b:b9:bb:7b:ac:43:c8:
         a1:0f:7e:65:77:86:dc:e5:a7:fb:5a:85:66:ea:e3:11:62:73:
         d0:23:54:dd:fb:a5:b4:14:d2:4a:d7:e6:8c:d7:52:af:40:07:
         ad:e6:52:88:4c:86:38:f7:c3:dc:04:27:da:6f:a2:72:8c:d2:
         0d:e3:69:61:ca:68:b3:87:73:a5:74:70:ce:31:b2:4e:2a:ce:
         6c:4c:ad:fe:54:b2:2c:d0:36:17:fb:69:7d:19:f7:39:f9:08:
         da:6d:b9:76:a1:1a:89:60:4b:18:38:c3:17:55:54:d7:c1:9c:
         13:51:f1:41:f4:00:02:b0:63:4a:dc:fc:f7:c5:06:ce:43:79:
         21:5e:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:09 2026 by rpki-client