Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e711e-7376-3dc8-ac5a-f7b3d8e694f8.roa
File:                     574e711e-7376-3dc8-ac5a-f7b3d8e694f8.roa (raw, json)
Hash identifier:          Hs+CWFxmnj4w4hbRNvR9UaOCHWchgoWe/EF7huQSTlU=
Subject key identifier:   6C:5E:F4:A5:46:84:1D:C4:6B:E3:18:45:00:DE:F0:73:54:65:BA:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24E129DFB61AAA59245252C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e711e-7376-3dc8-ac5a-f7b3d8e694f8.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396826
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:29:df:b6:1a:aa:59:24:52:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=eeadfcbd-1d23-448f-8c79-582d71748f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:62:d9:af:eb:8a:84:fe:13:02:ca:64:a0:
                    d7:3f:23:39:0e:81:3c:cc:5b:a8:09:89:25:28:03:
                    0c:24:a2:06:b0:90:aa:19:59:5d:86:1f:bb:d5:0e:
                    59:8b:03:11:d1:15:54:cf:2c:8b:e1:c6:c2:71:d2:
                    18:3b:8a:f9:d6:08:79:8f:93:9f:71:aa:dc:3a:6c:
                    21:4b:da:3d:e9:d0:3c:5e:df:5c:e0:a0:ed:c4:95:
                    0c:f2:eb:02:2e:77:9d:68:0f:bc:7e:1a:fb:e8:25:
                    77:17:15:79:9e:f9:a9:d5:88:a8:ab:88:a0:3a:88:
                    fd:cb:77:57:16:4d:73:fb:c3:9a:6e:74:91:17:a7:
                    5e:15:ef:48:60:0a:8d:e4:4e:59:44:b6:da:d3:75:
                    cc:45:ae:cf:71:76:c1:30:5f:33:f1:42:94:c4:89:
                    2c:17:95:39:03:2f:48:2c:36:08:7e:8f:41:bf:6b:
                    f9:17:67:52:05:61:8e:d9:f2:1e:be:5c:fe:d0:8e:
                    a3:d8:6f:9b:b1:9d:0a:16:09:c1:58:b3:54:d7:ef:
                    17:87:9f:95:0b:d7:39:9b:66:15:ec:33:fa:55:07:
                    45:02:cf:f6:5f:b0:5b:1a:f6:d3:61:0e:84:0d:0f:
                    5d:2c:b5:90:f7:73:d7:43:57:d8:18:e4:d4:14:6c:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:F4:A5:46:84:1D:C4:6B:E3:18:45:00:DE:F0:73:54:65:BA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e711e-7376-3dc8-ac5a-f7b3d8e694f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:95:d0:40:c7:51:e3:29:d4:1b:91:e0:37:34:fc:14:47:4e:
         85:5e:4b:71:cb:ef:db:f8:25:96:ba:68:d1:dc:dc:5c:ed:97:
         33:93:47:58:55:58:b8:ea:25:f2:ae:c6:38:d0:73:3b:c4:1d:
         75:db:03:72:3f:d6:1e:fc:52:d5:37:7f:51:b0:7c:bc:1b:39:
         38:00:da:5a:aa:41:01:71:d2:24:49:fc:bd:ee:dd:8b:cb:6a:
         77:4f:4c:a6:31:1f:99:bd:b1:f9:fc:f7:17:0b:33:a3:3e:42:
         e7:c5:40:46:d9:4d:f6:4b:94:ec:b6:80:27:f2:f4:e2:59:e6:
         33:6f:26:32:75:d2:a8:69:97:98:a9:07:76:88:2b:4a:8a:12:
         25:47:d9:c1:9e:dd:a8:c2:26:e7:51:f5:97:72:d1:90:d2:a9:
         d7:55:02:87:ff:fd:08:5c:80:db:4d:45:7c:41:48:1a:ae:e3:
         8c:db:95:01:af:e4:32:ec:44:26:54:bb:c8:04:ce:ef:e5:50:
         3d:c8:02:79:18:78:98:79:8f:b8:11:42:eb:de:9e:d4:c2:2d:
         2b:49:b3:ee:11:8a:0c:c2:f6:d5:7f:7e:dc:40:f2:ea:ef:a4:
         ee:38:f3:30:d1:ff:1f:e7:c8:00:e5:0d:9d:fd:cc:68:20:60:
         02:b4:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:33 2026 by rpki-client