Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681515c5-081f-3c91-859a-a021900f6324.roa
File:                     681515c5-081f-3c91-859a-a021900f6324.roa (raw, json)
Hash identifier:          yNrkvhReephAYqzRM7ELd99nhiBO1E3V6AF98jP3eWQ=
Subject key identifier:   45:2B:E3:1B:65:96:44:8C:B7:CA:8A:E6:49:79:CE:FD:93:D4:41:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974AE226763FBD12B61E200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681515c5-081f-3c91-859a-a021900f6324.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397212
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ae:22:67:63:fb:d1:2b:61:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ac321cf3-103a-46a3-a4fc-03b4dd1e814d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:c4:ea:52:8f:1f:85:00:a2:bd:09:38:b8:
                    2a:0e:10:7a:80:fe:fc:c4:9a:03:de:53:d6:71:5c:
                    a7:ed:8b:2a:1c:49:b5:d6:21:f3:0b:49:35:2f:4b:
                    e2:e9:0e:09:f6:54:fc:e7:4f:ba:b4:d4:90:19:46:
                    92:05:a7:71:8b:7c:83:45:41:94:1d:f2:e6:42:bf:
                    21:b7:b3:28:dd:b1:b2:af:b0:a5:c2:5f:01:98:23:
                    14:9a:0c:44:b4:dc:49:69:34:c8:ca:38:de:a2:01:
                    60:5a:33:e0:fb:b1:14:d4:68:1d:4a:d8:cd:0f:d8:
                    d4:1c:76:61:06:e5:e8:d7:37:b4:6c:53:1e:9c:fe:
                    75:2f:60:00:2c:07:d1:e1:24:b7:a5:68:bc:b5:92:
                    35:75:72:56:ba:72:07:a3:8b:07:72:7a:f7:bf:26:
                    90:3a:86:ab:78:5d:8e:d0:bf:67:86:c9:43:c8:28:
                    8e:cd:de:cc:47:0d:39:06:e2:01:63:9e:a0:02:77:
                    90:5d:87:41:85:ed:4d:41:5e:f4:a1:71:b5:5a:04:
                    41:ec:f5:f3:d2:12:af:88:2d:94:66:81:41:60:c0:
                    5e:65:7e:b7:28:c5:0c:46:12:60:d1:70:58:da:0c:
                    75:d6:5b:63:54:ca:ed:06:8d:33:65:ea:23:c4:ae:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2B:E3:1B:65:96:44:8C:B7:CA:8A:E6:49:79:CE:FD:93:D4:41:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/681515c5-081f-3c91-859a-a021900f6324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f8:97:52:bc:56:25:ac:d6:56:66:04:fe:18:ce:01:78:ce:
         47:8e:4c:fb:b5:37:1f:60:ba:c2:8b:02:95:66:47:29:b1:73:
         5c:17:d9:8a:bf:ed:e2:66:fc:18:22:f6:0f:9c:87:46:8f:1e:
         da:b5:2a:0c:1b:bc:4c:44:ba:af:2a:4e:90:12:ec:3d:b1:a0:
         88:63:d9:60:86:68:fc:f8:67:4b:23:8e:cb:1e:3c:8d:a8:5b:
         2b:33:3f:7a:54:8b:93:f1:e2:f0:60:fb:c0:86:24:55:ca:1f:
         9c:e7:19:9b:0c:8f:a7:d3:a4:ed:44:00:26:63:2a:7e:38:dd:
         fc:0e:a0:21:de:0b:ca:b7:d0:e2:e7:fe:6d:a4:c7:b6:f0:09:
         e4:be:db:a6:34:ba:cd:66:d6:c4:0c:40:dd:24:29:1b:0a:99:
         72:b8:9b:6e:c7:ae:8c:8c:ad:c3:72:08:ab:cb:a1:1b:2b:ab:
         36:eb:d3:31:36:02:11:c2:fb:22:ff:50:75:39:03:37:a6:b9:
         b6:be:1c:ca:03:c7:31:25:76:d0:c3:4a:ae:53:16:df:8f:32:
         f4:87:c3:99:ad:a8:8e:d2:9b:91:d4:63:84:9e:f3:91:f3:ce:
         b6:8c:50:9a:85:c9:38:1e:2b:4b:43:38:af:aa:a2:7b:85:d9:
         fd:0b:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:16:31 2026 by rpki-client