Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a257c4dc-4dc6-381e-8710-921e30b00af3.roa
File:                     a257c4dc-4dc6-381e-8710-921e30b00af3.roa (raw, json)
Hash identifier:          p6avEkBsG1bzl246d6uVs9zey2650yM/vYk5M6KcHCM=
Subject key identifier:   D2:B3:9E:73:76:88:72:7A:DC:8C:6F:DF:B0:10:0E:94:37:E2:3A:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A5D12F9281130EE378880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a257c4dc-4dc6-381e-8710-921e30b00af3.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396664
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:5d:12:f9:28:11:30:ee:37:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=f5c3a072-8469-499c-9761-7f68fbd28158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:de:8e:e3:77:df:12:64:d8:84:07:28:7e:
                    c9:e4:ac:5b:99:35:9d:c1:05:cd:18:85:d3:63:ba:
                    9f:62:d2:f1:be:b2:48:1a:89:6e:64:76:fa:23:20:
                    d0:31:ad:c7:ca:ef:fa:70:8e:da:65:72:6b:ba:03:
                    4a:dc:52:08:94:9b:48:af:d2:10:3c:10:a9:84:02:
                    4f:eb:80:85:e5:ec:f9:d2:20:c4:79:52:de:37:94:
                    30:21:79:14:99:e3:2d:bc:7c:6a:26:d0:b9:2b:fa:
                    d2:fb:37:1f:cd:bb:81:7e:f3:82:c8:71:20:db:cf:
                    85:c7:84:d9:7a:0b:41:6b:c7:93:9e:23:3b:ec:39:
                    e1:25:f1:52:5f:17:1a:41:5f:b1:02:a0:19:d3:79:
                    1d:46:3b:c7:e0:5d:22:f4:a1:5a:66:12:73:f6:64:
                    bd:11:df:37:a7:f8:6b:dc:d4:81:95:40:95:f9:2f:
                    a2:78:fb:61:a2:c2:f8:45:68:f2:91:5c:bd:3e:ea:
                    5e:d0:02:b2:58:8e:80:2e:bf:e8:73:f5:4e:1f:b1:
                    28:a3:f3:2d:36:90:02:10:1f:a3:7c:e1:8a:ba:d8:
                    57:b0:d7:29:0b:b2:d6:d0:78:8c:9f:d9:11:84:29:
                    2f:5e:29:44:9c:97:24:15:18:1a:d4:02:1e:e1:53:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B3:9E:73:76:88:72:7A:DC:8C:6F:DF:B0:10:0E:94:37:E2:3A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a257c4dc-4dc6-381e-8710-921e30b00af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:c0:36:b1:e9:68:de:41:11:db:cb:b3:07:e9:61:ad:ee:
         d8:3f:76:3a:8e:77:50:21:d3:a2:b3:fa:82:88:12:7c:f4:51:
         59:d1:b8:fb:94:6f:c5:0d:a0:8e:9a:c2:69:da:d3:6c:68:94:
         21:54:30:0e:90:54:6c:7f:4f:1b:00:e9:11:dd:34:f8:0e:9a:
         c6:5d:40:84:42:fe:cd:cc:3e:a4:66:43:16:3e:56:f8:14:e5:
         0d:70:a7:58:a4:b0:61:0f:2e:3b:79:a2:05:e3:82:e0:86:08:
         a3:a1:2f:93:bf:8a:b4:42:31:2f:92:1d:5f:0c:6c:e1:9c:e7:
         ec:97:49:0e:d5:22:3d:16:42:a6:49:98:da:4e:e8:d5:26:b4:
         fd:c6:8a:97:81:c0:95:d8:73:a7:1e:8e:cb:fe:46:65:65:8d:
         1f:d8:6b:ec:a5:0e:74:67:24:fe:9f:cd:83:b0:a1:c9:c1:d1:
         02:92:bb:1b:55:7a:78:f5:c6:d5:e8:82:2f:f7:a4:9c:28:7c:
         fc:6d:95:26:9a:0a:fb:81:60:31:71:dc:48:7e:32:17:98:dd:
         ff:94:80:10:6b:c1:6b:0f:36:84:d8:a3:d3:31:66:7c:88:9d:
         44:42:fb:14:cd:52:58:4e:d5:e5:4f:ab:15:3f:ad:22:3e:f6:
         50:e4:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:26 2026 by rpki-client