Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa
File:                     ad4729fe-8ce1-303b-83cf-89d1af230bef.roa (raw, json)
Hash identifier:          iR6ruNnvkCZbLtYRZ6YozDz8Pul2JvUzgpzzmnZMq7Y=
Subject key identifier:   8E:E2:0C:9E:61:D6:12:6B:72:7C:6F:FC:98:9A:DB:93:B9:70:BF:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A31766ABAD13B810D9E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396611
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:31:76:6a:ba:d1:3b:81:0d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=f41562f1-8493-427e-9aa9-23cef12733df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:17:d4:bb:af:d9:9c:42:0b:c3:41:f1:a3:
                    a8:6c:67:d6:c0:10:31:1f:e9:64:28:15:2a:3b:3e:
                    30:e0:f1:2f:46:94:1e:74:3f:c3:92:f7:49:4a:54:
                    2f:f9:4f:e6:59:ac:6d:47:7e:91:93:67:9d:c8:d4:
                    19:b2:8c:6f:29:49:f0:46:3f:86:95:7c:0b:90:71:
                    1d:ef:85:82:e7:71:33:65:d9:38:df:f2:4f:ae:1b:
                    e0:ae:2f:53:2a:f7:d0:34:19:17:b6:ed:30:c6:b1:
                    43:0f:20:b2:8f:2e:fb:8a:4b:88:66:aa:60:1a:95:
                    1a:7b:f8:ff:4c:0f:bd:09:c2:3e:96:3e:4b:9f:c4:
                    1c:dd:69:40:b6:7f:d6:20:0d:f2:7b:34:60:52:60:
                    a4:5a:83:27:ea:4f:a5:03:ad:a9:34:2f:ad:6d:ac:
                    0e:70:36:9f:d3:66:8b:fd:e7:f2:97:2a:0b:9d:06:
                    99:b1:bc:17:d0:ff:ce:39:d2:34:e2:29:2e:e6:5d:
                    cb:10:7f:ba:8c:ab:82:1a:1a:de:4d:82:aa:52:95:
                    56:fc:9c:79:84:ff:3c:14:bf:f8:d3:a8:d9:40:28:
                    05:b6:b0:16:6f:86:94:73:da:42:6f:88:2c:87:36:
                    43:a9:ae:e7:5d:b8:c0:9f:90:f9:7a:ea:cb:9c:2d:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E2:0C:9E:61:D6:12:6B:72:7C:6F:FC:98:9A:DB:93:B9:70:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:49:aa:18:4b:3f:cb:42:5f:26:f4:d6:f4:13:16:b2:84:f5:
         19:06:43:00:67:35:56:c2:1d:82:39:9f:f9:26:08:51:ce:53:
         35:ba:60:d3:d2:96:06:a0:60:7a:cd:16:04:4d:3b:6a:82:18:
         cb:23:dc:a8:1e:3d:08:f0:50:29:12:69:92:0c:52:fe:45:0f:
         54:7c:71:14:47:d6:da:c7:0b:9a:ac:d3:1c:61:19:e7:2b:72:
         ce:f1:fc:2b:9b:63:2f:67:12:52:51:ab:a4:8d:a9:aa:b2:e8:
         41:fc:77:a8:78:68:ff:76:d8:b5:2a:4b:70:20:ea:1d:ae:fc:
         aa:3d:20:5b:3e:72:f1:0f:20:95:eb:73:2f:41:d1:a6:82:96:
         47:8b:f1:6e:88:fd:60:fd:e6:85:38:6e:a7:47:d0:12:70:9e:
         1f:32:ce:05:74:ef:3f:32:cc:c6:ae:22:70:d6:43:3e:8a:3c:
         a6:da:7d:b5:54:b8:74:c7:9d:06:34:fb:2a:12:39:7f:dd:b8:
         d8:05:30:2e:94:b7:0e:b4:66:99:79:41:34:96:f5:27:f5:62:
         08:59:1f:f6:bb:d0:6d:82:18:2f:df:36:10:cd:25:c0:f2:7b:
         bf:ea:75:66:5e:44:e6:aa:45:b7:16:8b:56:25:9a:aa:18:68:
         27:9d:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:31 2026 by rpki-client