Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa
File:                     b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json)
Hash identifier:          IczuRDaftqzGwlJVjTZ6EdWvpj2EhJpTGCXb/DrAN7s=
Subject key identifier:   AA:68:2F:7C:E9:DC:24:98:E9:ED:9B:3F:5C:F5:CB:EB:85:CD:66:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A3AA11EC62E03CF9F14A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396661
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:3a:a1:1e:c6:2e:03:cf:9f:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=1a4185aa-73db-4e4a-8c1d-6f8b91a4d122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:f7:3b:ac:9f:c6:49:e6:1f:6d:2a:b9:25:
                    1a:db:fa:c6:f7:2e:1d:98:43:a2:0a:5c:3a:1e:7e:
                    5b:21:67:9d:bb:11:32:34:60:1b:c0:11:da:e5:65:
                    7f:f0:5b:9b:1d:12:89:c6:2a:27:f8:c5:58:87:07:
                    61:e1:82:e8:3d:46:67:9a:60:70:17:db:68:0c:41:
                    f7:db:21:c4:bc:45:02:4f:ee:37:0a:53:c3:b8:4c:
                    4d:d4:26:66:8b:be:bf:0c:da:1e:ef:8c:5e:ec:ad:
                    c8:a1:8c:c8:c9:a6:28:49:38:43:f8:40:01:3c:20:
                    d1:cc:cf:dc:03:24:bd:76:b7:49:f5:c7:17:89:ad:
                    0c:52:68:f4:a8:22:66:8d:32:b4:36:4e:18:85:7b:
                    12:ac:16:17:70:46:5b:71:34:16:b2:9f:48:9b:b7:
                    7c:5f:6d:e2:4a:4b:02:43:48:3e:09:ca:61:05:2a:
                    9e:cf:01:5a:7f:f6:2e:91:66:a2:e8:4d:ec:c4:77:
                    29:77:68:b0:73:08:ce:7d:5d:10:a3:8f:09:db:a8:
                    7e:71:aa:bd:c8:d1:f7:ef:42:5d:d7:a4:08:94:21:
                    81:37:18:22:d3:a6:dd:11:cd:b0:02:47:a2:6d:a4:
                    54:de:87:ec:1d:b7:ab:27:17:81:25:b0:eb:f4:5b:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:2F:7C:E9:DC:24:98:E9:ED:9B:3F:5C:F5:CB:EB:85:CD:66:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:b0:eb:b4:90:55:d1:34:62:5c:54:27:48:cb:09:e3:86:
         9c:fd:a5:52:10:09:28:4a:e6:e7:59:9d:9f:87:6c:dc:52:f7:
         69:d5:43:7b:a7:9d:e3:0d:95:af:57:87:86:76:eb:6b:a3:89:
         4a:cc:88:2d:95:da:0f:47:05:3b:b7:48:97:d3:67:f3:a9:a0:
         3d:25:6d:ee:38:69:4c:fa:8e:a9:81:c8:b3:2e:96:47:86:ff:
         34:31:bc:72:ae:22:6d:9f:e3:6f:17:4f:26:24:d6:66:98:f9:
         53:49:15:70:90:44:88:bb:12:d8:bc:81:e6:47:9b:18:25:e8:
         e1:59:b1:80:77:d6:6d:6f:cd:7e:02:6f:5f:8f:cd:c9:8d:c6:
         a0:30:04:96:a7:08:3a:57:30:a0:9d:b3:69:b6:14:c3:30:28:
         a7:4c:93:bd:3a:e8:52:b8:66:13:b9:18:f1:ec:25:b1:32:46:
         ba:b3:c1:06:c6:ea:d5:db:b5:66:1c:5e:96:ef:a7:4c:36:84:
         1b:50:fb:3c:60:8e:13:36:77:c9:c9:51:7c:0d:63:4e:08:ad:
         de:c7:1e:37:ea:8b:ea:90:ba:ce:8b:de:09:14:d2:c9:18:7c:
         ca:c5:19:7b:9a:d9:23:52:7e:ca:e6:0d:10:11:cc:51:df:4d:
         59:a2:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:42 2026 by rpki-client