Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa
File:                     b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa (raw, json)
Hash identifier:          0IE918csbLupExzTV2d5ksVbOBYrIKcD6MDbFNT2uD8=
Subject key identifier:   E5:AB:1E:7E:09:65:EC:C5:4B:A4:78:73:48:F4:5E:51:F9:63:BB:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A3B681956B98D802D33C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396739
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:3b:68:19:56:b9:8d:80:2d:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=8009b2ce-a31f-495c-9d7d-9d47054b9c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:1b:8e:ec:26:64:80:7d:8e:b6:c7:fc:9b:
                    ab:7d:9f:fd:fc:77:5c:65:38:6c:22:e4:d3:c2:5d:
                    f6:3e:7d:f9:4c:08:9b:6e:c3:71:03:49:90:8b:68:
                    fd:7e:f8:03:df:b0:64:e1:62:08:fd:18:c1:d3:d5:
                    4d:51:9e:14:2e:fb:52:67:c8:3d:b7:53:d8:2b:95:
                    0b:fe:ee:e9:98:85:56:48:32:81:f2:55:4f:ad:b9:
                    85:eb:46:69:7c:17:03:11:20:22:92:6d:75:08:9e:
                    4b:47:67:ff:eb:95:05:8e:48:b4:4a:ed:4a:83:a2:
                    36:0f:e3:03:bd:11:8b:42:92:c7:f1:58:d9:48:88:
                    73:d0:dc:2f:e1:53:a7:02:5c:c1:c3:4f:6c:00:62:
                    d4:70:e2:d5:c6:53:42:80:75:b4:48:2d:19:c9:0d:
                    61:3a:0c:d8:be:bf:41:a3:3a:3e:1e:73:56:47:02:
                    a1:0b:3a:b3:04:45:ed:f9:f1:97:2a:b0:48:fa:2d:
                    a6:a8:6d:24:2d:2b:53:56:cf:7f:d6:fa:2c:29:41:
                    db:9e:f9:8f:f3:0c:f4:63:11:79:ad:ea:ae:07:f3:
                    d7:e9:41:95:6d:a8:85:d0:7f:dc:eb:da:00:7e:ed:
                    75:12:00:1b:df:f3:c2:8c:04:02:ff:a7:e8:b2:64:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:1E:7E:09:65:EC:C5:4B:A4:78:73:48:F4:5E:51:F9:63:BB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:92:4e:c9:f7:3c:2d:ba:92:19:c5:17:c0:c6:e7:de:db:39:
         d5:d4:91:80:4a:b5:af:fb:64:7d:a4:7b:b0:94:9e:7c:b8:04:
         dc:7e:2d:7b:0e:1f:ab:a4:95:58:2b:65:0c:c0:dd:69:c0:e8:
         72:dc:7e:f7:e8:a1:25:02:ad:17:77:68:54:96:a5:be:10:10:
         46:fa:08:76:c6:2d:ba:0e:df:38:09:02:ee:f4:48:d1:f1:17:
         16:97:d4:c1:da:2b:f7:12:2d:31:d6:a5:41:9c:07:64:17:8b:
         f9:12:3a:e0:2f:bb:29:73:46:ba:11:ea:fa:ac:c9:00:b6:13:
         0d:d0:1f:0c:85:ec:da:c2:97:1d:35:1b:55:66:aa:79:6b:cf:
         e0:22:e0:09:21:22:af:19:ed:42:d5:27:cf:a9:9c:05:07:90:
         bc:7d:5c:0d:dd:0b:af:4a:dc:6e:1b:bb:47:e0:d9:75:93:1f:
         e9:44:2f:bd:b8:aa:a7:3e:f0:a6:04:85:f8:25:1e:c3:60:a9:
         7e:35:b8:24:c7:14:42:94:09:80:15:d1:22:89:bb:1b:30:c8:
         33:a0:9a:d4:2a:49:cc:1e:58:4e:85:87:c8:d3:16:09:a2:a1:
         31:34:3a:0d:14:eb:7a:f5:2b:83:1d:06:63:14:37:17:8e:27:
         99:5f:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:36 2026 by rpki-client