Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa
File:                     bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa (raw, json)
Hash identifier:          3/fJv9vX6bt8jvICfFpt6cOUvSM1DYSRfEUXwGyTwdA=
Subject key identifier:   EB:3C:5F:AA:65:4A:98:42:BD:07:B0:50:0B:A8:2C:65:F4:08:25:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF6A00C6B4E7AADF0FDC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396564
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:6a:00:c6:b4:e7:aa:df:0f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=92cf27c3-ac65-4af5-82b7-3f317fa8e988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:60:8f:3c:c0:5e:c2:bc:e5:43:9c:41:86:
                    6e:97:1d:24:9f:fd:a4:08:72:26:13:7b:2f:11:6f:
                    33:95:b4:dc:63:44:d1:c6:b8:49:46:69:86:b7:69:
                    fb:ee:e3:1f:aa:65:ad:d5:da:0a:69:0e:39:6b:60:
                    00:59:80:58:65:ed:01:1b:98:dc:d4:90:67:8f:38:
                    da:33:25:db:b6:ee:ac:91:a2:62:ec:c2:91:f8:be:
                    ad:74:84:f5:a9:55:14:27:2f:52:36:c0:8d:6b:d9:
                    ec:70:b5:71:6b:d8:43:b6:3d:df:67:e5:1f:7c:de:
                    54:a4:12:2f:ba:31:e4:f7:9a:ed:97:39:cb:6b:f5:
                    1d:3f:fa:de:c1:57:38:e4:c9:ba:aa:e4:23:15:c2:
                    63:b0:33:d2:5b:64:ae:b1:aa:9a:74:c7:e0:96:64:
                    9b:ce:de:23:19:8a:98:47:ab:a1:96:71:8e:02:40:
                    29:eb:19:db:47:de:ef:d8:05:f4:1f:ae:91:6b:2c:
                    e2:af:0e:68:60:33:2d:e6:5f:e9:93:58:f2:11:0c:
                    83:78:aa:8b:1d:00:b2:14:01:c8:29:dd:4a:f9:5c:
                    c5:41:c7:a7:3a:15:1e:57:7d:7c:d7:8a:09:4c:65:
                    22:75:5b:2a:f4:86:1f:8f:46:cf:1c:1c:3d:01:9b:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:5F:AA:65:4A:98:42:BD:07:B0:50:0B:A8:2C:65:F4:08:25:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:96:7a:49:94:55:e7:cb:b3:f1:c6:f4:bc:a1:7f:4a:81:
         f1:2c:af:7b:23:3c:28:dd:ca:66:ab:ee:2d:58:c9:25:03:e3:
         d9:f6:90:57:48:74:d8:34:21:8b:d5:74:bd:41:50:97:3e:0e:
         40:a4:b7:70:5c:96:4e:5b:a6:f8:f2:3a:1c:8e:75:cc:f1:aa:
         0a:4f:37:6a:e8:9d:5c:5e:0b:30:a7:db:39:4e:5b:57:86:9d:
         57:36:80:d9:50:3f:cb:ef:6b:39:e6:aa:f9:99:40:3f:14:a1:
         28:2a:d4:07:5b:20:52:f4:ed:c0:b4:c3:55:49:1c:82:9a:17:
         61:10:fb:12:cb:7b:83:cf:8a:3d:88:cd:91:3e:02:d4:cb:53:
         ca:04:9f:ac:ef:03:e3:fd:6b:68:17:30:95:3d:37:8c:2c:54:
         e8:d5:df:2c:ec:8b:14:10:89:27:56:64:18:9a:f7:45:0d:c1:
         98:7e:23:fe:31:dd:4a:91:cc:27:22:93:28:b2:82:8f:bc:c2:
         71:80:68:2d:3a:5d:9a:77:d6:7d:f5:b8:7a:aa:76:99:65:74:
         6f:43:62:78:ff:5a:1c:2e:63:1f:f6:bd:9f:c5:b7:0e:09:26:
         31:d2:78:ca:99:68:ce:fe:db:42:0c:bd:f7:d7:f7:cf:b4:39:
         75:e6:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:22 2026 by rpki-client