Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2fd2195-26c7-3a83-9b8a-f51fa0b6f052.roa
File:                     e2fd2195-26c7-3a83-9b8a-f51fa0b6f052.roa (raw, json)
Hash identifier:          VJdj5sn9eYXj344cVZzath3no4YsxwlDlMdIuTVdBvU=
Subject key identifier:   61:AF:A5:51:93:21:82:BD:9F:3F:85:B5:62:54:2B:1D:A2:A1:C3:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF6BD270D70F2EF7014D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2fd2195-26c7-3a83-9b8a-f51fa0b6f052.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396608
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:6b:d2:70:d7:0f:2e:f7:01:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1af4939a-7604-4f61-9eff-22a6e9cdd037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:4b:06:94:09:9a:32:2a:0b:a4:8b:aa:0e:
                    47:db:c9:ae:08:04:f0:95:2b:b8:ce:f8:25:ac:25:
                    7f:35:57:50:df:a1:8b:a5:19:51:72:fd:13:fd:ea:
                    1d:f6:f7:60:46:1f:a6:a4:f9:b1:a4:ef:79:66:12:
                    ab:fe:4e:cc:97:40:f5:8a:01:fa:82:77:9f:ad:e3:
                    c3:6b:27:b8:90:b7:60:d4:87:bc:34:2a:db:cc:6a:
                    f3:f9:ad:e6:ac:2f:15:5f:53:29:0f:be:74:9e:e7:
                    a9:31:52:db:44:b1:92:c7:4c:c3:6f:23:a6:cb:f7:
                    33:65:f0:2f:a2:a9:8b:fd:dd:20:74:ab:12:f4:da:
                    96:0c:4b:b4:7a:42:94:dc:bb:3e:a3:36:b9:61:a9:
                    fa:45:ba:70:0a:e8:2d:d3:69:f2:ad:4e:e9:8d:66:
                    90:96:52:5b:80:20:67:29:1a:02:54:a2:df:ff:27:
                    77:fc:9d:5c:f7:4f:e5:af:f2:83:de:cb:12:64:ee:
                    d1:2e:c1:48:0b:81:3d:a5:64:96:5f:2f:81:4f:61:
                    37:71:f7:2b:bb:78:6b:58:9a:2f:71:5b:79:db:ba:
                    2c:08:b9:c3:c2:ef:2a:bb:a1:81:12:a4:54:2c:63:
                    44:83:4f:fe:1d:bc:ab:5c:dd:5c:94:08:cb:a7:a3:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:A5:51:93:21:82:BD:9F:3F:85:B5:62:54:2B:1D:A2:A1:C3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2fd2195-26c7-3a83-9b8a-f51fa0b6f052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:68:95:54:3d:3a:b7:8c:27:f9:c3:d8:6c:99:43:c9:36:e0:
         2a:37:ad:1f:14:fe:ff:6b:f9:7c:54:11:50:4b:bf:22:bd:6d:
         52:80:38:92:c1:41:55:60:a3:fd:43:aa:69:47:ec:4d:3f:34:
         b0:bc:37:54:c2:fd:d4:2e:a3:5d:cb:2b:73:d6:30:26:47:2b:
         81:48:0b:ec:e7:e5:1a:de:b8:48:a8:d9:54:c2:5a:16:7c:f4:
         6c:b9:71:1a:89:37:ba:9b:e1:49:1f:4a:4a:ca:ad:dc:3f:e6:
         7c:7d:26:78:e3:91:7e:ea:eb:40:dc:82:b7:0e:51:9e:d1:27:
         54:39:85:4d:78:9b:0c:e6:86:59:55:9a:5b:48:45:65:11:dd:
         1c:00:fd:26:be:b6:f4:75:4d:d3:d3:03:4e:f5:6b:aa:ec:5b:
         7d:17:5a:d6:21:4c:2c:fc:4f:79:a8:8f:43:b5:b8:72:6d:d9:
         d0:e3:a1:eb:0e:6d:92:e3:a1:5a:20:86:9b:a0:e8:f5:4e:98:
         d1:ac:30:3c:d1:a0:d9:c8:d8:9b:d7:d9:98:07:b0:5c:04:ea:
         33:d1:38:5a:c2:ce:5e:db:55:b3:a0:6c:e3:87:9e:42:1e:2b:
         47:e7:da:51:07:d6:7f:f7:fe:69:48:77:b1:e4:45:7d:1f:5b:
         a1:c6:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:52 2026 by rpki-client