Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6286143-a603-3b8b-8d42-3aeb1c3d9d8d.roa
File:                     e6286143-a603-3b8b-8d42-3aeb1c3d9d8d.roa (raw, json)
Hash identifier:          +SKfO8+3RrIGrj+IQCbF5xZP5oZgCVIbwzjGZvqHfhE=
Subject key identifier:   D4:74:DE:16:EC:A3:6C:AC:3C:D0:32:06:12:AF:2E:8D:87:34:FA:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A57E7AF04050EC1F87C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6286143-a603-3b8b-8d42-3aeb1c3d9d8d.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396666
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:57:e7:af:04:05:0e:c1:f8:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=2f482a16-c86c-436c-8959-29f89ef15bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:8a:d5:a9:2f:ed:60:76:43:79:e8:1c:43:
                    1b:1a:1f:24:dd:a4:17:58:62:59:0a:30:8c:dd:5a:
                    4a:01:a6:08:4a:af:93:a3:9b:99:80:28:24:e0:e1:
                    ef:9d:87:7f:78:bb:66:23:88:ee:9b:dc:d1:f1:70:
                    4f:9b:6b:50:fd:c5:b6:c0:cd:a5:48:f3:86:55:cf:
                    ba:5b:85:18:2f:b4:e9:56:04:d0:1a:7e:eb:d0:41:
                    69:9a:d5:42:5e:19:fa:19:f0:28:ac:94:c5:55:7b:
                    98:30:35:40:bc:93:6c:e7:ed:ba:9f:45:df:ac:f1:
                    0d:3b:c1:b6:3e:7e:cb:c4:93:ee:48:ea:1f:41:4d:
                    7f:a7:1c:43:74:a8:f6:c4:b4:36:ce:1a:ce:5b:6f:
                    5c:b9:0c:c7:be:b2:19:a3:a9:a6:27:5a:0a:5a:b7:
                    5a:0a:65:c8:73:af:0f:27:f3:ad:1f:8f:b9:54:15:
                    10:b3:08:c4:1b:48:80:f3:65:36:9f:5b:77:0f:27:
                    0a:af:2e:36:65:8d:b9:15:b3:79:94:08:52:68:ee:
                    d9:31:c8:ed:42:13:a4:44:57:6e:e2:d2:0e:ac:26:
                    3c:d8:34:c6:4c:b2:f4:0f:ea:f8:07:bd:f5:b6:c8:
                    85:c1:fa:7b:e5:e2:3d:07:66:39:89:12:64:47:f8:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:DE:16:EC:A3:6C:AC:3C:D0:32:06:12:AF:2E:8D:87:34:FA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6286143-a603-3b8b-8d42-3aeb1c3d9d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:f6:24:13:4c:e0:5f:e0:3c:ce:e6:3d:03:46:94:77:90:
         07:2c:54:41:fa:1b:9c:0c:bf:d6:44:2d:ac:bf:15:79:78:31:
         6f:d3:cf:e9:09:62:a2:4e:83:72:1c:79:31:06:a5:c9:9c:9f:
         1a:ea:e8:4c:08:15:82:ec:ba:ef:d7:cf:c7:aa:40:fa:49:b8:
         81:e7:8a:1f:d6:86:cb:28:79:af:5d:9e:16:0a:03:39:60:5f:
         60:1d:a5:ec:6f:0e:a0:b5:18:6a:10:ff:ee:9e:08:96:83:82:
         75:40:9f:b3:4d:67:76:34:8e:b0:cf:fb:52:8a:89:91:18:e7:
         56:6f:81:66:59:c5:2e:85:21:79:42:ec:e4:a9:d5:f1:bc:62:
         c9:56:3f:75:46:e7:eb:c5:aa:9d:e7:b3:99:c0:87:62:a3:c6:
         4a:8b:c1:48:3b:1c:3c:c2:ae:55:9d:c0:1a:45:b9:c2:9d:ed:
         d1:b0:a8:77:6e:1d:14:67:1a:80:a6:6c:87:dd:00:cb:f3:d3:
         d8:94:8d:8f:cd:8e:83:b5:55:cb:5a:d1:03:a6:eb:98:2e:83:
         57:3f:d3:dd:15:fb:4b:61:7b:99:c4:f9:de:33:76:5c:c8:2d:
         7c:62:c0:3b:a4:37:ec:d9:5c:ae:b5:9f:14:e6:8e:a5:83:b8:
         c1:48:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:48 2026 by rpki-client