Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa
File:                     fd04e269-5e62-35b1-8fe8-4d2250555369.roa (raw, json)
Hash identifier:          beOXvkE3X5xoalDFlZw3gOvCpaWHuxO/LSTzuaeIjTs=
Subject key identifier:   34:D5:7C:7C:54:7B:B7:2C:E0:7D:6F:65:0D:1E:8F:93:A1:93:FD:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D3D9B2E08AA1D05C9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396760
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d3:d9:b2:e0:8a:a1:d0:5c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=156bef6d-db08-49c6-b8c1-fd2900299a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:34:07:52:61:d0:14:02:2f:a8:21:a8:d2:
                    92:44:e7:d5:7a:47:30:47:56:7d:5f:87:d2:17:34:
                    e1:7a:69:4d:e0:df:87:be:48:d2:66:d4:8f:0f:60:
                    b1:b3:78:f4:ce:bc:60:dc:a4:57:97:fa:2e:c9:ad:
                    37:82:3d:75:25:a9:a3:be:f7:27:c0:5b:ec:0e:8e:
                    03:bd:83:52:e5:6a:9c:f2:06:11:91:1e:ac:e7:c6:
                    8a:27:68:b7:95:c4:b7:da:47:42:6f:9e:2e:d0:73:
                    42:15:17:89:a0:9c:ea:7e:7f:32:a1:53:b5:0d:c8:
                    e5:29:c6:28:22:1d:98:23:ca:15:9b:2e:85:4a:6d:
                    91:75:7a:bd:70:27:a6:91:29:75:5c:73:cb:7e:0a:
                    eb:87:8b:d6:91:e0:9e:3b:79:55:ad:95:7e:b9:86:
                    93:96:20:60:18:63:ee:29:62:19:8d:d4:b6:9f:99:
                    55:b8:bf:82:d5:63:dd:28:04:cd:85:1c:2b:05:fb:
                    af:3e:ef:ac:f6:35:a2:9b:43:bc:89:f7:d9:7e:b9:
                    1e:bc:39:cb:42:a8:cc:98:4f:42:02:fe:05:aa:a6:
                    f4:f5:cc:fe:80:68:7d:61:58:12:d4:84:fa:b9:3e:
                    b7:61:a8:b4:b1:ff:ef:01:42:36:89:6c:33:df:a1:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:7C:7C:54:7B:B7:2C:E0:7D:6F:65:0D:1E:8F:93:A1:93:FD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:b9:6b:fd:6e:1d:39:a0:16:44:06:c6:ef:88:67:32:b1:
         80:ef:4f:e8:0b:c2:77:7b:47:2d:e5:09:e7:89:90:35:3a:af:
         6b:c3:52:2a:85:2c:61:28:48:ef:4e:0d:c6:c1:d2:56:ff:34:
         1c:3e:d7:b8:49:44:f9:73:0c:18:a9:c6:b8:ce:42:75:c0:5a:
         cc:8c:58:85:af:c1:f9:73:89:aa:79:da:b0:bb:3d:f2:b2:17:
         85:32:f9:45:6d:7b:e8:5d:fc:57:51:13:37:37:cf:d7:af:e1:
         53:9c:e9:62:ec:e4:0e:fb:2a:98:be:4c:77:17:2f:af:bf:8a:
         13:9e:d8:78:da:a3:1a:46:74:cf:84:fb:0f:8f:ce:cd:77:b3:
         87:db:2c:a4:65:47:2f:85:1f:d8:b3:2c:b4:82:98:d9:35:19:
         23:8f:ec:8f:01:df:b0:f5:c9:9d:d0:30:dd:f5:65:6f:ea:a5:
         c9:36:43:8e:19:64:1a:81:50:d6:d6:4e:37:fb:65:8b:a6:00:
         ca:7a:6d:b3:16:1a:cf:4f:bd:97:ad:3b:59:7b:f5:50:0e:77:
         0e:db:7a:fe:35:45:21:a9:c1:22:b4:46:ce:89:7d:f6:3f:db:
         18:25:31:ed:d5:5e:f8:6a:e2:f8:39:29:0f:78:05:89:53:c0:
         8c:de:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:18:33 2026 by rpki-client