Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa
File:                     fd04e269-5e62-35b1-8fe8-4d2250555369.roa (raw, json)
Hash identifier:          1EQqQ1hMZIGgLFPB63+N/3lhw2NUfbV7LNugCkuFLZI=
Subject key identifier:   5C:5E:74:4F:93:1D:14:67:1F:CB:25:EE:67:E8:0F:7C:C3:16:7B:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A610009556A560B641300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396760
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:61:00:09:55:6a:56:0b:64:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=705d1f15-f67c-4bd1-84bd-6a140143484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:c3:1d:c6:42:f8:bb:6f:ba:9e:f1:9c:42:
                    60:ba:31:5b:02:50:8e:73:d7:a6:6c:54:79:11:56:
                    7c:42:c6:f9:be:ff:86:4c:1e:96:df:4d:0c:09:d3:
                    c5:29:69:b7:64:a6:c8:c0:db:0c:1b:f7:10:ea:02:
                    fa:45:41:92:64:54:19:0e:e4:8a:11:cf:36:ba:ab:
                    87:e2:f9:bd:eb:05:35:48:59:8c:8d:4f:0c:0d:66:
                    dd:ba:41:fa:7e:44:4c:84:ba:d8:7c:29:d6:d8:52:
                    bc:85:2d:04:03:5a:fa:e5:4b:9f:20:3d:7f:07:32:
                    ad:d7:4d:6b:97:0e:9d:cf:e2:88:03:26:84:10:63:
                    f4:9b:6e:63:b1:5b:18:e1:1d:93:65:8c:fd:49:1c:
                    91:f8:2e:b2:55:35:8a:4d:07:f6:5e:33:0e:a3:cd:
                    2c:1b:42:63:6b:c8:f6:14:cd:ac:55:32:9f:e2:7f:
                    06:06:a1:6d:53:47:b4:7c:7e:75:20:99:b5:07:76:
                    3e:49:50:78:fe:98:12:55:ba:2f:6f:a6:8a:d2:26:
                    f1:34:5b:5a:65:ad:11:c1:91:c5:6e:7f:d1:4d:d2:
                    98:7e:85:86:1e:d5:c7:f8:c4:cb:b2:31:25:73:a8:
                    bb:e0:2e:bf:bb:07:c1:ca:aa:31:ad:a3:fa:7f:7a:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5E:74:4F:93:1D:14:67:1F:CB:25:EE:67:E8:0F:7C:C3:16:7B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5b:14:c5:d3:6e:b6:e1:41:2d:e1:dc:7a:01:b1:57:e7:51:
         d1:58:72:de:64:8e:25:d7:6a:09:24:ac:f8:f2:4c:b3:1e:42:
         a6:0f:e5:cc:46:9d:f4:8b:84:62:38:50:7b:d5:82:e2:f7:8c:
         4e:cc:6b:0d:9c:a7:12:17:1f:2a:82:39:e0:79:a5:6f:99:bc:
         36:8e:2a:0c:f1:43:b9:56:aa:4e:50:71:bc:8b:a6:ed:0f:1c:
         03:4d:f4:65:38:c4:f9:3b:3f:36:ca:ed:c2:63:74:a2:a4:fa:
         f3:61:e4:3a:e2:b2:00:34:d6:f2:ea:8a:07:06:dc:ac:63:a3:
         86:06:b0:a1:7b:4d:c1:f5:ec:dd:10:89:30:7f:be:e6:e5:2c:
         ea:59:5a:ec:37:44:2e:50:65:fd:dc:5d:25:0d:ee:e2:18:72:
         b7:b5:ea:ac:67:49:e4:d3:34:3a:aa:c5:b6:e8:b8:51:70:ae:
         ea:32:04:9f:59:43:44:57:b0:0d:ce:53:5f:30:91:a4:26:3b:
         62:ba:59:39:f0:f9:68:a5:04:fd:e4:4f:ba:17:14:11:07:46:
         04:08:e5:bf:e0:74:4c:6b:8e:01:88:0c:69:be:8c:27:85:4f:
         22:52:52:fa:e2:f1:a6:9d:fe:6d:72:25:88:67:9f:57:92:9a:
         8a:f3:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:10 2026 by rpki-client