Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdcc769-d81b-31c0-8b29-a7a81379c917.roa
File:                     1bdcc769-d81b-31c0-8b29-a7a81379c917.roa (raw, json)
Hash identifier:          TP49zE+Wvbag2Yr2QwTsAUgTTr2g9TSB+u2qNaNlbYM=
Subject key identifier:   3F:F5:A8:80:97:8D:90:DC:6A:39:73:0E:6D:65:A2:BA:65:DA:A1:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D6499F967B4BBFE26A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdcc769-d81b-31c0-8b29-a7a81379c917.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396566
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d6:49:9f:96:7b:4b:bf:e2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=abc965b8-c49d-46e4-a8cb-373e8c8c9267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:4a:a0:5a:92:d9:ed:a0:e5:66:d3:e0:30:
                    52:38:6e:97:23:44:de:6b:1a:ae:3d:29:5c:f2:67:
                    3d:81:ae:b5:51:b2:0a:4c:80:bc:e6:e0:a5:d2:b1:
                    e9:ce:42:d6:c2:a4:10:44:f3:07:37:d4:87:94:fc:
                    96:4f:e7:ce:e0:72:d4:b9:0c:5c:00:65:de:aa:11:
                    e2:ce:b2:a7:a7:c1:81:8a:6e:7c:76:d9:44:3e:53:
                    86:3a:0c:97:2f:72:06:2e:30:6d:46:79:30:9f:ca:
                    de:4a:5c:42:b6:be:e4:78:c8:d8:55:b3:e5:28:09:
                    06:84:3b:ae:e2:9a:41:68:0c:9c:f0:ae:62:24:0e:
                    cd:d7:77:fb:27:1e:0c:e7:05:99:87:47:1d:50:b2:
                    4a:90:c2:55:99:60:60:22:88:a3:f3:ec:1a:33:82:
                    f9:da:84:8e:ac:ec:ac:60:8f:ae:ce:21:30:9c:06:
                    87:f7:25:25:ae:d8:44:7a:13:71:c5:71:66:66:fe:
                    23:0c:04:97:36:08:53:70:b7:25:13:b4:3a:1d:80:
                    7b:89:f3:c0:2a:f0:19:fc:37:7a:52:d5:d4:37:2b:
                    c3:d9:46:16:a0:29:04:32:cf:d5:48:0a:c5:91:5d:
                    fc:ed:84:c8:87:08:d6:66:c5:9e:43:e8:ef:b6:7f:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F5:A8:80:97:8D:90:DC:6A:39:73:0E:6D:65:A2:BA:65:DA:A1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdcc769-d81b-31c0-8b29-a7a81379c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:3a:53:d5:fc:d1:bb:e5:d4:b7:10:13:1d:90:63:84:bf:
         c3:9f:b9:61:34:57:3d:58:31:4e:5c:6d:9f:1c:3f:2c:92:03:
         8c:ab:7f:c9:b0:a2:4f:36:36:85:0c:3f:71:81:87:c9:5a:6c:
         9a:b7:74:a7:ed:2b:d8:77:6f:e6:a2:49:ae:9c:bb:d7:cd:73:
         bb:7f:23:da:af:bc:03:98:6f:5e:11:c9:7c:8f:d0:18:d2:2a:
         18:46:4f:c7:99:aa:c2:b1:08:51:8f:8a:d9:84:b8:7a:00:d4:
         9b:97:6c:6d:85:dc:68:ab:fd:3a:7c:78:ce:8c:bd:ea:4c:32:
         c8:1d:38:e2:10:a7:a7:b0:b9:6b:27:3e:83:2e:d4:b9:21:42:
         73:29:4e:83:f9:26:72:5c:45:ed:d3:3a:dc:c1:0f:ad:23:2b:
         01:a6:40:ec:96:2f:cb:87:52:3d:db:4a:25:79:2b:0e:a5:ec:
         d4:5d:ea:7b:12:98:e3:5c:db:ba:fe:75:d5:9c:a7:dc:ee:0e:
         90:e5:d8:79:79:25:5a:b9:37:d2:eb:03:ab:5b:0c:2c:21:d3:
         38:f8:62:68:5e:6b:dc:c6:93:47:d9:27:dd:01:5b:2e:ab:3e:
         a0:ca:ab:21:b8:b8:e7:ba:20:b4:4e:1d:9c:c5:90:e2:e6:60:
         10:c9:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:34:26 2026 by rpki-client