Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa
File:                     27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa (raw, json)
Hash identifier:          7MWDuP4cQZ7SjtW44X7Kt8fb969HSGLx/Nr6b1TxEtU=
Subject key identifier:   CB:80:18:0E:28:C5:75:AC:4B:C2:E4:1B:A2:C3:74:69:C8:CB:8C:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11A3808DAF6682D3BE5700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396641
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:a3:80:8d:af:66:82:d3:be:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=b0af8ea3-2665-47af-abc5-397255ea3bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:f7:3f:39:c2:88:9c:a3:4e:d1:d1:78:9a:
                    b7:41:f2:ce:ca:3a:ae:4d:1e:7c:71:5a:5e:de:fc:
                    7e:e6:64:f9:21:c7:1d:34:2a:ae:fd:e7:ea:42:6e:
                    b7:00:59:b2:b7:4a:f6:19:6a:79:3b:3e:69:a1:f0:
                    7c:44:0b:14:f4:29:76:fd:c6:60:91:27:af:36:71:
                    f0:0d:7e:53:95:4d:2e:c8:2a:f4:95:c1:85:3e:5c:
                    5d:f3:74:ef:70:3b:bd:b2:30:8b:49:90:52:cd:dc:
                    74:b6:57:97:12:fe:28:13:8c:45:b4:5c:62:89:bc:
                    0e:87:74:38:47:e5:2e:c9:28:69:a8:96:e2:02:b3:
                    68:13:a8:12:62:6b:d3:38:15:77:69:83:db:83:bb:
                    ee:31:29:b0:cf:a1:a7:a4:7a:fd:e2:d9:3d:be:cc:
                    1f:96:a2:80:71:49:7c:db:c8:64:e1:b3:c3:a2:d7:
                    a7:56:bf:6b:eb:4e:a0:b2:82:60:20:cb:10:0c:50:
                    dc:33:b8:2f:7c:f3:48:0b:06:27:ab:8d:a0:ba:f8:
                    95:d9:89:6f:6f:85:77:63:ff:97:81:4b:66:4e:54:
                    85:28:f2:49:d4:7c:26:7b:b3:0b:ec:b1:71:cb:70:
                    1c:25:85:29:c6:bb:0e:d4:de:0e:5a:83:aa:bd:8a:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:18:0E:28:C5:75:AC:4B:C2:E4:1B:A2:C3:74:69:C8:CB:8C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27e543a6-8026-3aa9-9aaf-0b5d7f00a580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ac:7f:01:81:6c:69:9b:fb:13:95:16:97:da:88:54:32:aa:
         a3:0d:e4:32:8b:e6:07:51:06:bc:ae:98:ea:4c:b5:9a:d4:12:
         87:75:d9:26:e6:22:30:8f:45:ed:60:48:91:ca:a5:6e:97:4c:
         e0:85:78:fb:18:ca:71:bd:42:a6:36:8c:10:77:31:c9:95:fa:
         08:f8:51:90:70:9d:a9:78:38:ac:fa:a0:da:63:89:85:d7:f1:
         2e:bf:66:3b:84:9e:db:c9:d7:5b:53:f5:80:2c:03:57:02:91:
         8e:76:8e:23:5d:7a:c5:7c:4e:c0:1c:df:e2:cb:ac:38:6b:1d:
         bb:45:cb:46:97:98:42:e0:d7:53:36:37:2b:22:2d:d2:17:6d:
         b3:da:23:6e:61:83:91:ef:6d:8e:3e:af:6c:6e:6b:d9:ba:38:
         75:34:75:5e:1e:cf:75:65:88:14:cd:9e:52:89:62:0e:95:04:
         df:33:75:5d:a2:22:d5:b6:70:e8:e9:19:b7:56:50:2c:43:3f:
         4f:4e:5d:c8:c0:02:53:25:1a:da:4f:08:7e:1c:03:9f:34:6f:
         e9:11:95:dc:d5:27:0e:9d:44:4d:ac:ff:86:01:92:08:da:7b:
         31:75:b6:ff:28:14:16:bc:a5:41:04:87:76:26:53:d3:87:ea:
         46:f4:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:41 2026 by rpki-client