Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf15c57-96e0-3f24-b953-37d70864941c.roa
File:                     2bf15c57-96e0-3f24-b953-37d70864941c.roa (raw, json)
Hash identifier:          SkSahmwYmIBWziRuKCad14lH0Mbty+fnJ+HX6+FBT7w=
Subject key identifier:   10:19:EA:2A:33:FB:1C:77:E0:2A:98:0C:B1:3A:B7:FE:AE:F2:10:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11B143ADEBE000E866C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf15c57-96e0-3f24-b953-37d70864941c.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     397203
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b1:43:ad:eb:e0:00:e8:66:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=2c67d094-f996-4c63-885f-454e8aefceaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:bd:0b:08:b7:90:28:43:c3:3a:5d:2e:4f:
                    9f:f9:1e:f3:a3:39:f2:c5:74:2c:5c:0b:f5:89:39:
                    b6:28:54:a5:5a:bc:49:5b:15:cd:34:7c:1a:93:e9:
                    f0:fd:52:fb:bb:32:3f:64:0e:1b:1b:d3:e0:e9:28:
                    9c:54:5d:64:2c:b1:73:c3:b2:84:1f:7c:0a:88:44:
                    94:fa:45:db:4f:dc:54:f3:3d:b3:60:9e:b8:06:23:
                    80:9e:12:83:6a:08:5b:38:4e:ca:a5:60:9c:8d:2d:
                    b0:04:94:0f:6a:8a:e6:11:78:08:92:54:22:10:91:
                    91:82:f1:5d:de:b3:f5:ec:81:5c:71:57:2c:f3:d8:
                    3b:d3:5a:c7:a7:44:d4:2e:4f:e1:e9:46:36:81:8e:
                    57:96:4e:07:07:97:dd:2e:da:32:c4:c5:7c:40:82:
                    e6:85:11:ba:7f:a6:68:c6:49:b0:62:0d:7d:a0:85:
                    5b:8e:ef:63:60:b2:ca:c7:8c:dc:59:ae:b5:c2:c3:
                    50:75:eb:f3:99:79:89:84:85:7c:71:b9:00:c8:f5:
                    24:f5:f6:b9:cc:b0:b8:e0:c3:68:da:31:d1:8d:56:
                    c8:56:e2:93:38:c8:2d:87:e5:a1:38:b3:77:79:36:
                    a4:d5:64:7c:75:32:8f:5a:82:c5:6b:d1:fa:bb:98:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:EA:2A:33:FB:1C:77:E0:2A:98:0C:B1:3A:B7:FE:AE:F2:10:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bf15c57-96e0-3f24-b953-37d70864941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f8:7e:c4:10:fb:aa:da:70:4f:97:b3:bb:f2:bb:d4:7d:15:
         29:ad:7f:5f:75:11:60:67:22:b0:4e:74:00:ce:ae:4b:c2:3f:
         d2:4e:5c:32:06:ad:95:35:d1:5b:f2:ed:8e:4b:e5:b5:3b:e9:
         5a:91:1c:73:c7:13:2b:39:b8:7c:5d:a2:65:18:5a:b5:c7:02:
         31:52:14:b4:b9:dc:e9:f3:79:66:9f:2d:94:bb:c7:d4:b3:4f:
         31:e2:cd:7e:d0:1d:84:88:78:90:d6:2d:25:1d:70:d4:fc:99:
         6d:4a:74:67:ee:52:4a:57:4a:ce:8c:2a:7f:8f:52:b7:68:a5:
         2b:bb:fa:ed:e5:4e:f5:4e:29:c9:61:9d:8b:54:3f:0f:fd:1e:
         66:7b:06:f5:a6:a4:8c:eb:9e:b2:88:62:3a:97:82:92:8e:41:
         8d:31:1d:70:34:6a:6e:d7:7c:3f:d2:e3:ee:11:a0:68:e1:a5:
         90:eb:7c:7e:65:05:ad:02:0d:83:76:ec:bd:96:4a:53:4e:31:
         a2:d1:6a:c3:b0:6e:a2:2a:4a:e3:d8:d0:41:cf:09:8e:b8:f5:
         fd:46:ec:9e:95:2f:b3:21:fd:e1:4a:4d:82:d2:e3:68:4a:c5:
         fd:b0:53:4a:b6:3c:82:92:ce:a7:95:dc:76:78:55:0e:27:e4:
         db:b5:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:10:42 2026 by rpki-client