Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c5cb347-bbd7-3f77-b02d-3ffceab9e045.roa
File:                     5c5cb347-bbd7-3f77-b02d-3ffceab9e045.roa (raw, json)
Hash identifier:          o1/CysODJ7smN0GOfuBIupS+nsVayaNCrD2PQRCCejA=
Subject key identifier:   86:25:F0:94:DA:CC:EC:1D:21:41:FD:8D:D4:6E:DA:47:48:FE:35:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62B508789694526160FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c5cb347-bbd7-3f77-b02d-3ffceab9e045.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396744
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b5:08:78:96:94:52:61:60:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2292928d-321e-456e-8213-a452b1167afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:16:fa:04:4d:ce:e3:83:ce:b0:d2:c2:14:
                    e9:f0:0e:bc:91:c0:2e:ca:d6:12:8c:4d:e6:07:ed:
                    2d:23:80:29:e9:72:7e:36:25:fb:31:7b:91:dd:25:
                    de:f5:9b:11:1f:42:2a:87:3c:40:5f:60:fb:87:f6:
                    eb:bb:d7:be:d6:48:a3:cc:e9:12:13:1d:b3:92:39:
                    28:c7:03:0d:0f:42:12:4b:3e:34:3a:e6:66:bf:01:
                    09:0d:ff:d0:34:55:57:fb:d0:a8:01:f7:05:f7:c2:
                    f2:ed:61:02:cf:00:81:f3:b9:5b:b1:40:a0:d6:f3:
                    35:04:fb:b8:9b:96:a2:28:ef:ec:1a:c9:85:77:7c:
                    b6:3f:7d:e2:f7:84:87:ea:b0:de:80:b4:d6:99:38:
                    0d:27:13:ce:ba:d7:a0:3c:bd:8d:8d:03:ce:2d:65:
                    ab:6b:29:ac:34:d6:e1:00:28:64:11:21:33:ea:e1:
                    cf:43:8d:20:f3:13:46:96:86:c9:d2:59:12:22:84:
                    e2:86:a1:1b:f9:4c:18:59:a0:3b:e9:8d:46:b4:d8:
                    fe:d4:57:14:23:e3:23:c6:3d:89:1d:f2:fa:cd:7f:
                    3f:59:36:09:ca:5a:2a:ef:24:db:d3:8b:ff:63:94:
                    b7:76:54:71:7c:64:10:ea:53:86:c3:ea:14:6d:99:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:F0:94:DA:CC:EC:1D:21:41:FD:8D:D4:6E:DA:47:48:FE:35:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c5cb347-bbd7-3f77-b02d-3ffceab9e045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:4f:e4:bd:36:1c:41:14:64:d5:62:f2:69:25:b3:85:2c:
         d6:70:ce:2c:a2:b8:e6:14:95:5d:56:7f:58:cd:3f:dc:ee:2f:
         5e:c7:b1:44:bb:6f:5d:3c:75:24:7e:23:de:05:8c:0d:dd:a3:
         bb:a8:48:6c:75:37:c7:42:b8:ad:27:31:ac:c4:be:04:a7:aa:
         41:e6:8e:57:79:48:c5:12:00:7f:5e:d4:42:f6:a0:79:0e:37:
         14:b7:92:c3:60:3f:6b:c8:ef:63:56:1a:97:03:e9:e3:ce:33:
         34:bb:a3:c6:1f:55:fd:25:53:f4:46:84:47:a6:6a:37:33:a5:
         33:e8:2e:c1:11:cc:13:9f:39:a7:d7:f5:36:61:a1:d4:07:97:
         ce:eb:ee:9f:97:da:fc:1f:f7:57:58:96:a5:6f:99:21:81:ee:
         12:1f:dc:2d:42:0b:92:db:04:28:47:6e:7e:4d:43:71:7b:09:
         4f:ff:db:d4:d6:99:0c:39:73:69:06:1b:f2:0b:37:a4:09:c8:
         1d:dd:5b:78:b7:83:ea:1b:54:33:74:a4:80:8c:9f:c7:17:da:
         e5:bf:5d:b2:27:9d:d1:43:df:85:39:d9:6e:a6:f5:0c:01:65:
         5c:8f:db:48:92:94:27:ff:2c:ce:c9:2c:ca:2e:3c:93:0c:be:
         de:31:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:51:35 2026 by rpki-client