Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65766bd6-1016-3bac-87b7-b8b429ec7f04.roa
File:                     65766bd6-1016-3bac-87b7-b8b429ec7f04.roa (raw, json)
Hash identifier:          XyXd1oNbg+8U6+RaqAx6GJwIClX6i6ytaFVU8L0FYfk=
Subject key identifier:   0B:1A:25:18:52:C1:8D:57:17:92:54:B5:E0:1C:67:F3:5C:40:F1:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62CB6DC3A70C8AD40D9B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65766bd6-1016-3bac-87b7-b8b429ec7f04.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396743
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cb:6d:c3:a7:0c:8a:d4:0d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=bfaf1837-c7f0-4199-baf3-42d94ff47e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:b5:86:e9:1d:bc:5a:cc:1e:f2:46:de:f9:
                    df:ec:e5:ad:ac:14:10:f6:ab:25:7a:03:f0:89:87:
                    08:d5:17:10:b4:58:c7:cb:3a:ca:b9:93:89:c9:32:
                    73:7c:d6:75:1e:e7:17:47:7d:01:c6:dc:e1:aa:5c:
                    bc:b6:5e:a6:0d:9c:fc:0c:07:c2:74:4e:b3:ac:5f:
                    d2:be:19:b4:a3:d9:2a:5c:d9:13:f9:09:dc:92:1e:
                    f4:5b:be:61:a3:51:f0:18:78:f6:c1:e3:65:bb:42:
                    9f:58:8a:00:53:95:88:d8:c8:14:62:b2:b7:50:09:
                    ca:19:7b:6c:a1:b2:fc:eb:f9:9b:fa:36:3a:17:4e:
                    91:0b:4c:00:c4:a0:62:d8:c3:6f:7a:21:a3:f6:45:
                    d0:1c:68:70:5a:7d:74:ce:08:53:2e:ed:e0:e3:a9:
                    aa:97:c0:ef:3d:c1:71:1a:0f:af:e0:fc:0e:02:98:
                    f0:ed:b3:0e:5a:aa:5a:8a:5e:5a:2b:85:2c:f5:67:
                    fd:cd:b3:9d:db:01:2a:99:b4:b3:35:2f:b8:4f:29:
                    41:ac:76:5e:aa:a2:50:5f:bb:72:36:41:f3:24:d1:
                    06:95:54:9b:b9:14:a1:90:8a:40:7b:99:10:88:dc:
                    6e:3d:78:b3:68:13:a9:47:01:2c:69:3f:6c:d8:a8:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1A:25:18:52:C1:8D:57:17:92:54:B5:E0:1C:67:F3:5C:40:F1:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65766bd6-1016-3bac-87b7-b8b429ec7f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c5:de:2b:eb:b5:9c:e3:b2:4b:03:5e:49:63:59:e2:02:87:
         85:d8:38:8f:ac:15:44:18:ef:5c:86:98:82:55:b0:5b:05:c6:
         87:c1:3c:d9:c7:de:ff:9a:a1:aa:09:c1:5c:dd:b1:92:8b:06:
         3a:d4:73:48:d9:18:9b:79:d0:72:59:f0:6d:98:8c:dd:37:e7:
         aa:4d:26:76:bc:73:8a:64:98:cf:db:93:b2:b8:28:3c:19:c7:
         f0:1d:e6:73:97:65:60:63:d4:64:c7:f1:76:62:74:04:bf:64:
         0b:67:0d:3d:72:01:f0:ad:51:12:4b:9e:7a:18:a1:28:e8:30:
         e0:28:d5:61:28:1a:c3:4d:76:ab:79:02:ee:14:46:26:1d:14:
         d8:65:4f:85:0a:89:4c:18:9a:a7:6f:cf:a6:fa:e8:17:29:2e:
         aa:23:46:cb:1d:3e:d9:0b:ff:ad:66:81:63:bb:88:88:48:08:
         2e:81:0d:7a:75:38:1f:72:69:7d:7d:a9:8c:5d:35:77:3b:9e:
         63:09:9b:9b:37:3d:cb:ed:11:d9:e9:c0:52:81:b5:ef:63:07:
         06:20:4b:e3:ae:cc:bb:0a:0f:da:32:0e:ee:d8:86:a6:44:91:
         8b:e3:c2:39:cf:8d:a4:ee:e7:1a:95:6e:d8:65:76:76:a6:02:
         b0:07:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:19:10 2026 by rpki-client