Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73147cb3-c5b9-3079-bfb0-e255510aa6bc.roa
File:                     73147cb3-c5b9-3079-bfb0-e255510aa6bc.roa (raw, json)
Hash identifier:          8rz4cC7XZD+XqMSAw1DoHKW0oj+6coqyod8HVhBgGVk=
Subject key identifier:   47:EC:FA:18:05:15:24:4A:33:18:9D:08:F3:17:0A:9B:4E:6E:9B:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62D5C7821FFE5334E9D720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73147cb3-c5b9-3079-bfb0-e255510aa6bc.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396553
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d5:c7:82:1f:fe:53:34:e9:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=306c39e6-8426-44fa-a8a9-90d8bdf692a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:ba:ec:42:aa:44:55:73:f6:3b:a5:99:76:
                    6a:b7:05:8b:ea:af:a9:7f:d4:7e:b7:79:10:f4:7c:
                    b0:06:c8:2c:dd:9a:3a:31:58:f6:fa:35:fd:dd:2a:
                    6f:21:11:ad:bd:41:f8:67:5d:1c:e2:38:4a:f4:c5:
                    70:ed:1f:22:47:1a:53:ce:4b:23:a9:5a:50:03:2d:
                    93:a6:96:0b:a1:66:a9:83:94:f8:c1:f6:ca:a9:65:
                    82:c3:80:58:a4:bd:3a:ae:6d:17:2d:46:7f:1f:ec:
                    2f:09:ca:26:fb:61:e1:c4:1f:7f:b5:e8:91:74:06:
                    72:42:db:e0:a9:0e:70:b1:f9:ae:57:ba:8e:53:e1:
                    ad:1f:13:ec:ea:fc:51:2e:8f:a9:03:5e:1a:f8:d1:
                    f6:7e:71:12:e9:21:1f:68:23:88:4e:39:38:a8:c0:
                    d5:f5:60:ea:d6:8f:98:e7:e7:b5:ef:97:fd:ed:91:
                    ed:4d:df:b7:1a:95:aa:c6:79:fd:74:93:de:6f:41:
                    5c:5a:26:e7:bb:55:db:48:03:4d:fa:83:e3:9c:43:
                    ef:af:6d:bd:12:54:e2:9d:28:a5:ed:b7:23:e9:3b:
                    6a:00:ec:89:78:5c:a5:41:fb:2b:85:6c:7d:d6:12:
                    90:32:0c:65:c5:bd:19:ab:9a:48:97:80:61:0b:8c:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:FA:18:05:15:24:4A:33:18:9D:08:F3:17:0A:9B:4E:6E:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73147cb3-c5b9-3079-bfb0-e255510aa6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:34:12:c4:55:03:ac:f4:04:f4:a8:36:94:a0:f3:d8:60:
         5c:cd:94:46:bd:be:9e:b1:71:29:b4:e0:6b:46:90:67:54:5a:
         d2:0c:47:ef:96:af:68:c2:90:9c:e4:34:df:5a:3f:f3:ad:68:
         32:e5:d6:ac:d4:4c:85:6f:60:77:9e:97:23:de:09:76:3c:09:
         9a:2d:e2:77:fb:60:8b:fa:41:36:7d:96:d5:e9:b6:c0:91:91:
         15:a1:a4:66:ab:7d:ad:0d:fa:df:56:e3:5b:84:6e:70:cd:86:
         39:6e:67:70:63:88:bd:f3:c5:cc:f4:5a:c7:a4:3a:f9:7e:e1:
         8b:8a:00:4a:e4:b6:57:d2:b4:13:ef:8b:16:91:16:10:c3:18:
         ec:c9:67:ca:e2:bb:14:56:37:40:58:83:ab:ca:7a:c1:21:f6:
         d6:46:1a:0e:28:ef:00:5d:bb:cf:e2:7a:79:6e:6f:27:6c:ba:
         77:18:21:3c:82:74:b0:e3:db:83:79:81:49:bf:ea:a3:8c:2d:
         24:ce:97:ca:fe:de:3c:38:46:17:c3:53:45:66:0b:50:36:cb:
         b1:31:e1:d6:0f:f9:b9:84:11:c1:c2:bb:aa:b3:08:f6:09:95:
         6e:46:72:fb:76:11:a0:a3:65:8b:5f:e0:98:84:3b:ff:8e:dc:
         b8:b1:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:03:49 2026 by rpki-client