Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75aea21f-5cad-3b76-9253-aa59fd595e99.roa
File:                     75aea21f-5cad-3b76-9253-aa59fd595e99.roa (raw, json)
Hash identifier:          v9qIMyRU/QSj41kXIWgzvkeCaW0+/TOqUxa6TIlARvE=
Subject key identifier:   F6:5F:96:F1:F0:27:D5:A7:87:C7:90:D8:60:3E:4F:18:63:7B:00:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62CFC1C6F54315FF44F840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75aea21f-5cad-3b76-9253-aa59fd595e99.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396707
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cf:c1:c6:f5:43:15:ff:44:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=ae21cffc-1297-4066-b2c1-1ba3ff0f7d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:07:39:ce:07:a8:67:27:e1:d8:25:1a:c0:
                    6b:28:51:3c:87:5a:74:04:6a:00:2b:a4:b0:54:6e:
                    fd:7f:1b:50:e3:fc:8e:1d:63:e1:d0:2c:18:b6:d4:
                    c7:f3:63:23:d1:e5:f3:9c:cc:ac:21:cf:09:00:0b:
                    46:b8:12:d6:f2:7a:e4:95:17:cf:b5:37:8e:db:74:
                    9a:0e:d0:40:bd:2b:93:97:99:65:be:5a:f8:97:42:
                    7e:4a:c2:f4:dd:83:63:69:d6:ca:19:74:8a:b5:e0:
                    b6:cc:49:91:0c:34:8e:2d:cd:d3:04:ae:a6:ac:08:
                    a4:db:08:5b:85:73:58:2e:be:51:7d:08:8c:6a:12:
                    2d:2c:88:cd:9d:0a:14:0d:bf:43:83:3d:f0:cc:02:
                    fc:3c:a9:ce:c8:81:99:a1:97:c9:e6:5c:ff:bd:cc:
                    13:de:2e:66:34:dc:83:4b:50:e8:5e:33:9b:e8:03:
                    a8:c8:4b:1e:a9:28:83:83:ff:02:a9:e2:d7:c9:ca:
                    43:b7:27:37:c8:c2:d5:cd:c3:de:3a:b5:ae:fb:84:
                    66:e7:48:45:4b:fc:0c:d7:b7:2f:cf:cb:d8:02:9a:
                    13:7f:e4:c8:b5:0b:cf:7b:4b:38:e4:b5:67:3f:c0:
                    2b:46:b8:cb:89:55:a9:3a:b2:05:ae:5f:51:8b:70:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:96:F1:F0:27:D5:A7:87:C7:90:D8:60:3E:4F:18:63:7B:00:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75aea21f-5cad-3b76-9253-aa59fd595e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b3:07:39:05:b1:af:ee:1b:84:14:db:37:9a:85:bd:5f:03:
         5d:31:e2:d5:bb:6a:d6:4d:20:16:13:33:04:25:c5:05:30:4f:
         1e:6d:6c:5e:61:1c:84:45:36:93:d4:c9:ce:a6:a2:56:44:3a:
         fc:54:29:92:4d:a6:64:9a:a8:9a:99:16:9b:9b:75:ae:09:32:
         0d:9b:08:ef:f2:38:2d:92:79:e8:44:2f:97:96:6c:e3:05:33:
         23:9b:c4:98:cb:b6:45:e5:37:9b:d0:39:b5:cc:8a:bd:8a:a1:
         5d:db:be:cc:07:8a:c2:0b:76:ba:34:4f:6e:b1:92:31:e0:af:
         5c:4a:1c:81:f4:bd:12:45:a0:12:70:26:a4:e4:28:74:6c:34:
         26:af:87:b2:b1:92:40:7d:7e:c9:f4:72:9a:86:0e:eb:ca:22:
         60:fa:22:80:aa:f8:c5:3c:82:01:57:4c:a6:60:a9:2f:26:f4:
         8f:a5:b8:bd:ff:b8:b0:bc:f8:6e:92:12:a5:fe:a6:8c:f2:af:
         03:66:8a:67:56:ed:4d:93:fe:5d:0e:c2:09:4a:91:38:76:da:
         61:0a:31:74:39:58:4a:ca:bc:81:6c:cc:c3:80:9f:43:31:ff:
         44:6d:9d:79:67:21:f1:f3:d4:3e:94:bb:e8:9d:5b:de:5b:f5:
         1a:72:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:22:24 2026 by rpki-client