Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fad35e7-9d35-3abc-91c1-ee3e14bd5366.roa
File:                     8fad35e7-9d35-3abc-91c1-ee3e14bd5366.roa (raw, json)
Hash identifier:          3QbgS65jIYy799161pu1FruoS3oOXkmAy52D7mLAM6o=
Subject key identifier:   27:60:23:1D:8D:13:8D:2C:22:F3:97:40:63:0F:9D:D8:8F:12:8E:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62AB97C3AB803C6327B360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fad35e7-9d35-3abc-91c1-ee3e14bd5366.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     36630
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:ab:97:c3:ab:80:3c:63:27:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=4de46623-8dc1-4a24-b2a2-57bbb74e3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:60:fc:41:29:9f:f0:fd:a7:65:49:d9:c6:
                    15:c4:8d:6b:ea:1d:83:bf:5c:be:1f:e6:ee:ef:2d:
                    f3:a9:8d:84:e3:35:65:0c:b8:40:2a:f2:f9:21:f0:
                    1f:b4:f0:15:4a:10:04:b7:fd:ec:86:69:04:42:a7:
                    3b:66:68:98:a1:1f:9f:ea:71:63:36:03:fb:31:f8:
                    43:90:69:8c:ed:92:ab:37:73:99:43:78:83:41:3f:
                    ac:a7:23:0c:e9:01:4e:40:2b:5a:a8:6d:e1:d0:63:
                    c5:83:44:a2:1d:d6:d2:fb:2b:db:94:5f:a3:5b:32:
                    42:5b:11:26:6e:3e:35:2a:ed:bf:2c:ef:7c:13:62:
                    09:c0:e2:41:bf:60:0c:42:63:29:99:4c:8f:9f:a1:
                    9f:e1:39:63:8a:f5:b2:e9:75:bd:3d:65:43:e3:c0:
                    d8:ba:0d:92:ad:c9:50:d9:11:8f:2d:f3:a0:ae:93:
                    60:bc:8e:11:eb:e4:cb:7b:8f:76:28:1a:7d:1e:46:
                    ce:10:69:29:65:ac:82:ca:76:8d:c6:96:09:fb:38:
                    a8:99:bf:6f:9d:d7:5c:5f:73:9a:97:b2:f6:a4:3c:
                    c4:d8:5e:b5:24:5b:42:ef:9b:10:bb:d4:3b:6f:2c:
                    47:d0:53:c8:2b:28:5b:d6:c9:8b:f9:66:03:bd:97:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:23:1D:8D:13:8D:2C:22:F3:97:40:63:0F:9D:D8:8F:12:8E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fad35e7-9d35-3abc-91c1-ee3e14bd5366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:7b:6f:87:0c:0a:2c:4a:74:f2:8e:b3:aa:07:60:d9:9f:
         0f:14:24:33:a8:0a:46:30:bb:1c:39:a9:34:a6:6f:36:da:1b:
         98:07:cc:d4:63:9f:29:d3:96:c6:e8:99:18:29:a8:2a:ac:0c:
         8b:2f:72:4e:09:7f:32:21:35:61:c8:5e:ac:9c:69:44:4e:9d:
         77:2f:a7:73:75:fe:35:e8:3e:53:a5:83:bc:f6:03:97:1f:aa:
         65:a5:e9:37:0e:a6:90:29:95:99:f5:0f:f9:2f:1a:c0:21:d2:
         83:80:a3:5c:8e:10:3e:bf:f4:e6:7c:6c:e0:fe:c6:aa:8a:8f:
         14:d1:44:ed:cd:04:a6:a0:91:57:62:ac:cb:d1:d1:86:ab:25:
         71:23:c3:5b:98:c9:32:e8:ae:16:13:c9:50:f6:cf:a2:71:ca:
         f4:de:c4:e5:7a:e0:92:10:a7:e6:e0:f9:50:73:cd:5b:4d:34:
         7b:89:45:11:b9:61:13:53:00:ae:ed:74:1c:8a:a4:cd:dc:12:
         74:30:6a:3f:26:d7:47:65:de:74:f8:fd:a5:f6:11:3c:e6:b4:
         d3:0f:f0:74:08:73:83:a0:16:55:0c:a3:fd:4a:8c:fd:92:5b:
         62:ac:50:4c:6a:f0:a5:e2:14:55:74:28:9b:85:ba:60:8a:0a:
         18:14:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:15:21 2026 by rpki-client