Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99688b78-5847-3168-93a4-66c0a3127f4c.roa
File:                     99688b78-5847-3168-93a4-66c0a3127f4c.roa (raw, json)
Hash identifier:          zpkF1EsZgL/qHPZG0g+Kyi8FMIP1Usz/A27L8Jle8qo=
Subject key identifier:   67:64:80:F2:BE:91:4B:C0:31:D9:94:5E:9C:91:C2:C2:3A:08:53:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F5E62BC891D7408921F0DF930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99688b78-5847-3168-93a4-66c0a3127f4c.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     22547
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:bc:89:1d:74:08:92:1f:0d:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=51083024-050e-4332-9bf9-c1080694c010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:26:2e:b2:c5:98:80:7f:d4:41:c4:56:da:
                    5a:7c:c2:57:99:a3:ad:fa:c4:57:7a:68:52:11:a9:
                    b4:82:62:31:7b:8f:92:9e:56:e6:da:b5:bc:58:36:
                    11:32:24:d9:0a:86:01:05:1e:27:89:2e:47:98:19:
                    a2:3b:9b:95:69:18:03:0a:77:f7:ce:a0:15:3f:7c:
                    e2:1f:54:62:5f:04:91:4b:87:a9:40:c2:70:4a:c5:
                    1c:70:1c:ff:e4:4c:d3:b8:48:9d:56:33:9d:55:4b:
                    e6:86:d0:37:ce:b8:be:44:3b:d1:74:d0:3f:69:9f:
                    d7:a2:32:a1:27:71:8e:d2:f3:4e:7c:60:47:e0:22:
                    a9:cc:af:06:aa:f0:ab:d8:ea:2c:20:62:6a:f3:ae:
                    49:36:5f:e6:d0:7b:fc:68:cd:39:f8:78:76:aa:0f:
                    f3:f2:45:17:f4:92:01:30:12:58:e7:9a:12:8b:30:
                    cc:a9:0c:bb:2e:0a:3f:49:f0:f8:ef:8d:a8:2f:36:
                    06:b1:21:c1:13:f8:61:71:f3:70:0d:b5:1a:1b:65:
                    f8:b6:97:ad:63:70:06:39:ca:a5:13:70:7c:3e:db:
                    38:7d:5b:47:98:8a:66:de:2c:7f:a9:c5:d3:5f:a1:
                    4c:7d:f4:d8:5a:27:24:ed:76:1b:f7:78:4e:ce:bb:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:64:80:F2:BE:91:4B:C0:31:D9:94:5E:9C:91:C2:C2:3A:08:53:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99688b78-5847-3168-93a4-66c0a3127f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:0b:0d:e2:4c:08:86:1b:ce:5d:e6:49:c6:b7:a3:47:39:
         ab:3d:31:96:91:76:e0:ba:0a:24:7b:d3:27:ff:05:9d:6b:13:
         24:03:04:8b:e7:77:ab:cd:ab:e7:5c:e5:15:65:bf:a6:27:e4:
         e4:9f:90:f1:38:fd:f8:23:46:7f:21:d2:b4:8d:b4:00:ba:f0:
         b5:c8:0c:82:b7:45:f1:b9:c6:2c:59:cd:5f:27:00:08:47:42:
         19:60:e4:08:15:d8:34:58:be:92:bf:c5:17:2b:f2:61:17:35:
         1f:1a:db:41:82:f9:35:09:f6:ee:4f:db:1a:8e:5f:fd:e7:ca:
         1f:4b:a9:13:9f:94:ae:1f:35:f3:45:86:ab:2c:09:46:0b:6f:
         c5:7b:f5:69:e2:13:4a:9f:9f:8d:15:14:b8:4d:84:69:44:05:
         b9:94:29:29:9c:20:88:1d:bb:f8:18:d5:64:11:37:4e:e4:78:
         75:01:ce:1f:88:59:32:2a:87:39:b7:6e:80:bc:31:81:0a:87:
         cb:ad:fc:81:ed:9d:51:5b:26:80:7f:f0:d5:3a:a6:31:f6:17:
         6f:0f:ae:16:ec:91:75:03:e7:8f:75:21:47:f0:36:96:1d:9f:
         87:97:2f:e4:d0:8a:6e:8c:c1:82:77:0e:7e:d0:0c:b8:ce:1c:
         0b:2a:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:35:34 2026 by rpki-client