Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b277e-bc6a-3c28-8f6e-979263438b25.roa
File:                     bf0b277e-bc6a-3c28-8f6e-979263438b25.roa (raw, json)
Hash identifier:          HdEa4cfvA4XBWscbML3Bjkfj2NOW1TDEwUHntCWETJU=
Subject key identifier:   15:50:D7:74:1F:35:3B:7B:70:5F:4D:05:0F:8E:F5:8F:D8:95:13:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11C5A1934C46A9FA44D460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b277e-bc6a-3c28-8f6e-979263438b25.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     26415
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c5:a1:93:4c:46:a9:fa:44:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=c6cf9ef1-fd7e-48a5-96d8-4a5e0a7a6c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:aa:ae:fe:05:f3:c1:c5:38:91:e8:b0:ce:
                    7c:15:bf:41:36:d1:e5:e6:22:ba:19:10:40:15:82:
                    19:1d:32:ed:55:36:c8:b8:e4:f5:a1:70:8c:c1:a8:
                    10:fd:da:e0:be:cc:a6:bf:b6:1f:3d:d3:96:7f:03:
                    bd:55:3e:c5:5c:da:8f:da:b8:38:c2:3f:70:1f:8b:
                    b7:3b:06:de:71:45:1d:ae:6d:46:8b:f4:71:31:4e:
                    24:dc:61:34:55:cb:ac:9f:a3:69:42:69:5c:db:cf:
                    7d:58:a5:fe:01:78:4a:83:9f:ad:87:f1:de:3a:79:
                    4f:39:d4:8a:96:a0:36:58:6f:fc:02:12:4a:88:03:
                    67:15:54:38:81:8a:d6:30:6d:e0:eb:7d:26:11:55:
                    0a:a8:e9:00:29:59:5c:6a:96:22:f2:ca:96:b5:b9:
                    c4:17:a4:0f:08:54:4c:25:90:25:0c:2d:bf:21:80:
                    80:18:be:f6:bb:4d:27:a8:07:b7:26:f8:fd:27:cd:
                    fc:59:82:32:70:94:6e:c3:34:42:b8:a7:e0:db:c8:
                    c9:fe:f1:3b:58:de:58:aa:e7:71:d3:28:7f:13:6b:
                    01:31:b6:32:c3:99:b1:b3:47:b6:06:4f:8d:19:25:
                    52:88:10:a3:28:68:8b:94:a4:f9:05:17:c4:f2:6a:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:D7:74:1F:35:3B:7B:70:5F:4D:05:0F:8E:F5:8F:D8:95:13:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b277e-bc6a-3c28-8f6e-979263438b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:48:66:51:11:2c:3c:b9:f2:f4:52:1f:c3:e1:aa:71:0b:
         b6:14:59:1f:fb:e3:3d:1b:7d:45:76:95:6e:3e:10:b8:cd:b9:
         96:6c:d7:18:d9:b4:ee:ca:d6:fd:4e:e3:3b:ae:d0:c3:c7:95:
         13:67:8e:bc:73:d8:1c:20:03:1a:51:a3:fb:27:07:d6:12:4c:
         52:5b:79:c3:c8:52:18:ec:ec:dd:81:5d:72:31:b4:32:56:64:
         50:f3:82:f5:2a:2c:e3:cb:11:88:bb:0f:21:e6:0c:2a:eb:7f:
         a9:c7:e7:53:72:11:82:e1:bc:09:e5:55:4a:45:29:45:9e:e5:
         93:9d:0f:0c:b7:9c:c1:d7:ec:c4:08:63:3f:dd:4c:f3:83:05:
         69:dd:da:1a:07:95:09:c3:5d:4d:6c:18:6f:fb:38:06:6e:2b:
         dc:db:93:68:44:74:4a:f7:d9:60:56:1f:c6:73:04:54:8b:60:
         f6:b1:b4:a8:00:47:c2:17:ab:f3:79:5e:7d:0e:95:22:c8:5c:
         50:52:cc:9d:c6:8f:99:3d:54:59:e5:6d:6f:4b:12:95:d6:09:
         40:f1:ed:77:d7:f4:5e:f4:96:8a:c3:7a:c1:ea:37:27:b1:10:
         3a:47:d6:43:9d:b4:7b:bd:19:a6:f3:6a:67:fb:85:af:41:7b:
         93:de:a5:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67EcWhk0xGqfpE1GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
YzZjZjllZjEtZmQ3ZS00OGE1LTk2ZDgtNGE1ZTBhN2E2YzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMuqrv4F88HFOJHosM58Fb9BNtHl5iK6GRBA
FYIZHTLtVTbIuOT1oXCMwagQ/drgvsymv7YfPdOWfwO9VT7FXNqP2rg4wj9wH4u3
OwbecUUdrm1Gi/RxMU4k3GE0Vcusn6NpQmlc2899WKX+AXhKg5+th/HeOnlPOdSK
lqA2WG/8AhJKiANnFVQ4gYrWMG3g630mEVUKqOkAKVlcapYi8sqWtbnEF6QPCFRM
JZAlDC2/IYCAGL72u00nqAe3Jvj9J838WYIycJRuwzRCuKfg28jJ/vE7WN5Yqudx
0yh/E2sBMbYyw5mxs0e2Bk+NGSVSiBCjKGiLlKT5BRfE8mpXXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBVQ13QfNTt7cF9NBQ+O9Y/YlRMJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwYjI3N2UtYmM2YS0z
YzI4LThmNmUtOTc5MjYzNDM4YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA0DSGZRESw8ufL0Uh/D4apxC7YUWR/74z0bfUV2lW4+ELjNuZZs
1xjZtO7K1v1O4zuu0MPHlRNnjrxz2BwgAxpRo/snB9YSTFJbecPIUhjs7N2BXXIx
tDJWZFDzgvUqLOPLEYi7DyHmDCrrf6nH51NyEYLhvAnlVUpFKUWe5ZOdDwy3nMHX
7MQIYz/dTPODBWnd2hoHlQnDXU1sGG/7OAZuK9zbk2hEdEr32WBWH8ZzBFSLYPax
tKgAR8IXq/N5Xn0OlSLIXFBSzJ3Gj5k9VFnlbW9LEpXWCUDx7XfX9F70lorDesHq
NyexEDpH1kOdtHu9Gabzamf7ha9Be5Pepfg=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:18:45 2026 by rpki-client