Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
File:                     e8ecae6c-4778-387d-88a6-7131036ca703.roa (raw, json)
Hash identifier:          DLOrvFpniIXE+zpP7jk/oI4bmWMSmIiNMra3vVN0j4M=
Subject key identifier:   CE:55:A1:15:A2:C0:4A:DF:DE:12:E2:89:E3:31:B5:24:8F:83:F3:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11C9D85CE728CB6B0D1440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396695
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c9:d8:5c:e7:28:cb:6b:0d:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=dfc8bf9e-cd4f-4c11-ba8e-a9d7e5876501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:8b:51:e6:c7:c5:fc:a7:71:db:4d:5b:67:
                    68:7d:91:ae:07:af:e2:da:ab:8e:39:e7:a6:e3:48:
                    a5:73:28:af:62:59:db:f3:1c:72:1b:dc:96:62:fc:
                    22:48:73:98:e0:86:2d:bb:14:dc:ad:d2:09:09:97:
                    00:11:30:7c:eb:d0:81:2d:3f:2b:f9:ae:0a:ac:37:
                    a4:da:d5:a8:6e:97:54:ae:b9:45:c5:24:7a:71:ae:
                    36:c0:61:9a:5a:98:84:b2:1f:98:4e:e6:b8:db:6e:
                    a5:73:67:72:c7:ed:8c:03:7f:3d:ab:96:7e:81:55:
                    23:40:c3:7c:27:4e:2a:ec:60:59:9f:09:d8:43:84:
                    0c:12:8a:d2:78:48:68:48:8b:88:53:83:74:74:66:
                    d6:3e:9e:0a:31:3a:6c:5e:80:52:3c:78:75:25:a5:
                    57:07:e2:87:04:ad:01:ba:2a:f9:e5:30:17:71:f9:
                    37:86:ad:27:f1:be:bd:12:d9:44:78:02:0b:18:f2:
                    77:ae:f1:42:a3:44:8e:54:1b:e5:06:62:b5:a3:8c:
                    fe:88:02:0a:17:83:be:3e:9e:ea:75:04:a9:d0:ba:
                    52:c7:77:81:a8:6e:c7:9c:47:6d:45:b2:f7:25:41:
                    34:7c:a8:05:17:66:d0:94:fb:96:50:32:e3:de:9e:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:55:A1:15:A2:C0:4A:DF:DE:12:E2:89:E3:31:B5:24:8F:83:F3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:30:88:e8:b4:d6:68:3c:46:2f:db:76:4c:ae:60:4b:df:7a:
         c6:33:ae:1d:55:07:50:ee:a1:e1:b5:65:dc:c8:40:dd:3b:3f:
         3f:96:a3:4c:49:1d:f0:ae:38:9b:37:93:28:59:36:9c:80:19:
         15:6b:f8:e2:1a:f5:d0:56:12:1d:46:e0:57:b0:9f:7d:cd:66:
         0f:29:6f:89:39:a7:c8:ec:3f:ba:5d:ee:df:27:f4:13:63:b6:
         18:f8:28:fc:f9:db:6e:6d:20:dd:e1:37:53:a4:6d:48:07:46:
         a0:f8:d7:b7:5d:9e:a5:0e:c3:ca:ba:54:ae:b0:a3:86:d8:c7:
         3a:a2:08:7a:de:7f:cb:6d:17:09:fa:03:44:47:d7:79:10:fb:
         d5:fd:ad:70:89:d0:48:e0:9c:6a:fd:de:f7:3d:02:7f:e9:d7:
         04:23:37:2e:22:aa:a6:ac:b4:ca:eb:e7:b8:16:ea:b9:9b:fb:
         d8:d3:3f:08:95:96:78:87:9f:31:af:41:a2:86:c8:67:d8:89:
         65:e7:67:cf:be:df:62:35:ab:69:c2:35:f6:c4:79:5b:02:68:
         30:d2:98:1f:ac:fd:bd:18:e6:1d:16:36:fc:26:13:c4:10:08:
         17:d7:31:f6:7b:41:8a:7e:35:97:eb:ec:f1:eb:1b:ba:84:5f:
         52:1f:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:16:55 2026 by rpki-client