Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa
File:                     20744fa0-530d-37c2-bbbb-39764f2a26c6.roa (raw, json)
Hash identifier:          /7FzlG0IUR0+r0ZDH0xSZ/nnaQ8KrG3j0Y8BbDF+bew=
Subject key identifier:   65:2E:B5:27:1E:D7:66:84:F0:C8:65:ED:42:F4:03:81:55:64:08:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AF04325B16C058CFFB4440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     36617
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:04:32:5b:16:c0:58:cf:fb:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=360f4705-ed59-4dd8-86d8-0de58142c6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:bd:5c:bf:6a:aa:c0:a8:d3:fc:28:6e:04:
                    c6:73:d4:5e:1f:ca:f0:6c:60:54:f3:94:49:99:e9:
                    8a:e9:15:2f:d2:55:22:4b:b4:04:c1:47:9d:52:77:
                    4b:5e:d3:03:0a:23:8d:5c:11:27:23:c3:c4:7a:4f:
                    6f:3a:2e:60:5b:de:68:97:d3:15:f7:3d:d2:94:4a:
                    cf:20:60:47:f8:5a:d5:63:42:7c:f5:cc:78:00:90:
                    27:5a:b8:4f:46:a7:43:13:75:43:9f:43:96:0f:11:
                    93:39:96:1f:f8:03:07:a6:39:ac:32:c2:47:02:f0:
                    fc:19:81:fd:cd:9a:98:40:95:fa:4e:8f:b9:6f:97:
                    f2:4f:aa:37:a5:72:9b:89:94:8a:bd:89:fb:a4:8a:
                    46:74:2a:bf:9b:0b:76:51:de:1a:8f:a0:18:12:07:
                    d3:28:65:19:92:2e:d1:12:00:cb:51:4f:e8:a5:8b:
                    d9:86:df:fd:e7:f9:55:5f:3b:04:03:86:14:a1:83:
                    25:10:00:e1:d2:88:2f:1c:be:01:7c:9a:dc:e2:e3:
                    79:1e:d7:fb:33:8a:36:85:88:43:96:35:a7:a8:af:
                    c9:d7:7a:55:5d:1d:5c:a1:98:2a:11:ba:44:6b:65:
                    d7:0e:b5:a4:0d:5e:c9:b5:c0:ae:ab:4a:bf:29:07:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2E:B5:27:1E:D7:66:84:F0:C8:65:ED:42:F4:03:81:55:64:08:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20744fa0-530d-37c2-bbbb-39764f2a26c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:c4:79:d9:7e:e1:75:e5:a3:97:bd:98:17:c3:5a:8f:d5:
         2a:d4:5d:35:18:e4:43:ef:fa:da:a2:90:2e:0f:75:e4:c8:51:
         e7:7d:c2:4c:fb:47:0b:e3:6e:b5:54:50:28:5c:b0:a7:24:08:
         54:6a:bf:43:38:6c:0c:2f:96:f3:eb:0a:de:f0:67:db:cd:bf:
         2f:bc:26:94:f4:41:4d:75:8f:d3:0f:fe:40:65:c6:24:c1:6a:
         8c:d5:ce:ba:a8:d0:55:4e:cf:a1:90:d2:bb:82:b2:3f:12:5a:
         50:75:7a:70:b4:2d:99:b1:0e:fd:8f:1f:a6:58:43:22:d0:ee:
         73:fb:d6:85:f3:22:a2:f6:13:b7:7c:7d:20:1f:51:59:69:c5:
         49:a3:09:71:12:46:bb:f6:d1:a4:f6:a8:d5:3e:91:97:98:b8:
         b5:1e:7b:b2:73:12:bd:16:18:40:a3:74:df:f6:d0:d3:04:76:
         aa:62:a2:f8:e9:79:60:32:df:44:ec:73:07:50:ee:30:89:74:
         14:c0:0d:2f:22:c1:82:32:63:cb:0c:12:7a:74:fc:19:a0:b8:
         2c:79:25:81:a6:58:15:ad:2b:93:c9:16:19:4a:1d:5d:7d:8b:
         fd:98:8c:31:d2:9b:bb:3b:ad:c3:29:e5:31:44:2e:04:9e:40:
         66:d9:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:23:37 2026 by rpki-client