Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/228297ee-28f2-31da-b322-d94a058afb54.roa
File:                     228297ee-28f2-31da-b322-d94a058afb54.roa (raw, json)
Hash identifier:          ZU6nQsNF0Oll4NL38he/5hJndwjcaHnsczaQ4IO3xE0=
Subject key identifier:   C2:9B:6B:16:76:5C:C2:CE:BD:B9:F2:CB:BA:66:A4:0C:0B:48:8C:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEE8662CF3D9D06FBBFA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/228297ee-28f2-31da-b322-d94a058afb54.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396721
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e8:66:2c:f3:d9:d0:6f:bb:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=e8248592-a6dd-46c0-94fa-192d553f1660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:80:ed:c7:9e:85:35:bc:e2:7b:01:5d:47:
                    5d:ad:ce:58:88:d7:a8:d9:24:1a:05:3c:1c:3c:cb:
                    d4:4c:60:f6:d7:fb:87:71:e3:a7:9f:75:f5:0b:2c:
                    6d:f0:62:82:6f:52:17:d7:0a:23:3f:90:9c:ec:b2:
                    3c:9e:db:76:b6:96:7d:11:cc:04:c0:dc:c5:e5:0d:
                    f0:27:cf:67:e1:22:66:64:fc:f2:72:40:b3:65:14:
                    c3:68:29:32:98:6d:8a:53:c8:b1:97:95:d2:c0:c2:
                    41:f1:8b:c7:39:48:4d:25:37:f2:90:0e:3c:d8:17:
                    c4:18:b3:5e:4c:fd:fa:8f:34:43:93:93:e2:23:ac:
                    f0:8b:0c:6b:26:d1:74:76:4c:5a:18:4b:91:90:ac:
                    03:bd:b7:fc:82:dd:c4:de:60:aa:70:51:70:38:38:
                    df:97:92:c8:1b:54:7b:22:5e:9a:5d:a5:ce:be:43:
                    ff:fb:e9:a0:5b:84:03:4e:cd:dc:8f:04:3e:d0:9f:
                    e9:2d:dc:d2:cc:00:43:ed:67:d0:32:22:da:9c:18:
                    30:74:bc:d9:36:0a:25:84:10:86:64:86:33:b1:c9:
                    a1:dc:82:18:36:3c:f6:8f:7e:3b:e3:d3:e8:7d:6b:
                    c7:a0:13:7c:f1:61:2c:57:e1:55:3b:68:28:71:b4:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:6B:16:76:5C:C2:CE:BD:B9:F2:CB:BA:66:A4:0C:0B:48:8C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/228297ee-28f2-31da-b322-d94a058afb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:af:50:be:a1:52:7d:00:34:2c:bb:76:14:a7:86:62:6f:8a:
         8a:25:0d:ec:1b:71:59:77:65:1d:60:42:a2:77:42:ed:39:5b:
         fd:5f:76:4a:d1:ba:8f:93:59:29:66:9a:8a:4f:0a:63:74:2b:
         12:c7:33:91:80:1d:5e:d6:e0:e3:13:50:56:cf:48:11:c4:eb:
         95:e6:1b:fe:a8:ed:8c:cd:19:fa:85:c6:1b:54:48:af:3c:58:
         03:39:81:45:e5:90:47:29:28:a0:b4:f2:79:a6:04:dc:33:84:
         13:ff:ba:6b:7a:5b:96:55:a1:b0:b0:6b:ff:c3:c2:a7:0d:ec:
         00:cc:f7:ab:5c:c3:1d:dd:b0:ef:52:1d:4e:65:60:ff:3b:4f:
         ee:82:40:b3:6c:0e:8f:ef:28:65:74:20:f1:26:6b:aa:05:82:
         54:0b:16:8e:b7:43:ff:d2:ce:9f:1d:37:cf:d3:a7:64:2d:7a:
         fd:22:28:e1:f6:cb:34:60:57:90:08:b0:89:87:85:21:c8:8b:
         23:45:f6:10:b6:0c:98:cb:f5:8b:83:90:56:05:84:cc:93:47:
         e2:37:04:f0:b1:9f:88:f4:6f:93:be:1c:87:b3:2e:34:ee:c3:
         b6:47:fe:e0:6f:bc:2a:df:a3:ce:2b:ef:93:b0:eb:a8:98:31:
         59:5a:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:21 2026 by rpki-client