Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456249d0-1f72-3c30-98d9-68239ed1cd8d.roa
File:                     456249d0-1f72-3c30-98d9-68239ed1cd8d.roa (raw, json)
Hash identifier:          HM+CzO2k0BvZv/HSGJObd7GEUNzomcSM7uJh1nmFWQ0=
Subject key identifier:   82:EF:CD:B1:FC:43:F4:14:94:17:63:21:50:22:FC:7B:FF:E8:23:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AF0050B13E836D4E43FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456249d0-1f72-3c30-98d9-68239ed1cd8d.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     19836
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:00:50:b1:3e:83:6d:4e:43:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=ae5ac6fd-4180-466d-86b8-1adcb3952fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:99:69:77:af:ec:6c:31:61:e4:09:be:35:
                    12:b2:b1:85:a6:ad:9b:6f:ef:6f:cc:9b:5d:12:b1:
                    3d:25:ce:dd:d7:31:06:db:39:d8:1d:86:0e:f1:87:
                    a3:b4:a7:b7:86:d4:7c:9d:4e:a8:f8:db:1b:21:cd:
                    9a:dc:19:3c:dc:71:6b:51:a0:bc:81:27:35:0d:f5:
                    80:8b:a8:61:96:ca:b5:9b:67:29:20:c9:7d:28:55:
                    f9:01:d5:2a:e4:31:44:be:a3:2f:c4:39:3a:0c:59:
                    69:1d:d4:ef:09:3d:04:e5:95:ea:a9:ce:e8:0d:e8:
                    df:67:03:18:15:12:51:a8:ec:04:37:6a:20:ed:d8:
                    88:50:1c:47:85:c4:b1:94:5e:be:41:22:7a:5b:52:
                    30:b8:4b:cb:14:96:bb:36:76:dd:53:25:09:cd:53:
                    47:50:9f:43:7d:8c:ed:5f:a7:2c:52:3f:74:0f:52:
                    c3:d9:c4:0a:34:6c:f7:cd:ac:03:b4:bc:e2:47:17:
                    62:c1:55:ac:39:d1:ed:18:3d:74:62:99:24:c4:d4:
                    57:0f:98:61:32:59:d9:a4:73:6d:f1:e7:a2:1b:79:
                    bd:4a:55:77:77:ab:67:fc:1b:39:b1:3c:58:0c:e3:
                    b9:89:b2:06:31:cc:a9:d8:19:ff:11:e2:30:f4:38:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:CD:B1:FC:43:F4:14:94:17:63:21:50:22:FC:7B:FF:E8:23:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456249d0-1f72-3c30-98d9-68239ed1cd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:f7:40:ef:9b:7a:7e:89:0d:bc:a9:55:73:a8:2d:3e:b0:
         6f:40:88:29:48:2a:45:f5:9a:05:31:86:fa:86:f0:1c:d7:8b:
         e5:e2:14:11:b3:e6:e5:e0:53:3f:19:a9:55:81:32:a8:07:98:
         d4:29:14:5d:aa:f4:2e:e3:99:83:e5:95:0c:7e:78:81:8b:3b:
         4c:0c:30:e1:60:3d:bc:fa:d3:f2:42:a6:e2:e1:18:70:81:a9:
         dd:bd:33:1d:0f:5d:f5:26:74:30:3a:08:a2:97:f4:e8:46:b0:
         f7:a1:d0:ca:69:38:35:ca:ac:21:4f:22:25:a5:d4:79:09:ea:
         9f:40:ab:1c:1a:e7:ad:d3:2a:cc:7b:ac:9d:33:70:4c:64:50:
         e6:27:b4:52:e7:c8:6f:31:c9:a6:ce:c3:30:b8:64:29:77:59:
         2d:a4:6a:0e:72:e1:1e:7e:66:3a:67:ce:ad:eb:3b:5c:72:13:
         32:f0:c4:c8:45:39:c0:c8:b5:ab:dd:59:ce:72:34:ab:08:3e:
         f9:62:89:eb:1b:33:fb:6d:5b:5d:93:17:54:5e:d6:9e:9f:de:
         8d:07:3a:88:14:64:2d:4b:ba:ca:12:d8:48:6d:6e:c7:89:cf:
         40:f1:2f:73:4d:99:de:a8:e4:51:ed:47:82:9c:d8:f1:7b:d6:
         26:78:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:06 2026 by rpki-client