Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4678b834-d192-328e-b9ba-f9fe88b650d7.roa
File:                     4678b834-d192-328e-b9ba-f9fe88b650d7.roa (raw, json)
Hash identifier:          Gnn3/tpVQtoNhJ/ujVB+SC7P/NQ8JmSkpREhxbwrH4g=
Subject key identifier:   6E:3A:F5:C8:EA:A3:C6:9C:80:B0:FF:2F:C9:E6:A1:3E:BB:87:D3:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AF0072DC7952BCE4652C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4678b834-d192-328e-b9ba-f9fe88b650d7.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396691
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:00:72:dc:79:52:bc:e4:65:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=2777fe9a-b22c-4948-86aa-224d73ef9b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:a9:64:b3:7c:0c:6b:d9:de:fe:1b:e8:55:
                    fb:2e:0b:a8:37:19:4a:11:43:ee:2b:3b:b7:17:bf:
                    38:2d:c1:1b:34:58:46:82:4b:26:38:6d:06:1d:58:
                    ee:82:1f:ae:55:82:2b:c4:0e:82:33:4d:c4:f5:78:
                    ba:12:3b:09:e9:7f:fd:32:ca:be:f6:95:7c:67:5f:
                    95:2a:2d:c6:d6:5d:00:5b:40:74:5d:bc:8d:6f:d4:
                    61:09:d0:44:ee:84:f2:e4:dc:3f:df:a6:cc:ed:a2:
                    95:64:29:88:f0:4c:73:82:00:1a:78:9d:fd:e5:39:
                    2a:f1:df:f2:c0:84:10:5b:7e:45:c2:2d:1d:19:4c:
                    9c:83:5c:58:02:1e:29:af:ed:33:5f:1f:b9:da:1d:
                    73:3a:d6:aa:c3:f0:02:0f:83:af:82:2a:a3:42:05:
                    03:41:31:bb:61:2a:ea:64:5b:ed:30:3c:aa:db:28:
                    e8:c7:7f:7f:39:04:40:7c:10:77:de:37:4c:08:b0:
                    57:0a:96:f5:91:e2:9c:14:78:1a:2a:fc:72:8e:97:
                    c1:46:4d:1c:76:f4:47:29:ee:10:f1:09:64:ce:47:
                    98:39:9b:c2:7b:0f:c8:4e:98:ce:63:20:44:b0:f8:
                    0e:14:94:b9:35:ca:bc:97:c1:97:78:33:b4:99:dc:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:F5:C8:EA:A3:C6:9C:80:B0:FF:2F:C9:E6:A1:3E:BB:87:D3:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4678b834-d192-328e-b9ba-f9fe88b650d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:81:ff:49:63:58:77:6b:11:98:13:bc:79:44:d2:06:a3:
         b2:b3:31:fa:75:e4:a3:a5:d4:57:31:db:9f:f7:0d:82:40:a1:
         fc:8e:d9:25:b3:18:6e:ea:da:ef:0c:2b:30:fb:37:d5:38:67:
         51:b5:02:5f:bf:85:4c:dd:be:62:d3:5e:e8:c8:4e:72:c4:51:
         5f:b8:bf:2e:03:c3:90:14:ae:36:72:47:d0:ba:94:33:06:0f:
         f6:5b:88:4c:f6:82:8f:74:12:09:1f:74:28:ae:cf:86:97:e8:
         9d:11:62:d6:3b:86:0e:55:a4:90:e8:dc:91:74:7b:60:55:6d:
         f0:d2:53:ee:c0:e7:a3:53:b7:20:e2:66:0a:8c:8f:75:95:04:
         04:eb:34:97:24:96:8e:ec:cd:70:e9:10:0d:bb:f8:8a:cc:9a:
         55:8a:e7:53:ee:8a:ff:ba:f8:2b:0f:13:5f:78:d7:fd:3a:87:
         e1:6e:42:df:df:82:4d:a9:df:a2:4d:26:a9:e7:53:9e:da:83:
         18:9f:b4:de:28:2d:3e:af:67:ce:38:9a:ee:e4:f2:3a:79:0e:
         1e:eb:df:91:44:59:75:08:ad:6f:b4:6f:2d:c3:fd:73:bb:15:
         5e:7b:d0:cb:51:cf:0a:69:87:37:68:71:58:77:54:22:fc:57:
         f9:7f:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:18 2026 by rpki-client