Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4675b6-d039-3d88-a922-cf1bff4bab88.roa
File:                     ac4675b6-d039-3d88-a922-cf1bff4bab88.roa (raw, json)
Hash identifier:          5Y+BfaQQ/DyxS6+bue3j/RIL3kFpHohu3N0gTl8Vf/I=
Subject key identifier:   7C:6C:D7:11:EF:A1:07:11:F3:7D:DE:2F:7B:19:B4:A8:5A:29:D3:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEE57C471537B15383DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4675b6-d039-3d88-a922-cf1bff4bab88.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397193
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e5:7c:47:15:37:b1:53:83:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=95bac9b8-8f9c-47f0-b9a8-0b40b2df5cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:46:2a:62:77:41:a0:c9:d2:67:09:68:f0:
                    f5:b4:41:e8:7c:ec:9c:9c:de:8a:4e:f7:54:c7:24:
                    f6:e5:1c:5e:10:bf:4f:d9:37:63:fb:10:6a:6d:c6:
                    cf:2d:83:b6:5a:92:c7:22:d7:25:79:d8:c4:d9:38:
                    68:6e:f1:5f:6d:13:b2:48:e2:98:75:df:dd:cf:53:
                    ca:05:04:d9:16:e7:85:9d:11:36:25:5f:a2:a0:1c:
                    40:96:2e:9f:01:d1:b1:2b:01:aa:45:7f:32:b9:5e:
                    35:a6:ec:21:74:d8:0e:54:81:82:fb:f5:5d:c0:65:
                    56:94:cc:8a:db:30:4c:dd:57:c0:3e:94:93:77:6b:
                    b3:3c:cf:11:4d:ec:fc:0f:52:92:af:f1:4a:70:e3:
                    e4:61:23:19:d5:38:a1:fa:a8:5d:20:56:2b:1d:3d:
                    11:4f:72:63:8c:96:db:4c:e5:0a:55:c3:c6:d8:ab:
                    c8:38:19:ea:9b:14:73:43:d0:0d:60:67:b3:69:47:
                    f2:87:08:5d:a2:20:5f:dd:5b:f7:18:a5:e4:10:fa:
                    71:c5:35:f8:52:ab:8a:6c:7f:43:3b:80:50:a5:90:
                    a4:5d:31:78:75:3c:07:60:9b:81:e6:c9:74:d5:ec:
                    0d:8c:fb:85:f0:88:03:8c:b3:60:49:d1:f2:89:d9:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:D7:11:EF:A1:07:11:F3:7D:DE:2F:7B:19:B4:A8:5A:29:D3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac4675b6-d039-3d88-a922-cf1bff4bab88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:7c:a1:7f:17:b0:3c:82:49:8a:b5:a3:37:fa:38:b6:79:
         2f:46:90:e6:4e:f9:c7:fa:ab:c6:8a:01:30:ec:43:a2:51:e3:
         08:c8:c7:57:d1:41:68:f9:aa:ca:82:01:27:a3:68:04:7e:1c:
         34:6e:c2:c3:23:69:86:22:c2:46:f5:d7:9d:5c:00:86:c2:8b:
         20:c0:9d:54:3d:ee:84:47:29:80:1b:f5:b2:af:8b:8e:d6:88:
         d2:ad:d5:0e:80:f2:b3:94:42:2c:07:e6:44:45:cd:69:7e:4a:
         66:83:50:d9:5f:28:73:e4:1b:2e:af:8d:3c:f6:f9:21:f0:30:
         a4:a3:3f:00:3e:dd:be:62:fb:93:2b:a1:79:60:6d:8a:66:89:
         d3:0f:f1:74:1d:cb:35:f9:1f:6c:7b:9a:03:6d:81:00:7a:89:
         ab:d1:f2:39:b5:37:ca:ec:24:b7:dd:94:f9:7e:a3:93:e8:6a:
         1e:a0:14:69:8d:d3:fc:37:2a:8c:a1:41:ad:b7:f1:f4:49:0e:
         d2:96:ca:37:0c:aa:20:5c:42:4d:c4:bc:ee:1f:80:9c:08:97:
         6e:03:fb:12:70:e5:19:f1:f1:49:f6:7c:ec:af:4d:17:b4:b0:
         bd:55:f8:8e:ec:f3:65:5d:64:e8:4e:77:78:de:2a:9f:56:94:
         9f:82:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:55 2026 by rpki-client