Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa
File:                     b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa (raw, json)
Hash identifier:          IQ+/e+2sYs6Igc+x3AvZmF88ibH+UOPR9kbd0IDO1Fg=
Subject key identifier:   83:E4:4E:2B:86:EC:68:81:38:79:50:1A:6C:6A:AC:25:CD:97:34:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEFD2DCE3B4C95ECF28A34
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396688
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:fd:2d:ce:3b:4c:95:ec:f2:8a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=2f18cf43-5fb3-4c17-9b56-e3b54d586c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:d7:be:76:09:c3:92:4b:cb:3c:2d:0c:73:
                    d9:1d:0c:71:7d:0d:13:87:c1:de:3e:38:20:88:72:
                    b8:86:7f:64:f0:3e:a8:33:a5:30:69:24:90:23:84:
                    cc:fb:05:a0:53:78:e0:b3:0a:01:98:7a:51:78:db:
                    b0:b6:74:bf:f5:f4:97:b5:0e:79:ba:26:2e:83:55:
                    98:5e:19:c8:ea:bb:2f:31:09:19:8f:7c:3a:e3:22:
                    3d:d9:91:e0:0a:5d:a9:8b:e8:62:30:9e:8e:12:fe:
                    09:45:c0:90:65:12:6f:3e:72:91:5d:46:2a:54:b4:
                    99:01:e5:9d:b7:96:08:7a:9e:0f:3b:8a:9b:50:d5:
                    00:6b:9b:bd:ee:c6:2f:e4:96:a6:cf:1c:2e:47:71:
                    b3:af:03:49:1c:f0:42:e3:e7:d8:89:69:00:81:6a:
                    a1:83:00:61:2b:08:88:87:e4:c6:5c:dd:eb:9c:18:
                    ad:0a:13:5e:d7:e6:65:de:ce:af:e1:1f:04:64:78:
                    88:e6:e4:f4:06:04:7d:0a:dd:6e:8f:8c:69:b7:47:
                    d0:e6:20:e7:1a:69:03:5c:61:e6:9e:6d:4f:07:c6:
                    77:83:15:ea:dc:25:b4:1e:71:ae:64:9a:5a:81:84:
                    57:0b:6a:01:23:19:dc:7b:37:19:31:2b:e4:88:20:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:4E:2B:86:EC:68:81:38:79:50:1A:6C:6A:AC:25:CD:97:34:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:13:a9:e3:d3:5a:cc:3d:f9:1f:7c:ad:2b:ab:c5:c9:36:fb:
         aa:4b:63:a4:0b:43:1b:6f:22:96:a6:8f:c7:8f:f4:79:7f:c7:
         f1:ec:73:f8:0e:9b:61:ae:61:31:ed:36:c8:7d:f0:1f:30:63:
         68:83:e8:f5:96:05:17:3b:25:07:d5:a0:5e:27:e2:7c:80:5d:
         99:07:48:2e:f5:7b:10:5c:43:63:18:ea:b5:d3:01:54:3d:ba:
         65:d6:ec:89:a4:5d:20:63:39:41:32:72:20:47:80:fb:d3:61:
         11:3c:3c:d2:94:f8:eb:d7:fb:2d:c7:9f:42:ac:d9:8e:1d:df:
         bf:a9:95:4c:a3:9c:52:65:26:49:ce:d9:c7:01:3b:e4:d3:3c:
         bf:ed:0c:bd:94:e8:5e:1d:43:12:7b:96:b1:c8:02:b7:81:4e:
         ca:70:59:27:bf:28:3b:60:8c:3f:f3:e7:09:b1:9a:06:a9:db:
         02:47:c7:d6:bd:9f:be:34:74:e4:05:85:9a:9d:08:b5:e6:28:
         b9:da:ae:eb:67:d8:e1:58:90:c1:8f:e0:c3:32:0f:69:ee:93:
         41:50:9d:4f:61:43:3c:0b:0e:a2:c5:47:be:29:19:7b:94:27:
         b9:79:fd:a7:bf:f6:9c:b1:c6:61:1e:86:48:4c:d5:28:1d:c0:
         78:74:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:46 2026 by rpki-client