Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b48e0f04-14fb-390d-80b4-b64c1f983f6a.roa
File:                     b48e0f04-14fb-390d-80b4-b64c1f983f6a.roa (raw, json)
Hash identifier:          yItbDWvBomck7EkKGI7Jg+wzYSW60hhfTZmIzFi99uI=
Subject key identifier:   CE:7A:88:14:DD:08:CF:D4:D0:73:36:02:72:A1:C1:CF:3F:EF:C7:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEE88D34DEF2B1D9F4AB60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b48e0f04-14fb-390d-80b4-b64c1f983f6a.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396615
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e8:8d:34:de:f2:b1:d9:f4:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=d9c98150-7c77-4c51-a141-8b04fd0846bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:61:4d:d7:8c:d3:ef:45:ff:55:ba:29:38:bd:
                    0b:19:d2:52:df:fa:3c:dd:a5:83:5c:17:78:68:15:
                    da:72:bf:53:78:4b:36:71:5d:65:ba:80:51:38:42:
                    09:4d:b4:7e:74:b9:f3:06:67:0e:b1:e3:61:df:aa:
                    fa:2d:b9:c2:ad:52:90:04:86:00:da:74:3d:c7:14:
                    c3:af:1d:ab:50:f2:a0:8a:a7:e6:2b:16:75:ac:8e:
                    e9:bb:a0:b6:f4:59:8e:73:04:6b:3b:ec:5a:99:99:
                    6f:f0:b9:f8:5f:54:dd:66:29:23:50:0b:fe:97:91:
                    3f:f5:e2:33:63:ea:68:13:e7:f8:92:ce:e5:e9:43:
                    64:9f:37:3b:56:55:2b:95:0c:d9:55:3f:6c:ab:c5:
                    b7:87:b5:e8:2e:c1:d5:97:ef:14:d9:09:3c:46:c0:
                    a2:1b:e1:fe:7c:e1:cb:ab:1e:6d:c0:34:bb:1b:14:
                    13:46:3b:65:db:1c:b1:84:26:de:c5:d2:2b:f1:9e:
                    24:6e:01:78:74:fa:22:19:d9:ba:96:99:87:ff:4a:
                    1a:10:00:f2:e4:42:21:9b:44:e1:10:40:19:10:ca:
                    56:62:52:e3:fa:27:d7:20:f6:f6:e0:92:cd:85:97:
                    60:2c:85:07:8d:4b:7f:99:d1:fc:b6:e4:ef:ba:00:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:88:14:DD:08:CF:D4:D0:73:36:02:72:A1:C1:CF:3F:EF:C7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b48e0f04-14fb-390d-80b4-b64c1f983f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:41:2a:7f:3f:53:25:84:61:28:20:ea:48:e6:96:95:79:
         2a:2f:46:df:2f:bd:e5:2b:0f:86:a8:22:a6:a6:95:60:c8:61:
         2f:5d:30:fa:07:63:7c:a5:6a:31:d0:5e:11:e1:74:bd:a2:a0:
         4a:37:c2:04:d9:90:14:78:73:2f:e1:ef:d3:7f:fd:f5:7f:45:
         09:04:56:ad:33:0d:67:15:5e:fe:cb:37:7f:40:62:f3:a3:37:
         93:15:c3:68:ac:e6:f5:93:32:1e:f5:df:83:45:3c:09:cc:ea:
         e6:01:77:60:25:25:86:28:36:76:98:d3:3d:0a:51:12:26:8d:
         01:8f:eb:b0:39:e5:27:66:5d:83:0e:3f:f8:59:3e:7b:2f:8d:
         31:00:9b:08:25:1e:5b:de:3e:48:5a:cb:34:66:ad:8e:62:e1:
         3a:83:b8:8a:65:1e:85:42:94:52:5b:da:27:aa:06:b2:88:ff:
         8e:50:e9:53:2d:8f:ec:e2:d9:a5:22:7a:da:91:3e:92:af:60:
         29:69:62:a3:7f:49:b4:a3:3a:58:ee:e1:cd:5d:20:7c:16:2a:
         96:29:a6:9d:bb:4a:9a:b1:f9:ed:55:b3:09:25:60:a1:2b:ed:
         31:66:68:01:1b:70:56:2e:c0:fa:b2:65:83:2f:46:2b:22:1b:
         bf:7b:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:16 2026 by rpki-client