Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa
File:                     ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa (raw, json)
Hash identifier:          psL9kW5WG2c4r8ch9RR6hHjm7wvgp/oa+yLLojsJ0XU=
Subject key identifier:   79:D9:0A:E8:37:D8:F2:C4:1B:1A:A3:D5:DC:45:45:62:5D:90:3A:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEDDCC75B241C4F16E4200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396606
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:dd:cc:75:b2:41:c4:f1:6e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=52211ad1-f4b3-4de2-8770-1e487ff410dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:0a:2e:8c:37:59:47:0d:c6:e7:6b:80:89:
                    9d:4a:a6:54:c1:75:8f:68:6e:e8:56:2b:94:37:5d:
                    41:7b:c9:65:2b:cb:a0:ed:f3:d2:32:2e:6a:5b:45:
                    41:66:51:35:2f:19:f6:ad:df:1b:8a:7f:65:50:59:
                    1e:2c:c6:6d:a2:3a:01:8d:7d:39:cf:f2:dc:08:9a:
                    df:eb:94:f4:3d:cc:66:63:9b:12:3b:77:33:e5:30:
                    45:7a:83:af:1b:b0:17:f5:14:4f:b5:6e:bb:d2:32:
                    07:4e:0a:a8:7f:32:38:43:de:65:05:12:87:ca:4e:
                    0f:56:b3:4d:03:65:9d:73:bc:e2:97:d0:60:70:ef:
                    f6:f5:41:26:45:c6:6d:86:3b:22:3a:b4:78:95:e7:
                    e1:4a:f5:ef:c0:7c:e0:b9:c0:2f:83:64:00:5f:b2:
                    3a:79:6c:27:e6:75:11:c8:06:e8:ec:b0:ae:26:4c:
                    81:2d:b3:a5:5f:02:c2:b3:8c:9e:b2:bb:ed:0a:30:
                    23:53:ec:92:e4:56:e0:bf:40:fe:d9:da:0f:85:8f:
                    b5:de:9c:69:21:28:0d:2a:f2:0a:26:14:0f:cb:5c:
                    a4:44:3c:b7:2d:f4:cf:82:ec:38:9b:75:f2:bd:97:
                    c3:5c:1c:72:6b:61:ce:1d:b1:42:f8:89:47:2a:48:
                    98:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D9:0A:E8:37:D8:F2:C4:1B:1A:A3:D5:DC:45:45:62:5D:90:3A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:e5:81:de:dc:6f:7a:6e:7d:ac:d2:52:6d:45:18:46:07:
         ed:ae:82:84:fa:59:75:6f:01:64:6d:6e:47:d6:70:7e:d0:62:
         ae:8a:e3:d3:a8:16:32:df:fe:94:42:cf:28:10:df:0e:19:72:
         e2:d7:0f:00:0a:d2:35:cc:ef:53:c2:6e:b5:be:d9:8a:ec:08:
         3c:00:b9:39:58:34:fa:55:76:84:f2:68:ee:3f:b5:41:e6:40:
         b1:00:f1:03:86:08:45:03:6c:43:00:72:a4:62:23:30:65:22:
         66:45:33:77:07:f4:2a:11:38:6b:3b:c5:56:05:a3:14:7a:6c:
         90:4d:95:47:c8:c4:a8:c1:c5:46:16:6b:a1:fd:59:46:84:19:
         e6:b4:89:72:e8:e0:0e:f8:83:be:85:7f:1d:fb:97:ac:59:7e:
         a9:7d:d0:50:84:15:6d:5f:fb:d7:9e:96:a4:eb:44:d3:19:87:
         f5:43:4f:d7:7a:08:ef:e3:b0:11:58:67:ec:65:a9:73:32:16:
         13:3a:bd:5c:26:94:25:5f:e2:92:26:23:87:ec:63:2e:07:63:
         07:e5:2c:e5:85:ec:21:72:17:c8:fb:2e:bf:29:5a:4c:c9:fd:
         81:00:9b:48:05:04:6d:8a:35:e7:dd:67:04:15:21:1f:d5:f0:
         de:0b:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:36 2026 by rpki-client