Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa
File:                     ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa (raw, json)
Hash identifier:          jlP70Ffxxvc+H+9n6MJtfJb4Vd7Fpnx/vGQ095kqU20=
Subject key identifier:   16:3D:28:12:F6:0B:FD:41:E5:14:2D:2C:07:DE:73:83:4C:C9:BC:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEFBBE4FFDB1E387473600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396735
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:fb:be:4f:fd:b1:e3:87:47:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=085577b3-4703-4684-bf8c-4b427b35843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:fc:24:92:2f:6b:5a:d8:f5:49:b3:fe:28:
                    99:50:2f:ea:81:d8:9f:1d:ef:9b:34:08:90:55:b5:
                    8b:47:65:76:dd:d3:04:15:ba:d1:31:b4:83:3d:65:
                    4a:3c:9a:57:c7:58:5d:38:16:45:cc:fa:1d:99:0b:
                    a9:54:ad:d7:46:31:26:40:07:32:5a:9b:6b:13:48:
                    b9:63:92:4c:e6:34:c4:6d:9a:88:dd:ac:3b:9c:58:
                    e7:0f:7a:fe:ea:4f:6d:93:dc:7c:6e:93:1e:cc:d6:
                    7a:6d:f5:8a:ca:67:f5:0a:87:72:69:e0:35:50:70:
                    f5:ea:72:8f:83:c0:ea:32:e5:b9:8e:f8:98:48:19:
                    0f:7a:7d:a3:ed:52:01:c6:64:df:a0:77:9e:6d:bb:
                    b9:fa:31:94:c9:d7:2a:91:5a:f8:9c:0d:d7:96:5a:
                    5a:42:b7:01:11:1b:ba:18:d6:fe:e3:f0:bb:ae:6f:
                    6b:63:4e:77:ea:59:06:ad:eb:fe:f9:88:f4:87:fe:
                    a0:b6:48:f7:05:13:a7:1d:09:11:6b:2b:e7:89:2f:
                    ad:44:e9:0c:48:01:e0:56:33:51:ba:8b:e4:af:47:
                    14:40:50:eb:73:9d:4a:94:84:2c:94:3f:30:2d:1c:
                    26:47:6e:1a:c7:f0:79:f1:d3:81:25:49:58:cf:ce:
                    ea:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:28:12:F6:0B:FD:41:E5:14:2D:2C:07:DE:73:83:4C:C9:BC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:d8:f8:4f:77:28:e6:e2:e3:7e:27:b2:d5:ab:1b:74:c4:
         79:e7:06:9a:dd:fc:82:da:58:b7:3f:ff:f7:92:b7:e8:15:f0:
         f5:d5:64:ff:af:d6:f3:38:1a:a8:83:9f:ba:54:34:e5:18:09:
         0f:5b:4c:bc:7b:12:cb:5e:4e:c0:88:bc:a1:9c:9b:76:a8:1f:
         bb:04:cc:ae:f2:64:9b:9e:21:de:44:41:00:a1:f0:dd:f9:e4:
         09:73:6a:7d:df:f3:5a:6f:64:3c:8d:91:8a:3e:0a:bf:53:d8:
         50:97:3b:d0:e6:81:8b:cc:c3:20:66:1d:f0:18:fa:f7:50:8a:
         75:66:f2:d5:6f:4b:be:4e:e7:fb:b5:8f:b3:c5:62:a6:f7:07:
         85:3f:38:57:12:11:eb:ff:52:52:30:3f:ad:39:ce:ad:e4:99:
         99:93:8b:4b:58:19:d7:52:f2:87:a8:67:1b:e3:e7:0a:15:b3:
         c2:d8:b3:65:57:41:83:54:93:60:3e:7b:8c:b9:94:69:6b:55:
         7e:1c:05:58:ff:87:15:21:3b:4f:00:aa:43:98:4b:f5:ea:2e:
         1a:79:df:cb:77:39:e0:b0:1c:9f:ac:e2:e4:ae:6d:fa:e9:48:
         cc:54:4c:de:90:38:0c:fd:dc:52:0f:5f:1f:15:c2:43:b6:31:
         83:9d:ca:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:34 2026 by rpki-client