Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
File:                     ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa (raw, json)
Hash identifier:          cUl0HBdM+FUd8dJh0sWH1eOqCLkXbV/dK4Q+2XyLnWw=
Subject key identifier:   C1:33:C7:3F:FD:D6:E2:2F:45:CA:B9:13:E4:1C:40:91:E3:F9:B6:F1
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584EEA8777968E5A76187F189F80
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        2607:1c0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:77:96:8e:5a:76:18:7f:18:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=277942f9-157c-4bfe-bb92-531ac17ff87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:39:e5:7a:1f:f0:2f:dd:a6:63:66:06:1b:
                    d3:8a:5d:e4:34:59:12:06:3d:50:9b:b2:72:92:28:
                    04:f5:fc:82:c8:0a:b6:e1:78:89:ad:65:41:03:37:
                    d1:79:9d:03:9c:6f:6a:2e:34:d5:10:32:47:1d:70:
                    c2:2a:16:bc:27:2f:74:47:a1:43:f9:51:72:c0:3b:
                    57:f3:62:07:53:f2:0a:3a:1d:59:c1:93:87:96:eb:
                    1e:8c:62:90:5b:8c:da:0e:5c:ae:0c:2b:cf:1b:ba:
                    b8:3d:69:cd:c5:30:84:da:46:ae:eb:eb:6b:72:d5:
                    a5:de:1e:74:12:2f:c6:85:d2:76:1d:cc:55:1b:79:
                    19:c9:f6:0e:d3:30:26:b0:54:82:f2:75:f0:85:8e:
                    37:eb:9c:04:90:86:b5:5b:7f:b4:9e:2b:b0:1b:c8:
                    bb:2d:2d:57:03:b9:20:4d:41:3b:e5:3b:09:ba:eb:
                    1c:28:3b:7c:77:53:74:10:84:f4:90:12:87:6d:50:
                    0e:86:67:aa:71:cb:5e:09:ab:d2:de:c6:b1:78:75:
                    ee:01:de:4a:20:20:84:f0:de:7e:93:43:c5:6c:67:
                    76:9f:28:17:4a:bf:37:e6:72:ea:31:23:47:6f:40:
                    7e:a5:e7:62:59:e7:3a:da:08:c8:35:88:9d:25:3b:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:33:C7:3F:FD:D6:E2:2F:45:CA:B9:13:E4:1C:40:91:E3:F9:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:63:46:2f:34:c2:63:9f:99:9c:38:e3:5a:ad:ff:ce:8f:97:
         39:e2:fa:8d:4a:60:17:9d:a9:5b:46:34:1c:e7:ca:b2:14:52:
         1a:d7:2e:67:2d:4c:b7:8e:0c:77:5b:f0:25:48:a4:a3:22:44:
         34:5e:b8:e1:2b:20:3e:fc:b5:2f:2b:6b:7d:29:9e:38:5a:5e:
         ea:d5:d7:c2:f1:09:9b:f3:a3:7b:4f:79:c2:64:fa:7d:65:9b:
         2d:b1:4a:8d:d1:c7:55:e0:c3:71:f9:4d:0e:24:8a:6c:92:7f:
         e0:01:45:98:e5:7e:00:6a:c0:7e:cf:3f:31:82:29:a3:dc:10:
         c9:60:89:6e:13:3d:25:ab:80:8c:bd:cf:b4:7b:d3:39:9c:e0:
         55:f2:b8:7b:58:d6:22:19:9b:16:09:a3:ee:35:2e:ef:c5:4b:
         e2:49:2b:de:f0:28:f3:69:8f:eb:98:f6:80:3b:0e:c8:41:25:
         d1:9c:b8:ea:6e:a3:a9:02:11:fe:a4:d5:61:ec:07:8f:17:9a:
         ae:93:ef:89:d1:19:20:7e:28:12:3c:8e:d8:c6:e9:38:2c:0a:
         53:8d:74:df:74:64:1c:04:9c:99:6a:aa:a0:28:06:fa:e7:73:
         0a:81:64:e2:20:c5:dc:f3:1c:13:30:83:5d:26:c3:7c:77:f3:
         a4:35:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:39:35 2026 by rpki-client