Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cecf6e-e48f-3ffc-a23a-7548077042c2.roa
File:                     04cecf6e-e48f-3ffc-a23a-7548077042c2.roa (raw, json)
Hash identifier:          cgEPQAt8HDn5uPxq1M6jBX70PT8mGB1vGcBry0uaDYQ=
Subject key identifier:   B2:B7:C3:1A:AE:DB:EE:9E:DD:47:4C:D4:18:67:DE:3C:61:4C:C0:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8412514EF6A4D1D112E06180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cecf6e-e48f-3ffc-a23a-7548077042c2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396827
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:51:4e:f6:a4:d1:d1:12:e0:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c9d0989b-d5dd-42e9-862e-ee22fa6a98f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:32:3f:b9:c1:d7:02:bd:f9:fc:51:68:bb:
                    b5:84:1b:a0:ff:f0:e1:d7:46:7f:dd:64:31:18:ad:
                    65:47:f2:fd:8a:9f:e6:e5:7d:de:b9:18:f7:25:a1:
                    b2:60:7c:78:cd:47:02:8b:0e:6f:cb:43:c3:ef:e8:
                    2d:95:1d:2a:ba:64:67:c4:cb:a4:1e:34:2f:9d:01:
                    c5:81:44:cf:4b:fe:e6:a9:02:00:9b:9a:40:5f:1b:
                    00:c7:61:2d:9b:f7:6a:78:9c:38:ed:76:3d:9d:23:
                    e8:89:ff:81:34:3f:5e:c6:bb:4f:23:d6:7b:6b:81:
                    60:26:f8:c7:41:4d:c3:13:32:a2:4d:be:bb:24:c1:
                    b2:7a:a4:5f:f3:e6:a4:62:f6:76:cf:28:95:7b:c7:
                    31:3c:5c:3e:01:33:d5:a4:e2:0c:f2:70:0e:81:d6:
                    b0:42:2d:e2:af:08:6f:38:91:89:44:27:a0:c0:60:
                    32:b3:80:8b:7b:a2:14:81:75:02:9a:c2:9d:4b:48:
                    dd:a1:e7:64:2e:5d:fb:96:ac:61:ee:da:4f:cc:a0:
                    09:a7:a3:b1:d2:d3:9e:1a:27:d9:ef:cc:6a:10:ab:
                    96:f9:25:a1:7f:80:49:bc:a4:c7:08:63:72:f8:e5:
                    26:9d:ce:86:21:0e:ff:97:4f:3e:4b:1b:66:db:82:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:C3:1A:AE:DB:EE:9E:DD:47:4C:D4:18:67:DE:3C:61:4C:C0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cecf6e-e48f-3ffc-a23a-7548077042c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:8c:cb:ce:da:c1:37:b9:38:8c:5c:5e:9d:00:62:9d:f9:
         dc:61:16:28:90:52:0a:bb:f5:26:eb:98:98:91:10:f5:a7:c3:
         10:93:4d:7b:8e:d5:df:9d:7f:af:f2:78:b5:b4:93:fd:39:fe:
         e3:d2:66:7d:06:ae:a4:0e:4d:d2:99:e5:ac:27:9e:01:00:35:
         e6:70:cd:dc:f8:68:95:ff:b0:fc:db:f4:0d:99:a2:fe:e2:32:
         f9:05:b3:32:18:fc:a5:f9:f6:c2:61:19:0d:f3:04:41:61:68:
         46:0a:5c:2e:94:37:7b:6f:fe:28:df:d8:79:b4:46:6e:ed:f3:
         da:c3:14:4f:c5:5d:51:20:f7:03:12:b2:09:2f:80:33:de:cd:
         65:fa:97:89:9c:94:0c:ee:55:d1:0e:e8:f5:92:22:40:0f:44:
         f8:4b:5d:65:c7:32:64:ad:ad:9f:d1:fd:bd:23:55:7c:05:31:
         34:50:3f:4f:76:fb:d9:7c:17:e5:9b:b3:59:35:26:7c:3f:04:
         f1:e9:ef:81:63:fd:fa:f5:eb:b1:2f:2d:dc:77:f1:aa:07:9d:
         ff:0d:2c:8e:cd:4e:29:1a:0d:31:36:95:ad:e9:2e:d6:6c:38:
         1c:3d:4b:43:a8:6c:b5:09:34:5c:e9:84:45:4a:da:43:a8:c8:
         17:4b:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:54:12 2025 by rpki-client