Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06d96db2-a5b0-3a2a-98b2-e8d3dd8b2136.roa
File:                     06d96db2-a5b0-3a2a-98b2-e8d3dd8b2136.roa (raw, json)
Hash identifier:          iJR/7Q5ovyOkZ6lkDGyh1FafliKy4ABqudbZancOqFQ=
Subject key identifier:   67:91:11:4D:7C:B4:B6:62:5D:B6:BE:5D:0F:57:60:CD:25:3F:A3:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8412437034674D7955707600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06d96db2-a5b0-3a2a-98b2-e8d3dd8b2136.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396581
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:43:70:34:67:4d:79:55:70:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3f948842-fbd3-4228-a1c6-f1be4ebd29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:d7:b9:c0:80:b1:59:70:e7:cf:60:71:dc:
                    00:b5:bb:9b:00:02:a8:00:4f:74:e8:92:0b:e7:dd:
                    76:65:a7:d8:ea:49:bf:ad:d4:d9:21:0c:98:b7:b4:
                    38:b8:70:86:cd:97:6e:10:cd:0f:06:10:1c:0a:9e:
                    46:4b:a1:1d:94:87:bf:1a:ea:58:df:7b:eb:9a:44:
                    9a:3f:f6:0c:bd:00:3b:8a:5f:3c:87:81:16:56:25:
                    3b:1d:06:d9:c3:46:d6:0a:65:d6:fb:71:31:f6:53:
                    9b:82:ae:e3:49:c8:a4:d9:3d:f3:2b:d7:7b:8f:ae:
                    62:c2:69:e0:37:54:70:c9:cc:75:d3:7e:ba:0e:1d:
                    c9:95:3d:45:72:bd:44:8f:1f:1d:48:de:e5:54:3a:
                    81:47:29:bf:eb:b0:bf:4f:4e:65:24:3c:53:7d:a9:
                    a1:c7:3a:d3:69:1c:d5:cc:cc:ec:50:a5:c6:57:e3:
                    30:d3:40:28:f1:b6:cb:9f:5e:f0:14:54:97:be:d9:
                    a6:90:2e:a6:68:f2:17:06:40:2d:9e:23:88:26:41:
                    31:e9:00:08:ed:cb:ac:8a:aa:3d:c9:8e:56:cb:f6:
                    c4:ad:2d:5e:c3:cf:8b:3c:0c:bf:83:30:c7:fe:69:
                    8a:b9:2b:95:9a:b0:5e:10:57:41:75:b0:2e:38:b3:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:11:4D:7C:B4:B6:62:5D:B6:BE:5D:0F:57:60:CD:25:3F:A3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06d96db2-a5b0-3a2a-98b2-e8d3dd8b2136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:34:0d:6e:1e:c6:6e:40:44:75:80:f0:b5:b1:28:cd:8d:
         d4:d3:20:9a:5d:c2:15:7f:e7:73:7a:81:aa:58:81:60:cf:66:
         aa:b1:95:09:e7:42:05:e1:49:1f:6b:e3:d1:82:a1:5f:33:2d:
         5c:a5:7e:9f:e5:6e:47:b3:f2:e5:2a:00:2f:e7:7f:f6:4f:7e:
         f9:fd:c0:d3:4c:05:ca:73:2b:89:0f:30:11:a6:fa:78:c7:f1:
         e2:14:2b:05:2c:c6:19:98:9c:4b:00:69:47:eb:58:59:89:3d:
         b9:61:bb:fb:1d:c5:21:43:11:09:62:a0:6c:d0:3c:c7:95:1f:
         e9:38:bb:57:7f:f2:8f:ae:8d:eb:a4:dd:ab:d6:48:1e:5b:80:
         77:db:04:20:65:62:37:c0:8d:16:bf:3a:48:32:f7:18:d7:e5:
         8d:5e:07:28:89:0e:89:14:54:77:ba:f7:f9:28:93:9c:01:26:
         d7:17:dd:1e:b3:b6:a9:16:36:34:eb:67:83:b0:0d:d6:96:93:
         3e:e5:2d:ba:cc:34:a0:8d:5a:3e:75:07:c4:d6:4b:64:86:98:
         76:39:71:d0:83:ab:09:ac:2d:32:db:69:96:96:e8:99:64:99:
         d3:2e:a0:bd:67:79:5e:90:7a:a5:cb:37:2a:c4:bb:9b:1a:25:
         c3:69:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:50 2025 by rpki-client