Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101330e4-ccf7-3c67-9d11-4deaf32cf471.roa
File:                     101330e4-ccf7-3c67-9d11-4deaf32cf471.roa (raw, json)
Hash identifier:          wMLbe/Z109GtbnmTjuwRDXKhRNgmSDGmCYIqFfLYBLo=
Subject key identifier:   BE:D2:10:BD:EC:5F:14:78:02:D0:6E:6D:A2:2D:27:2B:39:78:CB:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8412424017EF39F07CF09C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101330e4-ccf7-3c67-9d11-4deaf32cf471.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396593
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:42:40:17:ef:39:f0:7c:f0:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f8a60774-7efd-4b76-8abd-b694910ec968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:7d:67:fa:1a:be:15:cb:ef:23:7e:17:2f:
                    40:cb:13:71:12:58:f5:3e:40:11:10:d4:41:73:ab:
                    ba:bb:22:57:1e:a1:53:3f:b8:21:3a:c1:d0:54:20:
                    73:ad:ce:63:fc:0a:c3:c0:e9:63:1b:35:cb:a7:10:
                    56:17:ad:8e:9a:d4:62:a3:e1:c3:25:e1:12:09:2c:
                    f7:f8:1d:3e:f3:9b:db:e3:e2:5b:9e:88:91:8a:85:
                    0f:86:56:93:89:7f:62:c1:e4:01:1a:92:71:cf:52:
                    b2:71:17:c4:04:30:93:00:3e:51:23:51:6f:2a:27:
                    0d:79:28:10:da:f0:91:90:5a:5e:b6:23:c6:e4:e2:
                    ac:66:68:b7:98:a7:fb:01:87:53:24:91:85:39:e1:
                    6d:2e:85:ef:6b:39:97:ad:87:60:5c:1d:e9:5c:d9:
                    9a:d7:7c:4a:a1:a8:c3:c5:22:8e:c1:1a:c5:18:d6:
                    92:84:bb:ec:37:38:71:54:a6:bd:0b:43:f1:3f:fd:
                    da:70:3e:bb:60:4d:33:97:50:a6:0e:da:fe:91:df:
                    5a:5f:43:20:41:26:e2:4d:09:c3:c5:3f:59:74:34:
                    f5:ea:5e:a7:0c:e6:e7:45:06:cb:90:03:cb:f8:23:
                    a3:e2:59:9e:1d:ed:97:bd:bb:bd:f2:83:d3:3d:9a:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:10:BD:EC:5F:14:78:02:D0:6E:6D:A2:2D:27:2B:39:78:CB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101330e4-ccf7-3c67-9d11-4deaf32cf471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:39:ea:b2:df:cb:64:16:16:6f:32:0d:f3:84:9d:13:ec:
         2d:aa:8b:2a:52:57:7c:33:21:a6:4e:71:80:b1:bb:f4:aa:9e:
         6c:3f:28:74:4c:cb:ee:00:2b:25:2d:c8:a1:b9:4c:78:87:c1:
         da:0f:77:e6:85:f5:b5:e3:03:f0:c9:ab:a5:64:d9:a3:62:50:
         0e:59:a6:fc:77:9c:da:1e:0a:2c:0b:1b:3a:40:0b:b5:c9:87:
         a2:99:fd:46:b4:9f:15:73:fd:c3:c6:0a:0f:b0:f3:27:9a:23:
         30:67:a1:dd:31:67:83:c3:18:23:89:7f:67:05:80:24:64:4d:
         de:6e:08:64:ac:0f:50:27:28:d2:3d:cc:03:ca:63:8f:12:09:
         34:80:38:6e:c5:c5:e3:b5:65:43:03:b4:da:a9:93:35:90:35:
         87:08:e3:1a:c8:85:45:15:a4:18:c6:e5:ce:f9:ce:13:94:4c:
         78:fb:80:3a:bd:0b:c1:93:5b:94:0a:6f:31:02:39:3f:0a:61:
         cd:17:a0:35:3c:f6:71:67:ff:8a:8e:08:0f:ec:68:bf:ea:d5:
         a9:31:10:66:0b:a0:fa:58:14:09:89:de:d1:ee:ca:76:93:06:
         96:fc:bf:98:e2:62:62:87:1b:e5:43:8c:b2:91:85:0c:9d:80:
         75:3f:9c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:34 2025 by rpki-client