Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19456812-854a-37ab-9da4-beab3ab3b7ef.roa
File:                     19456812-854a-37ab-9da4-beab3ab3b7ef.roa (raw, json)
Hash identifier:          /fpjQuqzT7ZVPmu7sHFLKz2tc9A+OFvfBvqJNhprs6A=
Subject key identifier:   65:C1:EB:60:1A:4D:CC:7C:10:B1:2D:C4:C7:E3:36:9F:1A:27:A3:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410C6ABE8AC1E78B747F1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19456812-854a-37ab-9da4-beab3ab3b7ef.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     10515
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c6:ab:e8:ac:1e:78:b7:47:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9d178e17-232d-4741-a8b9-269129b316b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:ed:b1:9a:98:f1:35:6d:99:23:07:6b:26:
                    f0:71:0e:b5:cf:f3:65:d3:2b:90:07:cf:e9:ae:e5:
                    88:85:81:cc:b5:0e:e1:53:0d:4b:5f:84:c4:92:10:
                    03:7a:bd:b7:f3:25:4b:e2:22:29:50:64:06:5b:f3:
                    3d:cd:d6:a8:0b:fc:67:ec:05:af:e5:5f:70:36:d5:
                    10:f0:0d:b0:56:b7:bb:81:21:d1:22:31:1c:5d:f9:
                    52:4d:97:78:2f:80:31:ef:2b:8e:d8:7d:ae:0b:6a:
                    8c:e6:6e:8c:aa:d5:77:27:78:19:fb:34:96:6b:8b:
                    52:59:3a:ef:e8:59:c7:d7:3a:8e:10:39:6c:99:e8:
                    40:63:b2:cb:82:bf:06:0a:f7:a5:6a:1e:13:02:7e:
                    17:45:c3:46:64:d9:26:f5:31:ef:18:31:fd:9a:7b:
                    45:34:df:6a:cc:e3:7f:85:43:8e:03:c9:04:19:01:
                    98:90:1e:bd:13:7f:fd:64:67:cf:ea:9c:39:33:8f:
                    ab:83:32:61:af:00:70:ac:b4:f3:66:87:0b:75:2a:
                    fb:74:f8:43:c2:d2:15:33:60:5b:f8:6e:0d:62:b3:
                    93:d9:fc:27:b7:f1:7f:e9:d0:b2:4d:ec:e7:9b:e5:
                    f0:1a:a7:26:e1:47:ed:ac:9f:8c:7d:19:79:0e:f9:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:EB:60:1A:4D:CC:7C:10:B1:2D:C4:C7:E3:36:9F:1A:27:A3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19456812-854a-37ab-9da4-beab3ab3b7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:25:b0:25:2b:b6:f1:40:22:a8:80:02:6e:36:f9:23:f7:8f:
         cd:17:45:83:a8:4e:84:a1:86:fa:e5:24:6f:bd:ce:c5:2b:52:
         c1:12:c1:54:30:6e:be:5f:15:98:3f:e9:d4:db:61:4b:ba:4b:
         ff:3d:90:52:66:c6:1b:3d:85:60:da:c9:b2:56:4c:a6:40:fc:
         43:65:ea:bd:70:86:46:e1:91:bd:c5:b4:1f:e8:b1:90:ed:36:
         43:86:b0:c9:af:64:ad:0f:2a:cb:99:e7:09:4a:e9:01:76:ee:
         e9:cf:ff:80:71:3f:8a:33:a0:f9:00:b5:eb:d0:ac:e5:07:1c:
         e1:93:22:f2:23:74:1f:9b:d3:5a:85:5a:d0:fa:ef:9b:34:19:
         2e:85:ba:7a:1a:28:ed:36:a5:dd:fc:0f:95:40:52:4c:09:25:
         48:32:4a:90:82:e4:ed:08:aa:1d:0a:49:1d:79:72:98:70:ed:
         e9:6f:93:12:78:85:2e:1d:12:7f:4d:14:0d:c7:93:4f:02:0b:
         5e:e4:b4:67:a7:44:d5:70:d0:4a:f0:6b:0b:11:3b:18:ea:04:
         29:05:30:1f:88:26:ef:62:97:6d:f6:13:92:99:f9:85:c0:a7:
         9e:b2:ce:fa:67:50:a6:32:4f:6b:f4:a3:a9:8f:82:8a:dc:82:
         5d:4c:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:54 2025 by rpki-client