Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa
File:                     2e01e075-1b9f-395c-a052-6e18390e492d.roa (raw, json)
Hash identifier:          OrwgWzWo+Sq9RTLuRxZS5Ny1f5X5C+suLgYKLey1BGs=
Subject key identifier:   E7:5E:68:0A:5B:2E:71:DF:51:7C:A1:6C:67:89:CE:97:CE:EC:06:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410CB174C3578B48FF14B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36632
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cb:17:4c:35:78:b4:8f:f1:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=07d01d98-cae8-438f-9a54-5b30cb2e79fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:7f:9e:3f:95:98:a6:d5:7d:f7:0e:be:a7:
                    b3:50:b5:fa:e7:92:5a:6d:79:80:bc:42:b0:91:e7:
                    9f:be:0f:5d:9c:56:14:23:47:d3:b1:07:e6:23:91:
                    ae:c8:04:5f:8c:42:a0:f5:f9:b6:5c:dd:be:a3:41:
                    14:15:9a:27:b2:7c:27:f8:e8:a6:bf:82:cc:49:9d:
                    b8:41:ad:d9:95:cf:1c:3a:4b:07:4b:99:46:15:69:
                    47:e1:5c:5f:89:be:c2:1a:c4:56:4a:d9:08:b7:fd:
                    b9:1c:ed:17:c5:f7:99:69:07:e6:53:2a:69:95:a5:
                    1f:7b:bd:56:21:f6:d8:9e:73:ff:17:09:c6:11:ff:
                    9d:c2:21:3e:8d:23:85:d7:5a:3a:74:e7:1d:84:21:
                    ef:be:92:e2:db:b9:c8:35:5e:fa:16:af:7a:68:23:
                    da:8b:53:d1:e1:5d:38:e7:29:79:9d:b5:29:d1:40:
                    e0:21:ea:2e:c3:75:70:68:82:34:10:6d:02:54:ce:
                    df:18:d2:bb:4c:85:fb:0b:80:b7:92:19:21:1c:d2:
                    fb:68:f7:ab:e7:e5:96:98:13:14:46:9d:13:ba:b9:
                    50:32:78:84:0a:4e:22:bf:96:56:dd:58:09:eb:b3:
                    2a:02:50:d3:16:dd:17:a3:d5:2f:71:31:4f:f0:99:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5E:68:0A:5B:2E:71:DF:51:7C:A1:6C:67:89:CE:97:CE:EC:06:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:61:45:41:72:a2:66:6b:e4:99:67:df:74:86:50:dc:41:
         95:91:b4:fb:b8:06:4a:bd:9d:0c:2d:e7:89:85:e3:64:52:d0:
         31:ad:63:6a:9d:c5:ca:57:35:73:34:59:83:3f:4c:81:a3:d3:
         98:16:14:fc:90:8d:a4:9f:c8:9c:e1:17:98:dc:d7:d8:2d:cc:
         e7:ff:b4:89:5d:c1:5e:09:bd:c9:3b:90:f0:a0:bc:9b:81:56:
         29:e7:63:cf:07:ee:61:ab:91:50:58:13:17:33:47:99:af:13:
         e9:08:9c:39:82:3a:9b:da:16:25:5b:32:a3:1c:e3:82:e6:c0:
         f5:5a:9a:2d:8b:45:1f:87:76:df:26:28:ea:47:73:cc:b5:4d:
         a1:19:6d:c5:55:6d:5b:e0:af:83:c9:2c:37:f8:ac:0c:45:fb:
         7c:45:5e:c9:41:20:02:e4:ae:39:d8:b0:bb:23:6a:e2:48:8f:
         bd:c3:a4:e2:e3:fb:aa:76:04:92:84:4b:2f:4d:03:f1:4e:55:
         6c:c7:d2:b1:c6:2b:4f:63:54:99:d7:d9:a9:e3:52:71:07:85:
         07:49:19:25:47:35:cc:37:a3:5d:b5:7e:75:4c:ff:b1:69:a5:
         db:b7:ae:bf:fa:7c:34:f2:fb:06:ac:96:1e:57:1e:44:72:d4:
         b1:05:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:05 2025 by rpki-client