Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa
File:                     4558cb58-76dc-32fb-b9be-a430e2a8e160.roa (raw, json)
Hash identifier:          4op3vWko04BAggGG23VUzsVqgasVNrUiB7ZnrFe9J5U=
Subject key identifier:   13:70:57:EE:39:32:C4:9F:78:E6:70:F1:23:BA:C5:0C:93:E7:2B:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C558E0C834A09E627FF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa
Signing time:             Tue 22 Jul 2025 12:41:17 +0000
ROA not before:           Tue 22 Jul 2025 12:41:17 +0000
ROA not after:            Mon 20 Oct 2025 12:41:17 +0000
asID:                     396706
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:55:8e:0c:83:4a:09:e6:27:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:17 2025 GMT
            Not After : Oct 20 12:41:17 2025 GMT
        Subject: CN=4e33fb79-4527-4e16-8788-5cf7f75dea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:f2:36:47:bc:53:d8:91:f0:53:c6:f5:7d:
                    27:65:f2:b6:e3:30:cd:a2:d6:1a:1b:51:35:77:bc:
                    72:6a:56:b3:78:b9:86:f7:2a:57:2e:18:40:df:43:
                    6e:74:97:db:52:15:ce:d1:5a:3f:d9:75:e5:a5:38:
                    46:30:f6:75:f8:49:23:7e:58:82:b6:94:f0:a1:7d:
                    c1:95:dc:3a:6e:2b:91:e1:35:21:8b:75:a3:66:8f:
                    f2:76:37:41:69:f4:ee:5d:89:0f:38:ac:30:7f:bf:
                    e9:d2:89:50:59:36:5a:13:02:db:5d:9a:f4:ce:4a:
                    41:cf:ec:5f:a0:76:9f:2c:7e:b4:d4:eb:6b:98:d1:
                    4e:eb:a4:a6:d2:7d:c0:5f:a3:80:3c:0c:9e:ef:12:
                    4c:1d:67:95:ab:24:9c:d4:f0:42:24:74:c1:27:24:
                    46:35:0f:66:a9:14:0e:e6:c3:c3:48:e5:ec:88:d3:
                    cc:0e:54:41:3f:f7:ce:df:c6:8d:4c:0f:87:53:84:
                    6f:d1:d6:ee:5b:71:03:85:2d:2d:f1:68:93:ac:ff:
                    54:50:a2:1a:b5:eb:79:29:09:78:63:d4:c2:b8:f5:
                    c6:0d:73:e5:32:8c:b9:8e:31:60:d5:a2:b1:3a:a4:
                    c2:47:ed:4c:aa:dd:11:d9:c2:86:98:46:7c:8b:04:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:57:EE:39:32:C4:9F:78:E6:70:F1:23:BA:C5:0C:93:E7:2B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:c1:52:f0:61:c9:38:ef:c1:b3:48:37:dc:28:f5:ad:48:
         c1:60:df:fd:b0:56:b0:52:24:42:5b:a0:ac:23:14:e7:43:1c:
         fb:47:a7:92:02:1d:a6:64:65:ec:01:c9:4a:31:96:3c:96:99:
         1b:f0:75:b8:75:4d:d6:23:58:d3:08:12:be:93:48:f8:7e:ee:
         09:10:02:61:1a:16:09:3f:0d:5b:fc:60:06:36:a2:37:93:82:
         4b:43:70:c6:a7:9c:d2:c0:86:c7:21:29:b2:c5:13:d2:90:4c:
         ed:09:f0:a4:8c:17:79:61:f8:b7:53:74:cc:a3:b6:1c:ed:47:
         f4:60:0e:99:48:a1:9e:84:c5:02:6d:5a:88:bf:cb:32:06:53:
         29:25:e6:3e:64:eb:76:fb:9f:a9:07:6e:c2:b3:a3:2e:58:d9:
         6f:21:13:5f:7d:4b:c8:f7:8e:4f:4e:e7:b0:00:4d:f6:77:f9:
         6c:04:bd:0d:e0:04:0a:e2:43:c6:d6:bf:1d:c9:1c:0e:58:aa:
         15:c1:6c:8a:99:30:97:38:cd:40:fc:ea:9a:d5:ea:67:a0:73:
         8c:2b:86:dd:41:d5:9f:1c:26:a6:a0:74:ac:ff:89:0d:a0:c6:
         0f:da:88:67:64:5b:d0:b7:1f:7c:56:43:89:be:06:fb:98:2b:
         7a:ba:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:25 2025 by rpki-client