Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47fc55bb-6de6-3b3f-9d71-e74e2a501b21.roa
File:                     47fc55bb-6de6-3b3f-9d71-e74e2a501b21.roa (raw, json)
Hash identifier:          GoFJ8bye7HzQMvBZfEbx9YHhKIVZIbVKmlghanOhi+0=
Subject key identifier:   10:19:6D:D8:C0:C8:20:4E:56:CC:C6:27:13:21:81:AD:C2:43:6E:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5F8DD857572F2A8634A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47fc55bb-6de6-3b3f-9d71-e74e2a501b21.roa
Signing time:             Tue 22 Jul 2025 12:41:22 +0000
ROA not before:           Tue 22 Jul 2025 12:41:22 +0000
ROA not after:            Mon 20 Oct 2025 12:41:22 +0000
asID:                     396541
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5f:8d:d8:57:57:2f:2a:86:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:22 2025 GMT
            Not After : Oct 20 12:41:22 2025 GMT
        Subject: CN=1e3cfd2d-ce74-4466-a438-fbfe957f19a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:c7:1a:37:a3:a1:9e:15:b6:c8:a0:0b:f6:
                    52:69:8c:dd:24:94:1c:e9:1d:56:48:b7:29:54:e0:
                    61:61:93:0a:05:22:90:07:1e:46:fa:91:1b:c6:ca:
                    d7:1a:88:b7:0c:58:f6:2c:d6:be:da:0d:05:e2:e9:
                    ff:91:61:25:03:05:c0:6f:5e:56:63:54:65:fd:99:
                    2f:1e:4c:7b:64:a0:62:10:22:3b:2e:bb:46:72:b3:
                    de:5b:68:1f:3f:06:96:b0:0d:01:18:f5:df:b2:b9:
                    9a:11:c1:14:ae:65:1a:d2:e0:22:be:5b:47:db:6d:
                    00:08:c1:fe:62:3d:8d:5c:19:8d:7e:fb:90:67:54:
                    f1:47:ae:90:e8:59:8d:22:80:f4:8f:76:fa:a6:62:
                    7f:eb:47:3d:59:4c:4a:cf:5e:53:43:ed:d3:a7:fc:
                    0c:5f:35:44:8d:cd:a2:25:47:a7:b1:e4:e7:1d:74:
                    b5:78:33:e3:5b:94:cf:c2:df:73:94:4c:ca:05:10:
                    eb:58:a4:6c:cd:dd:91:19:79:58:f0:d3:8b:53:1d:
                    89:f7:5d:1e:e1:db:9b:bd:75:80:37:de:f2:59:55:
                    41:4b:86:9a:8e:24:7a:cd:f3:a2:d1:f0:27:7c:8c:
                    7c:73:2e:3f:01:9a:46:44:05:ba:c1:fc:7c:7b:17:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:6D:D8:C0:C8:20:4E:56:CC:C6:27:13:21:81:AD:C2:43:6E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47fc55bb-6de6-3b3f-9d71-e74e2a501b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:27:69:23:11:e2:63:c9:73:4d:49:81:12:12:ad:e1:6a:
         7c:05:7f:97:28:b9:ed:29:ed:fc:3a:7d:05:d0:02:9a:e5:d1:
         fd:c5:e6:6a:5f:56:d8:86:63:4a:3c:a6:e0:d2:02:26:bb:6a:
         88:65:5f:f9:79:ac:ef:4d:ab:8e:a8:20:8e:37:82:d0:b0:6d:
         a6:25:9b:e6:01:ad:2b:a8:04:03:26:2b:a0:ae:22:8d:41:09:
         0a:07:d8:fa:84:b0:69:af:ae:7e:4f:95:4f:ab:df:a1:8b:d2:
         ed:88:3a:53:8f:60:c1:f4:ed:91:72:73:e1:19:a3:c8:b8:37:
         9d:ee:ed:c4:6f:2e:b3:ca:e1:df:79:34:2c:0d:9d:bf:1c:f7:
         b3:ab:78:e4:25:84:f5:40:e0:4d:e0:52:8d:9c:a9:f1:23:57:
         44:90:7a:7a:1c:db:dc:f4:4e:b0:31:76:f2:18:14:48:ef:3d:
         78:59:d9:14:77:81:1d:29:7f:c9:37:30:b8:f9:00:c3:bc:56:
         04:bb:44:2d:0f:0a:76:82:40:5f:03:6b:60:b7:4d:bd:d4:f4:
         9a:55:9b:c5:56:17:14:b5:48:ef:4d:76:d4:2f:85:3d:39:ed:
         ed:27:b6:af:b8:3c:da:a1:89:0c:38:9a:ee:aa:6e:bc:09:f9:
         d4:91:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:24:40 2025 by rpki-client