Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa
File:                     4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa (raw, json)
Hash identifier:          4/usfQO/6omLpQT3YDJ2lYCJFuWMl8kcF9qY4Lsp9u8=
Subject key identifier:   D5:8C:CC:37:6A:33:7F:11:40:F5:01:02:E0:B6:1F:C6:C0:E2:57:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410CBBE487ED15432AC2080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396582
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cb:be:48:7e:d1:54:32:ac:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1b44f75f-d50b-4906-8d1b-6e2c7b12568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:69:9c:b2:ad:df:45:26:c1:fa:47:3e:cb:
                    47:93:60:cc:d8:bc:40:e7:f7:e4:6e:69:45:30:9d:
                    e8:d3:5e:7b:fc:32:13:36:8f:db:a9:2f:9b:e1:7c:
                    d7:3a:2c:68:9e:a6:c0:cb:59:9b:1f:36:65:f6:8f:
                    c3:e2:91:93:23:f9:ec:a8:0c:a5:b3:a1:4c:b7:b3:
                    ff:67:01:18:bf:69:cc:bf:66:8d:48:cd:1d:3e:fc:
                    09:ea:e9:4a:32:db:d5:a7:76:4a:75:9f:89:5f:77:
                    e5:b3:46:78:41:4d:b4:cc:68:0b:bb:94:90:76:b6:
                    fa:c7:49:06:92:c7:a6:ca:0f:a5:04:2f:24:8b:ec:
                    ce:e9:17:48:44:65:85:b1:fc:71:4c:32:ae:eb:ef:
                    44:d7:bd:92:81:7b:24:82:04:51:28:ee:57:d7:2f:
                    aa:af:cf:34:75:d5:94:18:3c:97:bf:03:60:bd:b0:
                    29:1a:d5:8a:8f:b2:56:d0:d6:eb:38:16:e2:65:12:
                    57:1d:98:dd:2d:5b:d4:e1:0e:5d:fd:bb:d3:70:c4:
                    ff:ec:14:2a:9b:ba:24:38:16:dc:35:c5:c5:d6:08:
                    5c:35:59:83:14:ae:d1:f4:82:70:b5:0b:cb:5d:b4:
                    8c:6d:76:3e:7d:73:42:1c:da:ef:e7:67:67:65:04:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:CC:37:6A:33:7F:11:40:F5:01:02:E0:B6:1F:C6:C0:E2:57:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b2f4fba-9fe9-3543-84f5-57a9b72112ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:26:72:20:fe:9a:ae:73:93:15:0e:a1:61:56:3f:d7:2c:
         e1:3c:e4:21:27:b3:6e:6e:eb:dc:61:8b:21:e3:03:c9:a0:d0:
         b7:b3:8a:f1:00:7c:23:a6:18:68:5b:31:e6:23:20:bb:f1:7e:
         d6:cb:1c:52:9c:60:92:05:de:d1:09:87:c4:99:c5:6f:0e:ce:
         cf:84:13:41:12:d7:33:7b:be:52:5a:e4:ed:58:ff:fa:55:5c:
         2c:3b:12:b2:fd:ce:14:e5:36:79:69:b4:ed:06:d2:6b:4b:3b:
         dd:e7:a3:0d:99:e7:4a:b6:73:27:46:02:2d:a9:fd:63:14:f6:
         af:15:2e:d2:bb:61:6c:d7:39:57:1a:fc:49:36:58:f2:ad:ea:
         d3:a4:57:90:a4:7c:6c:95:35:3e:61:31:3b:25:74:1d:0c:29:
         f7:53:8c:9a:cc:f1:78:94:3e:bc:0e:f2:62:4a:a2:59:a4:c1:
         bb:42:5b:6c:e9:d4:a5:5f:a7:ed:52:62:ca:6d:e2:3f:52:53:
         58:7f:83:1a:7f:02:22:dd:30:ae:9c:56:fc:6d:cd:de:ca:17:
         c7:8a:58:a4:42:7d:fa:fd:37:89:3a:65:fd:6f:09:5d:09:4d:
         b3:90:c5:6f:8c:90:ba:4a:8a:2c:9e:bd:04:77:d1:0f:bf:9b:
         40:0c:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:24:34 2025 by rpki-client