Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa
File:                     5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa (raw, json)
Hash identifier:          imNVsXV66tYAngvimkrAcBDoeJ5ZMr2rmbfkSnAvx+0=
Subject key identifier:   CE:0D:67:7B:61:2E:33:EB:85:B7:5A:18:B5:A3:A8:0A:64:E3:E8:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8412557D991AABF3DACEB8E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40717
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:55:7d:99:1a:ab:f3:da:ce:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=23357add-d3ca-4bf5-8e7e-89ab728894b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:f2:19:35:c9:12:d3:56:79:26:30:82:d4:
                    1a:84:c6:8a:30:01:ac:7f:ba:99:20:73:f9:05:aa:
                    7a:a2:09:01:7e:ee:70:d0:fb:b9:ce:d6:d0:bc:c1:
                    11:e7:91:73:c1:e3:a1:cf:cc:92:eb:e2:75:e5:f5:
                    18:07:e4:7c:cd:f8:40:fe:a1:1c:38:c4:24:50:62:
                    a2:08:ee:d8:f6:23:35:f9:e9:84:14:cb:99:de:e0:
                    a7:4a:5f:8a:9a:81:27:3b:a3:6d:b6:e7:45:c7:b9:
                    cc:67:96:6c:28:d9:af:87:e0:ab:94:1c:7a:a4:c0:
                    f1:82:b7:4e:50:48:bd:c8:0c:67:5e:d5:a4:20:2e:
                    f3:88:59:60:6a:ff:bc:ae:89:5f:3b:d5:44:3c:1d:
                    97:bd:9c:b2:61:72:37:0a:19:85:52:dd:bd:e1:f9:
                    36:06:1a:a0:99:2f:c4:ff:62:d2:6c:1a:ed:b9:21:
                    dd:b5:d2:40:87:6e:42:26:85:a5:36:98:91:3a:69:
                    98:fb:6b:f4:25:18:ab:66:ae:aa:3e:98:3d:53:a0:
                    dc:0b:53:82:c6:dd:b3:0b:97:b3:6b:a1:85:f3:de:
                    8f:ba:95:16:e4:68:57:6f:f5:28:d9:60:da:8b:37:
                    7f:2b:b5:9a:54:89:d1:ad:bf:2c:43:57:d8:ca:b8:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:67:7B:61:2E:33:EB:85:B7:5A:18:B5:A3:A8:0A:64:E3:E8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:5e:e0:19:75:5b:ec:48:83:d2:54:49:20:00:36:4f:d4:
         31:c0:19:4a:f8:83:ee:9c:74:06:df:59:37:e0:88:5f:d6:4e:
         c2:d3:0b:1a:91:86:5c:09:d0:c0:f9:68:b0:bf:68:7d:04:5b:
         46:74:ef:b2:04:95:6a:11:60:2f:b8:a8:ba:24:aa:f7:d0:cd:
         b8:79:fc:0b:4d:53:77:c4:4f:e8:2e:f9:3d:d4:63:ff:ba:9f:
         c5:e8:02:e0:96:39:81:0f:80:e6:d3:d2:4b:3d:6b:9b:8c:c8:
         20:f2:2a:f8:15:dc:a3:b5:b6:6e:10:0a:3e:de:3c:d8:0d:0a:
         19:26:c3:fa:b6:35:e7:62:50:4a:5c:0d:99:2a:08:0c:cf:9b:
         69:36:cb:d7:93:6d:6b:46:b1:40:5b:59:a8:93:8f:90:b1:5d:
         53:37:3d:c3:6e:80:55:63:ee:50:0c:2b:8b:ab:ff:20:f7:da:
         54:ad:8f:f8:07:85:22:88:b3:35:68:cf:2a:df:bb:24:48:b3:
         21:d6:55:0b:1f:8e:d9:45:a3:24:29:29:a3:54:43:64:b9:f5:
         93:c8:fd:96:8f:7b:66:16:a1:ed:69:8f:a2:9e:a3:92:8b:1b:
         ab:02:c4:05:43:db:85:6e:a8:f8:21:38:d2:36:4a:c3:0b:6c:
         70:76:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:28 2025 by rpki-client