Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5adae5be-7684-36f0-bdfe-4df416eaca2b.roa
File:                     5adae5be-7684-36f0-bdfe-4df416eaca2b.roa (raw, json)
Hash identifier:          DyLJgrXiSlz+faAV/Gz/0ubhjwq8YHslf2Bd4vrS7HE=
Subject key identifier:   8D:8B:D0:3D:8A:81:D6:CA:0C:0A:56:7C:6C:DA:12:29:8C:D0:9B:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410D90BC044AB94C09AE180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5adae5be-7684-36f0-bdfe-4df416eaca2b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     397202
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d9:0b:c0:44:ab:94:c0:9a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=65273479-07ca-4bf9-9707-e614be26cc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:07:b1:34:6e:b8:80:21:fa:58:98:67:e6:
                    97:1c:27:00:a7:3d:40:19:e3:a2:0e:ac:e0:20:a6:
                    8c:73:79:19:bf:a5:83:9b:8c:55:dc:77:da:5a:f6:
                    bf:aa:62:f3:9d:8a:2c:02:72:6f:ab:bd:b3:6e:86:
                    47:fa:8b:db:98:cf:9b:ad:bd:4c:e7:2d:5f:2b:ec:
                    16:ea:54:b1:be:e9:0b:04:37:46:7a:a2:01:95:78:
                    68:a9:94:40:5a:7c:18:5b:25:a7:db:a0:08:7f:ed:
                    90:87:73:c3:31:81:d3:7f:0a:dd:30:0d:99:66:e2:
                    a2:9d:e5:74:ef:0a:a1:63:0e:e0:20:ca:9c:48:44:
                    40:71:f2:37:8b:75:20:1d:b4:fa:c2:2f:e5:d3:fb:
                    d6:98:94:7a:05:91:c4:a7:0b:f4:32:cc:97:9d:4e:
                    cd:21:bb:af:b7:35:5d:88:f4:d4:05:75:d0:2a:1b:
                    9a:b8:3f:96:88:fa:eb:b9:80:36:57:55:19:db:39:
                    67:3f:bf:11:72:3d:05:cc:7c:9d:ce:9d:77:2f:03:
                    bc:2e:5a:a1:56:a1:83:2e:24:f8:f3:87:f9:f2:da:
                    23:2e:f9:6a:66:de:24:35:05:19:98:49:d0:63:10:
                    9c:7f:b9:cc:03:7b:95:e1:7d:cf:03:e8:da:72:a0:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8B:D0:3D:8A:81:D6:CA:0C:0A:56:7C:6C:DA:12:29:8C:D0:9B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5adae5be-7684-36f0-bdfe-4df416eaca2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:33:f9:c4:8d:b7:5c:33:7f:13:48:42:69:c6:39:ab:42:8b:
         14:6e:d1:fd:fd:ed:70:dd:a8:2e:a6:75:46:c6:1b:51:6a:5d:
         b5:82:b5:45:d7:32:cb:25:8a:95:94:26:b7:34:b9:5c:0e:2c:
         73:fe:17:a3:70:f0:4e:da:94:73:f4:1e:b4:53:e1:0a:02:65:
         b6:c2:f2:57:94:17:8d:41:35:6f:3f:48:b9:cc:9e:60:93:69:
         05:93:18:85:0b:f0:08:70:ed:c0:04:43:45:a2:4b:4b:d9:9c:
         a5:31:36:ee:74:51:bd:cc:2f:6a:f7:b4:7a:b5:d3:03:b1:a7:
         89:8c:be:75:b7:f4:59:03:23:92:ce:3d:6d:49:d3:fd:5c:ae:
         c0:68:6d:89:59:2c:85:b5:86:28:43:b7:4e:31:7c:1c:ff:41:
         c4:54:8a:8a:83:08:bf:2e:ef:5d:b0:32:64:7c:ab:2f:9f:27:
         12:77:dd:da:ad:5d:3a:d0:59:25:ad:b1:24:81:04:41:aa:7c:
         10:d4:9c:35:52:b0:d8:11:b2:72:ba:39:e4:6d:49:69:48:51:
         c4:f6:d7:87:ab:0b:71:cf:bc:86:96:22:4f:0b:34:8c:c4:ef:
         aa:0c:a4:46:67:24:79:88:02:5a:71:61:88:e0:84:da:ea:32:
         20:ee:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:42 2025 by rpki-client