Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ddd2cc2-f1f6-33ec-aa14-a28ccd59f185.roa
File:                     5ddd2cc2-f1f6-33ec-aa14-a28ccd59f185.roa (raw, json)
Hash identifier:          By5TDAwJc3mNgljMyy9eSuDPBxAsuUEMBw9vPb9wRz8=
Subject key identifier:   C8:85:03:49:3F:40:49:74:AE:80:98:14:0D:2E:C9:A5:06:68:DD:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C51C181399775F8799788
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ddd2cc2-f1f6-33ec-aa14-a28ccd59f185.roa
Signing time:             Tue 22 Jul 2025 12:41:16 +0000
ROA not before:           Tue 22 Jul 2025 12:41:16 +0000
ROA not after:            Mon 20 Oct 2025 12:41:16 +0000
asID:                     396669
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:51:c1:81:39:97:75:f8:79:97:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:16 2025 GMT
            Not After : Oct 20 12:41:16 2025 GMT
        Subject: CN=8c609bfb-5b93-424a-84fd-c3cbdfe3bf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:31:12:81:3b:f2:1b:2f:13:2b:12:07:17:
                    55:fe:05:b6:e6:1f:6a:64:1c:ee:fa:90:23:41:4b:
                    82:3d:de:e1:53:b6:0a:46:26:64:d7:78:3e:f2:cc:
                    e9:97:09:59:9e:4f:8d:41:d2:ae:71:88:09:c6:1f:
                    15:46:3b:71:04:c4:23:0d:94:05:a4:ca:4a:5b:44:
                    35:47:91:95:fa:65:a8:04:c2:f1:36:8d:a8:20:3e:
                    ef:ee:5f:2e:63:e5:00:54:7f:7e:65:62:f8:a8:38:
                    02:8d:b5:99:ed:fc:d7:4a:7a:90:3b:83:f2:55:38:
                    9f:d7:44:ca:ee:e6:8f:24:8f:af:a0:40:39:d1:3a:
                    62:ae:6c:cd:14:8d:e5:d6:53:05:15:ac:20:47:34:
                    44:ac:84:70:8a:cd:d7:ed:14:ec:85:93:b9:0c:e5:
                    b7:54:90:15:b9:b6:cb:52:56:35:cc:5a:21:12:c8:
                    a8:90:90:53:ef:87:b6:2b:d1:c5:2b:43:a6:e7:80:
                    53:90:3d:39:3a:53:df:ca:d2:7b:29:81:6a:42:e2:
                    55:d5:22:fa:3e:c8:a7:0d:0d:a4:2b:56:96:2d:71:
                    50:d1:6e:a5:1b:d4:22:15:a3:23:f0:7a:89:75:46:
                    fe:73:44:8d:65:20:21:5d:cc:6e:96:1a:e8:bf:f4:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:03:49:3F:40:49:74:AE:80:98:14:0D:2E:C9:A5:06:68:DD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ddd2cc2-f1f6-33ec-aa14-a28ccd59f185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:61:70:d2:d0:fe:e7:cc:74:c3:83:70:07:a7:5c:02:50:7d:
         1a:b3:20:cd:56:fb:fd:10:ba:5a:02:c7:c9:f3:2f:84:5e:40:
         3a:21:bb:35:be:10:a6:0b:b4:19:db:8f:18:03:ed:0a:01:30:
         66:f7:88:7c:3d:57:94:98:46:dc:e6:6c:63:74:aa:32:8d:d4:
         ec:fc:67:43:66:c7:06:12:a0:58:2a:9f:e7:fb:de:4d:b3:16:
         de:46:02:76:1b:37:9e:db:83:82:0c:9c:0f:50:b6:bc:f6:28:
         fa:35:9c:0c:df:9a:d2:67:21:fd:55:52:e5:70:aa:4e:f6:12:
         cd:a0:6b:07:9a:ff:f6:34:a6:aa:1c:ef:28:07:fa:e5:ca:9e:
         3c:9d:1e:0b:96:99:9f:cb:76:ac:16:a6:ad:27:7e:68:ed:a8:
         d5:e7:90:70:39:96:cb:2e:52:75:4c:43:89:92:ae:86:8b:e9:
         64:88:53:83:3c:ac:ac:63:79:d1:63:9a:88:e6:03:3e:43:71:
         95:bf:cc:1a:c7:f1:64:09:4d:01:15:31:c9:db:75:cc:64:6d:
         65:b8:78:01:dd:b8:41:2d:27:2f:b5:0a:98:7e:3a:83:0b:a0:
         e3:8c:4c:aa:d1:95:aa:f8:fc:4a:e8:f6:4e:7a:74:14:62:01:
         64:9d:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:17 2025 by rpki-client