Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641c9659-19f2-3231-9229-60e85cbd0b43.roa
File:                     641c9659-19f2-3231-9229-60e85cbd0b43.roa (raw, json)
Hash identifier:          g15qyDiw3NS2t8+dpfon95m56yWOIoUpc7XYM7i94+g=
Subject key identifier:   DB:6B:0F:4E:32:89:7F:51:7C:86:96:50:A9:E0:05:44:9B:A1:35:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5B93CA00A0F0A8A6BEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641c9659-19f2-3231-9229-60e85cbd0b43.roa
Signing time:             Tue 22 Jul 2025 12:41:20 +0000
ROA not before:           Tue 22 Jul 2025 12:41:20 +0000
ROA not after:            Mon 20 Oct 2025 12:41:20 +0000
asID:                     396612
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5b:93:ca:00:a0:f0:a8:a6:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:20 2025 GMT
            Not After : Oct 20 12:41:20 2025 GMT
        Subject: CN=e001a288-0683-4f47-aa9d-bb03050c7dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:d8:e4:f3:72:48:e7:46:af:62:ab:2d:9a:
                    72:a8:8d:a5:af:fa:ea:2b:07:4f:34:03:b1:eb:12:
                    d0:94:e3:7b:d0:64:c5:69:bc:70:6f:e5:91:58:d2:
                    71:5d:fe:9e:f1:98:39:b1:03:e0:b8:a2:88:43:21:
                    2f:5c:de:02:a6:9d:52:4b:71:8a:66:ad:88:50:93:
                    a0:93:5d:ac:b0:e2:f8:bf:2d:93:00:cc:b6:4f:64:
                    14:7f:0d:06:17:b1:26:03:74:82:e0:32:fd:17:36:
                    0c:87:42:e7:d7:2a:ed:d4:17:80:c6:bb:10:1b:42:
                    4d:c8:f1:0e:35:10:8f:52:bd:ea:e9:f4:3e:be:c6:
                    44:6c:24:40:47:a7:7c:83:9a:dc:68:7e:c5:b9:ba:
                    81:19:50:13:83:28:5c:c1:19:20:1f:07:83:88:bf:
                    9c:4b:bf:3a:b4:ad:88:41:cd:6b:24:ac:69:c9:aa:
                    1c:3a:60:e9:99:35:eb:ec:76:70:d4:0c:4b:e9:24:
                    65:7b:10:8d:31:65:23:95:19:df:d8:6e:31:d8:68:
                    93:5c:48:b8:3e:82:c4:8d:a6:fb:eb:d0:62:a0:7e:
                    50:36:7b:f6:aa:e3:a5:87:a1:7c:d9:ac:56:b7:45:
                    54:bf:93:a8:c6:5a:6d:39:18:b0:3c:9e:e5:2a:00:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:0F:4E:32:89:7F:51:7C:86:96:50:A9:E0:05:44:9B:A1:35:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641c9659-19f2-3231-9229-60e85cbd0b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:a1:c6:00:e2:d1:be:b6:7b:dd:ec:8f:69:5f:77:9e:6d:
         c6:e2:5b:0b:30:43:48:6b:c8:ec:57:55:5f:9e:23:5b:6e:4f:
         0e:07:9c:1e:3c:85:2f:fc:a4:b1:1d:69:2f:c3:33:88:a9:59:
         36:47:94:3c:e8:12:95:7d:4f:3d:42:de:0c:f2:83:8d:2a:ee:
         8a:63:2e:47:6f:a1:3e:93:69:12:02:71:cf:2a:44:b6:17:ad:
         a2:88:3d:9a:71:c6:8d:5a:37:d5:f5:33:4c:a8:1f:94:c1:ec:
         0a:78:f0:39:6d:d9:fb:ee:7e:7c:34:69:15:67:a1:31:d8:9f:
         38:09:c1:c8:8c:03:38:31:70:c7:42:7a:ed:02:b8:2c:52:bc:
         d3:6b:bd:4b:8f:f9:d7:96:28:11:c5:2a:9b:c0:d0:4e:43:4f:
         55:72:61:c6:e4:8c:08:14:ce:c4:d7:7f:e1:82:96:8f:3f:7c:
         33:ed:3b:34:cd:3c:a2:34:cd:18:fc:73:c9:11:a6:a8:04:80:
         7d:23:7c:3a:8e:53:ef:70:0e:4c:be:1c:4a:c9:b0:4a:be:64:
         e5:2a:d9:6a:c7:5f:52:77:ab:9c:1e:37:9b:7d:88:72:4b:1a:
         66:af:39:39:d8:2c:7d:4d:98:f3:35:73:91:59:d5:d4:38:47:
         8e:dd:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:47 2025 by rpki-client