Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa
File:                     73932ffe-d45c-3106-9d09-83f2be75ddfb.roa (raw, json)
Hash identifier:          k6FFsqAgNg9z6HOJBdYf2+R5qUJNyhuTADYzoY9gios=
Subject key identifier:   5E:0A:44:B0:B2:9F:32:FD:08:62:E9:7E:33:E5:AA:EF:31:2B:84:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410CB3B0D7B73D217ED9000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396541
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cb:3b:0d:7b:73:d2:17:ed:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=17ed3a28-5bc6-4f56-b226-c9a450a16bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:ef:c9:63:4b:0d:e9:94:1b:26:8a:ad:cd:79:
                    a2:4c:db:36:ab:76:55:b4:23:74:d2:16:c1:d5:47:
                    60:fd:3c:e7:e5:3d:8f:a7:b8:a9:a2:36:f7:c9:87:
                    cf:b4:55:21:70:23:c2:79:2f:7d:c8:2b:4c:07:e4:
                    56:6e:cb:3d:d7:2f:65:32:5d:d1:32:41:9f:ab:12:
                    07:58:03:ff:b8:62:01:6a:d9:3d:0d:b2:a6:e3:42:
                    59:3f:60:ef:58:4e:02:39:53:7b:fd:69:e6:48:a7:
                    d3:83:06:2e:db:d4:5f:6b:15:f4:26:7f:0a:4f:59:
                    37:30:60:cc:1e:79:87:25:6a:d0:35:15:35:5f:ec:
                    ce:d1:d9:4f:31:44:58:ce:ba:0a:69:6f:be:d3:2b:
                    b3:a4:a8:97:e2:5f:34:69:0a:a3:18:99:be:36:d1:
                    54:8f:04:a0:99:18:9b:91:7a:dc:7e:8b:8d:c6:71:
                    c9:d2:1f:a5:4e:32:55:93:45:85:c2:53:9a:b8:c3:
                    8f:56:f4:31:93:91:d4:59:bc:8f:81:dd:e7:03:1d:
                    1f:ca:fd:4b:4b:62:47:ce:65:41:9d:c3:43:00:60:
                    01:60:de:59:b6:e3:5b:92:c4:0a:6f:16:3d:ad:db:
                    11:7f:70:04:09:46:23:4e:8c:36:41:6a:99:a8:7f:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:44:B0:B2:9F:32:FD:08:62:E9:7E:33:E5:AA:EF:31:2B:84:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:3d:8a:f6:12:3e:8a:2b:8b:87:78:8d:7c:ed:3d:c8:85:
         1d:da:e7:39:8c:2d:6a:ba:cf:07:69:8d:4d:f5:40:d1:23:3f:
         fd:9e:bb:29:a3:9b:38:b9:1f:99:6f:e6:6b:83:93:70:ea:73:
         41:b0:a3:68:97:41:42:b8:4b:4a:14:c2:e6:3f:61:a7:ab:ad:
         bb:b5:32:5b:f6:a8:ed:0a:f5:b5:87:cf:3d:9a:8d:2a:c8:0d:
         51:76:ce:e3:41:13:80:c8:00:cf:aa:55:d5:c1:15:07:74:05:
         ac:7a:14:fc:38:14:be:07:b5:0c:4a:41:62:05:ee:b7:0d:fe:
         9a:28:b4:ab:98:17:57:5d:18:60:bc:9e:2c:12:b9:63:65:48:
         24:d4:c7:cf:47:cc:a0:17:84:74:95:fc:10:e2:6f:05:af:36:
         fd:b2:2c:20:f8:44:f6:11:11:ca:60:d8:bc:c6:4c:89:e4:8a:
         2c:29:1d:47:93:0a:89:3d:03:33:ef:5f:65:8d:3d:f1:52:64:
         47:79:15:0f:90:53:cc:04:b1:63:73:e5:07:b1:19:3c:43:8a:
         de:ac:1d:b2:13:bd:51:03:46:a9:2f:aa:e7:ad:44:81:a5:43:
         af:2f:72:4b:b0:b9:87:a7:0e:c7:60:ac:fe:7a:e6:53:9f:e1:
         d9:94:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:17:33 2025 by rpki-client