Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b41b3d0-7a24-3911-9852-34380f8bf538.roa
File:                     7b41b3d0-7a24-3911-9852-34380f8bf538.roa (raw, json)
Hash identifier:          GmIBE8LCtM9ZvixdEeJdqeSygSu2FmI9pkob5xJGuRw=
Subject key identifier:   42:62:4D:A5:97:A5:31:77:A1:2F:98:8F:B4:44:20:ED:A9:E2:EA:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A84124137067BA35BC4F1D580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b41b3d0-7a24-3911-9852-34380f8bf538.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396587
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:41:37:06:7b:a3:5b:c4:f1:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=40646e91-3d85-4478-99f3-2fb17f0b9c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:95:d6:45:e6:e9:97:df:02:ac:c7:2c:dc:
                    c8:e0:0d:a7:dc:bc:11:37:91:52:89:3c:92:de:4c:
                    35:fb:8a:a0:50:1c:0e:68:6d:0f:40:fc:6c:cd:2a:
                    7d:76:9b:6b:af:e0:0c:d1:43:58:74:e4:89:cd:27:
                    62:68:da:b8:72:7c:80:4e:c2:52:23:70:25:cd:7a:
                    d8:c0:be:59:81:5c:c7:4c:d1:e0:0a:c1:83:45:87:
                    b7:79:28:c3:2b:bf:a1:ed:b3:3a:61:33:1b:da:1f:
                    71:e1:80:82:d7:ef:9b:4d:2c:14:41:a6:48:dc:4c:
                    dc:60:42:80:00:32:1b:e8:18:24:c9:0c:6d:ca:e2:
                    c8:75:12:8b:e1:36:5e:97:8f:62:20:2d:e0:33:e2:
                    55:c5:84:e2:dd:78:74:c7:78:1f:a5:17:ae:69:6c:
                    55:37:a5:bc:94:a7:c2:62:49:97:73:b6:31:3f:f6:
                    3c:2b:cc:69:bb:0b:c6:3c:7c:ef:51:2b:8f:aa:ae:
                    b5:be:39:2b:24:30:02:3b:7e:20:18:a1:47:c5:c8:
                    28:fc:ca:44:08:12:91:13:6a:0d:39:82:9c:af:9c:
                    8c:1a:80:d1:3a:f5:0b:8f:d6:96:1b:12:2a:8a:3d:
                    b4:e2:ee:c1:d5:c5:42:f8:12:2d:51:93:bc:8c:6d:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:62:4D:A5:97:A5:31:77:A1:2F:98:8F:B4:44:20:ED:A9:E2:EA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b41b3d0-7a24-3911-9852-34380f8bf538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:0b:00:0b:53:a8:4e:bd:5a:3a:b8:72:71:ef:94:4b:b5:
         e9:01:5d:2d:11:de:0a:0a:45:48:e9:cb:94:7f:f7:10:30:4e:
         4d:62:af:6d:35:1b:56:14:94:45:50:b9:8a:06:78:91:8f:c9:
         b8:a9:b0:92:df:5f:12:ec:ef:42:85:86:ef:85:b5:a4:07:fb:
         4c:5a:ee:53:71:4d:ed:3c:0c:12:3b:26:17:16:ea:85:94:17:
         7e:5b:b0:88:0e:82:f2:86:60:61:0d:bb:7a:b3:fd:5b:9c:66:
         dc:da:19:ff:ed:9b:f9:6a:c4:44:3d:4d:aa:ef:d0:62:28:73:
         4a:be:67:bc:8f:4b:45:f3:f6:d4:c3:e7:f9:b4:86:ad:6b:32:
         8d:c5:d4:37:a8:1b:1f:69:e8:b5:0a:36:fc:02:87:e3:ad:fe:
         9d:54:0d:e6:96:b0:29:ca:46:14:37:ac:03:37:c7:6f:b0:83:
         1e:03:f3:d0:d2:32:6d:2d:95:fc:90:62:6a:23:0c:ae:b0:68:
         52:db:e5:e7:4b:5a:1c:da:77:4c:f1:e0:56:76:14:96:d7:0b:
         1d:a5:28:75:bd:69:85:10:9f:4c:30:47:2a:0a:b9:66:a8:44:
         c5:d7:70:07:d2:3b:d9:2a:7c:d5:c7:20:9f:25:a2:77:4c:07:
         61:36:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:56:37 2025 by rpki-client