Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
File:                     87ed16a7-45d5-3232-80e3-ebd14dba89db.roa (raw, json)
Hash identifier:          25yR9uK6rnqGdJIkQXR3KLPKWA+sGR/VNn6FSYagudQ=
Subject key identifier:   31:90:26:FE:8E:E6:90:49:4F:C4:88:25:F8:F8:39:7F:ED:ED:A2:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410DA0634814A1629920C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396560
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:da:06:34:81:4a:16:29:92:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d18681c6-78c1-4dd2-b60c-1df6e6760913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:03:3b:4f:94:d6:03:fb:e0:1a:16:52:db:
                    8d:ae:aa:a4:a4:1e:85:c6:06:69:8e:9e:3c:71:09:
                    be:6d:ec:d6:ed:31:35:ba:99:e6:40:e3:42:fe:97:
                    fb:2b:71:3b:13:3c:88:74:a0:d3:40:5a:26:81:fa:
                    c6:c1:31:f4:ec:31:50:cf:43:4d:96:80:7f:e3:b6:
                    c0:0b:17:ea:35:e4:d8:35:7e:58:f6:8b:00:31:af:
                    26:3f:ef:22:31:5a:89:bd:4c:6d:f0:75:a0:d0:ba:
                    8e:b1:d8:53:50:45:2f:b7:c3:bb:b9:70:90:53:35:
                    90:95:c4:54:34:f3:ab:31:c2:52:fc:05:1b:f6:1e:
                    cf:91:3b:e1:b1:28:4e:d5:07:31:24:22:75:63:3d:
                    84:3d:b4:99:60:5d:4c:f7:43:21:6b:2e:50:8f:08:
                    d5:f5:71:11:6e:24:4c:fd:67:4c:1a:17:1c:3c:66:
                    b2:bb:0e:ba:aa:2a:8d:e6:ac:8e:a6:c9:a8:ec:01:
                    a5:1d:63:1d:80:61:12:6a:7e:24:8a:e7:f9:33:2e:
                    73:26:07:9b:fc:26:8b:de:18:0f:f6:3f:a3:55:d2:
                    71:99:a3:5f:58:30:00:b4:da:43:20:b1:2b:34:94:
                    d2:0b:2f:a4:f9:fd:2f:8f:59:81:d4:60:ed:47:77:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:26:FE:8E:E6:90:49:4F:C4:88:25:F8:F8:39:7F:ED:ED:A2:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:28:56:2f:f9:bc:3c:36:92:a3:9b:c9:cc:b9:05:ca:e8:
         a5:4d:d3:91:e2:49:a9:86:13:81:dd:48:44:5a:ee:8f:dd:a5:
         f9:05:a2:24:65:a8:e9:98:d0:c1:53:cd:a4:ad:73:1f:ae:f0:
         0f:55:65:61:4d:b7:2e:aa:7f:47:da:ba:97:d2:67:e3:06:7c:
         5d:9f:86:0c:e6:18:0f:3a:47:d3:dc:a8:38:3a:a0:d9:a0:9a:
         52:ce:95:2b:5e:2f:71:1e:18:6e:cc:dd:d0:4d:cd:e8:50:00:
         6a:58:fc:0f:f5:33:ff:eb:47:01:aa:ec:a5:e2:04:0e:55:0a:
         f2:ef:2a:9e:69:27:f4:34:c6:7d:90:89:ef:e4:75:be:3f:ba:
         30:49:0c:28:2d:c9:0b:88:c0:7a:fb:e7:27:ed:d5:8a:91:12:
         40:7a:06:a8:b5:31:34:3b:6f:fd:bb:27:a1:f9:2c:64:59:4f:
         b3:a2:d7:71:42:c0:53:ed:35:4a:e1:63:fb:be:a4:73:56:5f:
         23:f5:23:19:a3:e3:36:60:11:76:63:ac:32:87:0b:1a:76:f4:
         49:3d:0f:f6:82:a8:47:38:c1:9e:d0:82:90:8a:91:09:2d:83:
         ad:0d:29:36:d8:94:59:28:bd:43:6d:d7:87:09:ca:ac:3e:b6:
         71:d2:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:11 2025 by rpki-client