Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89eea63a-f737-3cc2-b90c-3a8e544e0a2c.roa
File:                     89eea63a-f737-3cc2-b90c-3a8e544e0a2c.roa (raw, json)
Hash identifier:          dHi3YBuCgYLPSPVUcQ9c7K0aLG73kAFZCt0AH/H0jhQ=
Subject key identifier:   F2:76:D2:A5:A8:BB:57:BD:6E:3E:6A:0A:84:0D:29:E3:7A:20:C3:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C53193CD6CA5E97C8FE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89eea63a-f737-3cc2-b90c-3a8e544e0a2c.roa
Signing time:             Tue 22 Jul 2025 12:41:16 +0000
ROA not before:           Tue 22 Jul 2025 12:41:16 +0000
ROA not after:            Mon 20 Oct 2025 12:41:16 +0000
asID:                     396652
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:53:19:3c:d6:ca:5e:97:c8:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:16 2025 GMT
            Not After : Oct 20 12:41:16 2025 GMT
        Subject: CN=2e4fe535-25f1-420b-975e-91440d0305b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:2a:c7:ec:7e:01:ee:27:bc:be:1b:7b:8b:
                    57:0b:a0:b8:f1:f0:a1:3d:71:5d:03:b0:f6:23:65:
                    13:53:20:65:e1:fd:f8:4f:24:99:2e:9b:20:06:c7:
                    28:97:11:d5:1e:09:1d:e3:8f:df:05:13:5a:0d:90:
                    d5:63:ff:85:67:d9:a7:03:0c:16:83:1d:a0:2c:fc:
                    c9:96:bb:b5:f0:84:9b:ec:8d:f7:c1:e6:ed:fa:98:
                    2d:58:83:b1:65:40:aa:f0:43:48:21:a2:a3:9a:53:
                    2e:e6:e6:ce:25:d8:cd:33:a6:d1:56:ca:67:ae:3c:
                    db:21:67:d0:fd:22:71:f1:2c:a2:6e:3e:12:a4:8a:
                    c1:7b:11:e7:b0:25:4a:a6:f1:8f:1c:d4:73:4a:b6:
                    0f:57:d1:73:df:5d:63:60:4f:0c:fd:31:3a:c9:a8:
                    df:43:2f:89:93:5a:16:9a:6c:c2:25:05:1a:20:18:
                    b9:2c:95:53:43:df:10:27:72:2f:48:09:79:7a:c3:
                    79:55:43:63:de:44:dd:d7:69:18:e0:3d:f8:ae:e7:
                    ca:c8:a7:c8:0a:42:07:d2:6d:3d:ce:98:25:59:9a:
                    7b:2a:2a:6c:11:cf:23:a5:5b:7e:3f:ea:57:f1:25:
                    45:6d:11:5d:f8:ca:da:31:f6:49:33:10:4a:9a:d3:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:D2:A5:A8:BB:57:BD:6E:3E:6A:0A:84:0D:29:E3:7A:20:C3:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89eea63a-f737-3cc2-b90c-3a8e544e0a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:35:14:56:ba:25:e7:24:0e:2d:79:67:e8:67:47:be:ab:
         4a:b9:87:f6:14:e8:a8:6e:61:7e:4e:71:89:e9:56:7d:4c:96:
         8e:9c:f2:1d:3f:20:1d:b1:98:10:b6:c2:6c:0a:5b:e8:62:8f:
         86:03:36:9f:cd:25:87:9d:08:d9:bd:e2:c7:8c:16:21:0e:e5:
         95:0d:89:e0:31:f8:ae:fa:4c:c3:22:30:60:70:76:4c:ea:2f:
         ea:b0:8b:87:d8:a5:19:bf:9f:4d:62:08:4d:30:8a:b5:fc:70:
         d5:91:f1:7a:d6:15:f7:72:2e:56:09:53:f6:d2:05:72:75:3c:
         84:fb:0a:3e:d6:b8:c4:40:4b:cb:7a:ca:29:b1:a9:59:68:9b:
         72:66:c5:c1:70:27:1e:79:b8:25:74:41:33:aa:8f:09:62:11:
         33:33:3b:01:72:2d:9c:15:86:d1:9e:26:5e:74:5b:f1:56:2c:
         fe:be:9c:67:6b:4d:0c:55:83:e8:f9:df:84:be:95:58:67:4e:
         51:3d:0d:b7:0c:6b:3d:fd:e1:48:7e:21:ef:01:71:fd:4c:45:
         64:ec:12:7b:fe:6e:15:65:f9:e4:08:11:d0:1e:7a:53:e8:e3:
         41:57:6c:40:ba:d6:fb:de:ec:aa:77:cd:13:f9:2a:5c:5b:9a:
         91:4b:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:18 2025 by rpki-client