Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa
File:                     ad4729fe-8ce1-303b-83cf-89d1af230bef.roa (raw, json)
Hash identifier:          eGV7gG1H8tSUO/z/UlUCBwwbrXrefkBj1WzDok4SvCo=
Subject key identifier:   61:09:E6:BF:54:CB:0D:B0:E9:EB:93:7E:FB:7F:DE:79:D9:00:90:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4B9CDFF657C4501EFFE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa
Signing time:             Tue 22 Jul 2025 12:41:13 +0000
ROA not before:           Tue 22 Jul 2025 12:41:13 +0000
ROA not after:            Mon 20 Oct 2025 12:41:13 +0000
asID:                     396611
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4b:9c:df:f6:57:c4:50:1e:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:13 2025 GMT
            Not After : Oct 20 12:41:13 2025 GMT
        Subject: CN=77e23a2f-0951-41b8-9453-2b427acb3316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:85:9a:6f:1b:69:cb:37:03:2e:07:08:01:
                    db:6e:8b:6b:b7:93:18:31:61:ef:65:70:7f:f3:a7:
                    4b:25:a9:38:c1:1e:68:57:79:15:fb:ba:a2:4f:f1:
                    5d:ad:f8:7c:42:7c:c7:2c:67:ab:62:fc:f3:c1:a0:
                    78:dd:02:79:f5:0f:8e:b6:87:bf:66:e5:7c:84:62:
                    dc:42:c9:87:cc:a6:58:8a:24:12:a4:c9:d6:ef:15:
                    9d:1e:75:6e:36:89:b8:b4:f2:5b:bc:ce:9a:05:6d:
                    76:b1:b4:9f:94:d5:85:39:4b:04:42:dc:9b:1d:70:
                    4c:ec:16:0a:b6:a3:8f:af:30:71:ef:fe:c1:b4:76:
                    36:05:e9:c5:48:8b:07:87:d3:dc:29:05:53:70:7c:
                    1b:12:b1:e5:cb:e1:b4:51:e7:36:f8:32:f9:3d:de:
                    93:fd:b0:76:5e:cf:e9:b3:40:ca:03:f6:0a:e8:da:
                    bc:09:75:0d:23:13:11:96:80:2e:71:2c:36:53:af:
                    a6:98:e2:e3:3a:e9:bf:e9:92:ed:78:6a:79:0c:6a:
                    e1:5f:14:6a:a7:f1:c6:a4:58:13:56:32:a3:8a:7f:
                    80:23:39:e5:30:a4:05:78:bb:ff:2f:20:3b:27:f7:
                    a7:53:c4:bf:37:f8:0b:02:8d:38:44:dc:1c:47:52:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:E6:BF:54:CB:0D:B0:E9:EB:93:7E:FB:7F:DE:79:D9:00:90:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4729fe-8ce1-303b-83cf-89d1af230bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:45:32:df:67:ae:8b:28:aa:45:5d:cc:54:a2:78:55:69:
         a3:ef:4f:b8:45:8e:b7:d3:4a:18:1e:5d:a9:02:d5:c6:6c:08:
         77:4d:1d:b3:47:a8:61:46:8a:69:87:5b:30:3f:1e:c5:a6:42:
         58:4f:76:d6:71:99:7c:a3:11:eb:ee:a7:1a:9c:c5:47:5a:ba:
         9d:0b:fc:97:10:69:bb:57:dc:a4:2f:43:19:b5:e1:a4:dc:68:
         98:3b:24:41:83:e0:66:be:4b:9b:3c:99:da:3c:0d:be:03:95:
         88:28:b3:ea:85:1e:cc:08:d3:cb:3a:6f:1f:db:f9:11:0a:55:
         45:f2:c2:b9:09:0d:bb:9e:d3:d9:fa:35:41:db:f3:39:a9:3e:
         c9:1f:b2:4b:d1:61:37:f1:4c:5f:00:4d:75:32:b9:b1:4f:d3:
         28:1a:d5:60:0a:fa:08:f6:61:32:66:0a:fd:1e:ab:21:d1:9e:
         26:72:41:15:08:22:7c:ca:10:ba:60:14:7f:30:77:a6:f3:fb:
         15:fd:ea:81:16:0b:64:ac:12:b7:e3:d9:74:cc:99:6c:91:09:
         50:d6:e5:6f:22:02:56:dc:29:1e:f1:89:71:35:2f:a7:f3:63:
         90:3b:8e:32:6f:e3:2b:35:3f:d1:61:67:05:4b:c9:e1:24:30:
         54:b9:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:14 2025 by rpki-client