Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa
File:                     b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa (raw, json)
Hash identifier:          gR3H6+g6/onqKdCnleLJwgEgs5KvN/7IxDqd1K4sN2I=
Subject key identifier:   AE:54:09:65:C7:B4:A6:A4:FA:89:DC:42:CB:45:EE:82:8E:0C:BF:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C59BD3965401A269D7014
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa
Signing time:             Tue 22 Jul 2025 12:41:19 +0000
ROA not before:           Tue 22 Jul 2025 12:41:19 +0000
ROA not after:            Mon 20 Oct 2025 12:41:19 +0000
asID:                     396739
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:59:bd:39:65:40:1a:26:9d:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:19 2025 GMT
            Not After : Oct 20 12:41:19 2025 GMT
        Subject: CN=46435be5-1c5d-4319-9ceb-cfec7687f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:b5:a7:e0:9a:52:cf:07:45:5c:f3:23:61:
                    45:13:73:7f:ea:bf:02:93:ea:fd:c0:85:08:fb:a9:
                    f4:2a:57:3c:60:74:b9:38:08:46:7e:7b:93:0a:f4:
                    9a:74:95:9c:69:58:d9:d3:73:1b:1f:35:f3:60:2b:
                    71:87:df:f0:f4:bd:e5:64:2f:93:31:51:41:52:76:
                    3d:25:3b:38:88:f9:66:a9:7b:fe:90:ec:84:37:cf:
                    15:97:81:5e:37:46:62:c2:1a:a4:ff:af:9c:6f:d2:
                    58:8e:29:8f:5c:45:ec:c3:3f:ad:82:74:34:8c:f8:
                    0c:c7:32:12:91:89:a5:47:50:a5:07:9d:c3:10:f0:
                    78:03:0c:a5:d0:de:90:2d:ca:87:a7:57:25:8a:9c:
                    86:fd:fd:fb:3b:38:1b:f7:c8:11:48:e1:70:98:f0:
                    28:b1:af:f8:e9:31:cc:ed:76:b6:20:d2:cf:bb:03:
                    d5:f5:05:b5:d6:7c:74:c4:c7:89:4c:b8:85:74:3b:
                    f0:59:0b:ad:7b:54:eb:7e:ab:7e:29:46:82:5d:26:
                    ce:0b:6a:7c:61:51:19:70:e9:19:e7:7a:90:6c:76:
                    32:08:d9:fa:28:d8:99:a0:e0:b5:68:ee:dc:b9:5c:
                    6a:9e:2f:c1:74:7b:15:12:d2:2f:46:f6:fc:c3:52:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:09:65:C7:B4:A6:A4:FA:89:DC:42:CB:45:EE:82:8E:0C:BF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b32c7dd6-7aa6-3663-bc22-a996e69daa65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:ba:27:76:02:c8:51:05:78:6f:a8:1e:04:24:cf:f6:e4:
         f6:08:bf:07:64:7c:5a:d7:70:26:8c:45:64:c2:82:90:40:19:
         45:2b:2a:66:72:99:26:68:31:5f:ea:ae:d7:4e:99:72:a1:6a:
         e3:84:22:70:76:81:ac:1a:34:f5:b3:d7:f5:d1:8b:6e:73:7d:
         8f:8b:94:83:22:8e:41:0c:1a:bc:61:12:73:02:66:78:e3:f9:
         4d:4f:e4:08:b5:6f:4a:6e:81:7d:88:48:f7:7f:d2:ce:73:81:
         42:bd:a7:1e:62:4f:2e:0a:51:78:cc:cb:04:b6:58:81:0f:25:
         ae:8f:61:d8:d9:0a:aa:60:a2:d1:8f:6a:4c:12:07:be:49:42:
         27:fc:e8:cc:51:eb:c9:1c:14:6a:c6:56:f6:56:b1:fc:cd:5d:
         51:93:24:b5:56:a1:c5:fb:6f:76:c0:84:43:b0:03:9b:fe:4f:
         1f:00:b9:e2:7c:3a:0b:29:e2:94:0d:8b:29:c5:ef:13:f0:9b:
         9c:6e:47:05:9c:74:04:3d:16:83:0d:fd:11:59:ca:50:e8:47:
         e7:dc:d2:36:79:50:1e:6e:d9:b7:80:fb:f6:ad:e4:45:0b:72:
         86:e6:49:ac:29:ae:37:fb:af:94:ad:36:b6:21:69:a7:de:e3:
         09:cb:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:56:01 2025 by rpki-client