Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac5bbf-f093-36d4-914e-db6851f8ee42.roa
File:                     c9ac5bbf-f093-36d4-914e-db6851f8ee42.roa (raw, json)
Hash identifier:          ylmHhPHIPmkRn6T0/tGV6AOADFaRfPDRmW5f5il+B3M=
Subject key identifier:   0B:09:19:FE:51:A7:21:35:50:B3:C9:05:EC:F2:AD:6D:5D:7A:98:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4D314765AB762DD686C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac5bbf-f093-36d4-914e-db6851f8ee42.roa
Signing time:             Tue 22 Jul 2025 12:41:13 +0000
ROA not before:           Tue 22 Jul 2025 12:41:13 +0000
ROA not after:            Mon 20 Oct 2025 12:41:13 +0000
asID:                     397208
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4d:31:47:65:ab:76:2d:d6:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:13 2025 GMT
            Not After : Oct 20 12:41:13 2025 GMT
        Subject: CN=2fea9bc9-4373-4a2e-b9e2-bfcf1e407296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:eb:7a:4b:56:e4:10:1b:aa:ad:ef:c7:d4:
                    57:53:9b:78:72:93:e9:38:7e:9b:c9:87:1f:bd:53:
                    53:ab:4c:2a:ba:78:e5:e6:83:f8:a0:16:51:cf:d2:
                    c7:95:86:ae:84:88:1d:c2:07:ab:08:dc:0f:67:85:
                    df:7e:2d:00:6d:78:c7:20:97:af:c1:1f:e9:ea:32:
                    05:42:78:d7:2b:0b:53:0a:79:53:69:51:ed:03:e6:
                    79:12:fb:6b:41:08:11:1c:9b:2b:1a:06:56:c0:66:
                    e5:0e:da:13:1b:97:40:f3:4c:1c:cf:c9:de:8c:cf:
                    b3:e4:55:73:0b:f9:2e:2b:97:7e:22:3f:48:ac:5f:
                    f4:83:67:28:a2:3d:30:d7:91:f7:5f:36:4e:9e:17:
                    15:a8:1a:e5:b1:b0:49:02:25:46:f8:ab:41:fe:3e:
                    bc:21:1c:95:2d:33:7f:a2:df:22:b7:f9:9e:cf:fd:
                    2c:ec:45:7f:31:45:79:f5:ee:8e:c8:8d:df:ff:ca:
                    22:c1:61:91:dd:2e:2b:a9:ab:ba:3a:19:bc:b3:34:
                    cf:06:01:b4:34:ca:7b:47:fb:28:71:8c:cb:70:f8:
                    aa:34:03:71:22:21:3e:92:95:03:a7:4e:1b:4c:ab:
                    14:7d:2e:48:82:18:81:87:8c:22:36:09:66:4e:0c:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:09:19:FE:51:A7:21:35:50:B3:C9:05:EC:F2:AD:6D:5D:7A:98:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9ac5bbf-f093-36d4-914e-db6851f8ee42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:43:e3:5d:7b:11:a1:c5:e3:6d:51:3e:db:b6:28:7d:9c:
         a2:3f:55:c2:0a:02:11:eb:58:ea:b7:1e:c6:18:04:b3:7c:0c:
         64:c6:7f:0f:8a:15:9e:8b:1b:06:da:f4:2f:64:31:dd:fb:a3:
         cb:69:f2:d8:bc:05:08:30:1f:af:49:ff:96:92:69:b5:5c:ad:
         ae:1d:77:1c:c7:cd:4f:9e:a4:e4:30:5b:65:a0:f3:9a:0c:a9:
         63:e9:c5:53:88:d4:c5:42:b0:e6:e7:31:64:60:13:43:6c:56:
         dd:d4:62:d1:be:a5:2e:64:a3:df:c0:64:7d:aa:e7:96:77:b1:
         f0:61:d8:f5:6e:b5:42:c3:c1:d3:49:f0:53:1e:4b:07:d5:b8:
         81:4e:32:92:ec:d0:51:c1:1f:be:77:bc:45:07:6c:bb:b5:35:
         3a:cf:aa:6c:63:7e:31:65:98:db:53:9e:65:9d:16:16:7b:bf:
         ab:56:b2:ee:ec:47:c9:ad:b6:30:3d:00:eb:43:9b:7a:ec:49:
         d5:18:75:69:52:a9:14:d6:5b:2a:28:8b:be:9b:2d:61:32:d3:
         37:af:39:e9:b5:71:09:e7:1b:72:0a:0c:7d:b6:66:87:d8:4c:
         dd:86:5b:83:fd:cf:fa:40:af:8f:32:1e:94:e5:3b:53:bb:08:
         c5:d6:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:10:12 2025 by rpki-client