Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d412a1b7-8d47-332f-bcf7-d642341953de.roa
File:                     d412a1b7-8d47-332f-bcf7-d642341953de.roa (raw, json)
Hash identifier:          oQp2FfH2l9KYhoTdLPUfaEk1uvCC09pALUZA+8NwVr0=
Subject key identifier:   65:79:CF:ED:E1:75:53:7C:79:44:D4:FF:A7:2A:2F:A8:EC:31:52:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C584732D09EFCB3D36F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d412a1b7-8d47-332f-bcf7-d642341953de.roa
Signing time:             Tue 22 Jul 2025 12:41:19 +0000
ROA not before:           Tue 22 Jul 2025 12:41:19 +0000
ROA not after:            Mon 20 Oct 2025 12:41:19 +0000
asID:                     396752
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:58:47:32:d0:9e:fc:b3:d3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:19 2025 GMT
            Not After : Oct 20 12:41:19 2025 GMT
        Subject: CN=b26750d3-2d6f-4fca-aff4-d882b97db251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:ac:69:0c:00:03:3a:0b:81:c1:96:c3:e5:
                    58:05:cf:d2:1e:b7:65:04:e8:f6:66:48:9d:95:16:
                    4d:55:7a:4f:c2:db:1c:99:cc:76:e8:48:cc:54:8e:
                    53:e8:2b:5e:53:02:ec:6f:30:3e:a9:15:2c:bc:65:
                    b2:e0:8d:0b:f0:0e:49:5c:36:0b:77:9f:14:17:38:
                    e4:6f:b5:79:7f:95:4e:40:f1:d1:8c:ce:d9:10:42:
                    35:81:9b:fc:ce:46:39:08:83:94:df:eb:1b:06:8d:
                    1b:86:33:e3:97:2e:09:95:06:f6:a9:67:9e:96:46:
                    64:0d:2f:17:98:76:31:12:df:8e:dd:e3:68:91:4f:
                    23:0a:23:4a:ed:a0:45:97:a5:08:3f:6e:5b:46:4a:
                    64:41:e6:0c:22:6e:e4:d3:5f:b5:75:bb:63:55:26:
                    9b:76:dc:c4:a1:f2:23:a0:b4:9c:37:0d:1b:f5:53:
                    57:49:9d:01:d6:28:f3:a5:66:84:5a:67:d1:4b:f1:
                    38:b5:02:64:c4:ce:02:c4:91:e8:3a:e1:3e:03:8d:
                    00:1a:79:77:a8:54:4a:34:e6:51:b0:0e:81:bf:09:
                    cb:6b:78:da:bc:ab:ea:d3:3f:a3:3a:c6:9d:e1:a4:
                    36:94:b3:8c:db:30:f6:c3:19:50:1c:c9:13:da:f1:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:CF:ED:E1:75:53:7C:79:44:D4:FF:A7:2A:2F:A8:EC:31:52:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d412a1b7-8d47-332f-bcf7-d642341953de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:ee:36:46:bc:14:e4:5a:a3:65:58:15:a0:8e:20:77:7e:
         cc:e3:e7:33:2c:fa:d3:0d:87:01:b2:52:5c:f3:0e:17:20:00:
         f2:ef:e0:ba:86:9e:f5:f6:16:f6:bf:51:a5:50:92:28:9d:a7:
         c6:d2:3d:98:60:9a:ac:ec:82:05:91:68:24:e3:e1:47:52:8a:
         63:37:92:cc:75:bb:17:cd:9d:52:ba:3d:07:31:95:06:08:7e:
         20:e5:22:80:91:75:9f:96:a6:a3:1f:0d:42:79:41:0b:5a:94:
         fb:3f:bd:2e:a1:0c:a5:00:85:77:a9:07:87:dc:47:4a:7c:8f:
         6f:df:b1:ae:8b:ef:ca:76:b0:e9:59:b8:f4:c6:b2:72:5b:5a:
         51:c6:49:ce:2d:23:09:23:6d:eb:e5:c8:60:e9:f7:2f:22:60:
         a6:42:d1:cf:a1:e2:f4:9d:cd:f6:04:7c:39:0a:db:78:54:36:
         5e:67:97:58:b8:9b:fb:a3:0a:4e:30:67:58:58:3c:79:9a:ab:
         8e:9d:f3:2f:ea:c7:76:04:d1:6c:55:49:ff:6b:0c:5d:82:45:
         36:42:89:bd:22:18:b3:c2:a1:71:b6:b8:62:30:2a:65:6d:f8:
         55:a1:39:be:02:d0:2e:ad:07:8e:7d:be:2a:f1:57:e4:77:7c:
         e0:0a:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:30 2025 by rpki-client