Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99aa00e-9aff-36a7-8e4d-b027d29cb58e.roa
File:                     d99aa00e-9aff-36a7-8e4d-b027d29cb58e.roa (raw, json)
Hash identifier:          TuhAVjs/uIOOtbCSQWc8F2NyPWYgvrBovTgfz8GMDCI=
Subject key identifier:   E6:92:C5:8E:DC:60:FF:C6:ED:D1:51:63:7A:FD:75:43:54:A7:42:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C50FE5D92B0D34FA7F100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99aa00e-9aff-36a7-8e4d-b027d29cb58e.roa
Signing time:             Tue 22 Jul 2025 12:41:15 +0000
ROA not before:           Tue 22 Jul 2025 12:41:15 +0000
ROA not after:            Mon 20 Oct 2025 12:41:15 +0000
asID:                     396645
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:50:fe:5d:92:b0:d3:4f:a7:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:15 2025 GMT
            Not After : Oct 20 12:41:15 2025 GMT
        Subject: CN=e73baf53-4cbb-453e-98a9-5e4cc21897b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:36:f2:35:a8:e5:7e:26:f3:ee:0e:3b:9f:
                    5c:f0:10:e7:ba:fc:bb:6c:a2:2b:97:55:92:f5:28:
                    a3:87:d4:44:9b:e9:e1:8d:90:8f:f7:91:0b:ec:7e:
                    3c:0d:37:96:d7:6e:d4:90:fa:96:87:c2:b0:41:cd:
                    7b:a7:89:93:46:b2:29:37:e5:35:03:fe:b6:78:2b:
                    b0:64:ff:f5:ba:35:32:95:f2:75:62:b1:6b:d8:93:
                    af:5c:88:9f:e8:9d:50:75:fd:a3:9f:e3:cb:c0:63:
                    ee:33:0c:c1:a1:41:48:33:b4:fc:51:b6:17:10:d5:
                    39:10:d6:df:9a:68:85:0b:db:4d:bf:be:4a:93:1a:
                    e3:0e:2d:b6:62:6e:15:80:a0:30:3b:3c:76:ad:bf:
                    a7:57:d4:ea:ab:2d:be:27:b4:05:b7:5f:2d:94:53:
                    8c:ed:2a:1d:cc:47:ec:21:88:fa:3d:ad:62:e2:b3:
                    c7:a0:03:3d:52:57:52:bc:f1:8d:3f:27:cf:81:06:
                    fe:26:88:b3:c8:35:ae:e3:a4:58:9a:b8:0e:41:f3:
                    fe:ea:7c:ea:61:de:d0:4c:35:ae:f1:15:81:2e:c4:
                    cb:70:64:32:a6:5c:b4:aa:5b:a8:9e:15:c5:75:d4:
                    43:79:a0:72:08:87:bf:fc:60:79:b6:ee:1e:04:95:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:92:C5:8E:DC:60:FF:C6:ED:D1:51:63:7A:FD:75:43:54:A7:42:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d99aa00e-9aff-36a7-8e4d-b027d29cb58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:76:ef:e2:18:77:a5:32:62:b1:e3:2f:6a:eb:d5:4d:63:5e:
         e5:33:41:2e:e4:e2:5e:f9:bd:25:ab:49:40:bb:02:c8:f6:a8:
         20:74:c6:7e:9b:e6:fb:f8:a3:72:d2:42:fb:35:53:be:a3:cd:
         85:bb:56:40:ae:d2:b7:74:9c:2b:92:79:4f:5b:c0:b8:11:a5:
         19:87:7e:d1:ca:55:7d:d7:27:a7:9b:ca:04:94:d4:d4:35:de:
         e3:eb:b1:29:c5:8d:6c:51:f5:3d:c7:5a:24:2a:4e:04:96:7b:
         e3:12:9a:58:fb:8d:55:d2:05:30:59:08:f1:ae:b1:eb:32:f8:
         90:fe:af:61:f9:30:53:46:50:02:5e:e9:03:b5:54:a2:22:d1:
         ef:78:0b:bc:c7:6e:4e:28:98:60:b0:a8:0a:42:ac:59:0d:ea:
         de:d0:ba:d2:d5:bc:fd:d0:d1:d1:1b:fa:76:d2:68:f6:0e:df:
         a0:4b:5b:df:3b:d4:a8:83:42:e3:cc:e0:e5:8c:5b:66:a7:50:
         17:ba:b0:77:86:8f:75:f2:42:ba:69:53:8d:87:1d:c5:c7:16:
         5c:e4:f1:6d:f4:44:14:8f:65:68:0c:a6:96:31:02:8e:44:59:
         b6:cf:49:da:7b:89:65:0e:c1:d8:a9:d9:c1:f0:a3:73:ec:f1:
         1c:6d:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:16 2025 by rpki-client