Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
File:                     ddc02893-df28-3f75-97c1-785b64e1dafd.roa (raw, json)
Hash identifier:          klVxK0tq5H2HKtMAsnDyfgMpC1+GOCNz788YAvYe+rU=
Subject key identifier:   17:59:2F:E9:97:91:2D:F9:39:F9:11:68:A9:C8:DE:B3:8F:39:F7:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C54764EF4BB51D3CE077C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
Signing time:             Tue 22 Jul 2025 12:41:17 +0000
ROA not before:           Tue 22 Jul 2025 12:41:17 +0000
ROA not after:            Mon 20 Oct 2025 12:41:17 +0000
asID:                     27544
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:54:76:4e:f4:bb:51:d3:ce:07:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:17 2025 GMT
            Not After : Oct 20 12:41:17 2025 GMT
        Subject: CN=bd407eab-b7d3-4fac-aba0-f94bf7b0f7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:84:9c:de:4e:26:53:86:72:0a:c2:90:e2:
                    25:99:d0:fd:7e:60:36:59:8f:40:52:82:4d:6b:f2:
                    a0:33:4f:66:f3:e5:33:06:ae:07:93:76:da:e7:2b:
                    69:56:d9:d0:7b:3a:e2:73:5b:a8:3a:69:07:e0:f7:
                    8e:70:27:6d:e6:4b:19:cf:6c:f2:01:5d:c3:a2:a4:
                    3a:eb:6b:45:48:c2:e0:39:8e:7b:c9:b7:8a:ae:17:
                    b0:50:d7:76:46:39:69:40:d0:fc:1b:09:5b:a9:49:
                    2f:0a:a2:69:02:65:95:f7:ec:f4:d9:a2:33:3e:82:
                    81:6d:14:32:03:42:c3:dc:3f:26:6f:e2:f6:28:23:
                    52:c1:26:4e:d6:d6:27:1e:47:19:e7:03:69:14:3a:
                    31:14:be:43:9f:1e:1a:56:db:79:c3:fc:24:e6:4f:
                    ad:8a:0c:a6:b7:ce:0b:59:2b:9d:be:48:23:89:30:
                    fa:63:7d:ef:a9:77:a4:b9:35:29:b9:6d:f3:a5:05:
                    1d:1c:60:ab:a2:c6:87:5b:87:77:65:12:ad:c1:65:
                    3d:b8:f3:17:28:10:45:31:6b:f5:1d:c5:9e:d5:29:
                    e7:89:84:ba:3a:16:5c:46:cb:f5:34:1c:e5:a8:85:
                    19:70:51:47:b4:fd:b8:f1:1b:ae:77:ae:e1:0a:ce:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:2F:E9:97:91:2D:F9:39:F9:11:68:A9:C8:DE:B3:8F:39:F7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:d1:66:ed:4e:64:df:72:e9:a1:50:fe:d0:d5:5b:67:f1:
         97:1f:0f:2b:48:31:b7:b1:39:9d:ea:bf:cf:aa:cb:9d:63:73:
         93:ca:9a:a3:0c:16:fa:f6:93:81:c7:97:40:f7:58:71:e9:3c:
         fe:05:55:c5:99:03:7b:1c:9d:29:03:25:6f:d4:0c:8d:0a:7d:
         02:c3:93:0a:e3:3c:fd:b3:eb:af:c7:3b:35:9c:37:c7:6c:ff:
         34:5b:89:c5:6a:80:ba:d3:91:43:60:c0:f6:2f:98:18:a3:d3:
         cb:27:64:53:d6:ca:28:ac:db:b0:dd:b7:b8:f7:79:44:90:e6:
         a8:34:64:fe:06:15:43:4e:77:36:da:66:51:e0:98:63:cd:e1:
         34:63:c6:b3:8d:0c:31:fd:e1:71:f5:be:4c:5c:0e:a7:eb:93:
         e3:0a:fe:05:02:d6:b5:e8:10:7d:7d:a5:72:d8:2b:ea:09:5d:
         fe:0e:d0:c5:f8:73:af:97:74:e1:17:43:8b:76:9b:4f:a8:4e:
         6e:f6:29:8b:5c:d7:cf:81:ca:bb:52:54:e9:0c:dc:05:5a:05:
         9d:28:d1:59:d2:43:66:fb:5f:a3:a1:07:98:78:a8:1a:ae:71:
         38:3f:20:99:57:19:c8:83:07:ca:e2:04:02:06:22:2e:86:de:
         60:38:87:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:27 2025 by rpki-client