Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded33fc9-aae3-396c-820b-f5dedaf749e3.roa
File:                     ded33fc9-aae3-396c-820b-f5dedaf749e3.roa (raw, json)
Hash identifier:          gp1n2uktOPgKy0Pfremu/5A2Y9BwfGsS0bcZkEuUESU=
Subject key identifier:   5A:D3:8A:B5:23:79:B7:83:61:A5:D0:1F:29:DB:CF:DC:26:AE:51:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4CD40FC65616AC5A26C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded33fc9-aae3-396c-820b-f5dedaf749e3.roa
Signing time:             Tue 22 Jul 2025 12:41:13 +0000
ROA not before:           Tue 22 Jul 2025 12:41:13 +0000
ROA not after:            Mon 20 Oct 2025 12:41:13 +0000
asID:                     396621
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4c:d4:0f:c6:56:16:ac:5a:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:13 2025 GMT
            Not After : Oct 20 12:41:13 2025 GMT
        Subject: CN=cecfd8d5-63ef-405c-b385-9567e89edac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:87:a3:bb:c1:7f:9a:1d:13:26:ec:8d:03:
                    ba:47:c3:e0:cf:b5:d2:4b:81:2d:54:40:5f:29:8c:
                    bc:b7:2b:4c:ae:af:98:d3:34:5a:4e:48:dc:88:88:
                    26:f8:a1:ad:af:bb:07:42:26:be:b5:22:c8:44:46:
                    9f:7d:83:f9:e4:69:c0:03:69:de:a6:6e:e7:9b:31:
                    35:b8:3c:0e:14:db:0b:f9:5a:ad:d4:26:a9:02:96:
                    ab:74:a1:8a:4b:32:ff:2e:83:ab:2c:12:fd:67:82:
                    95:1f:fe:62:13:19:78:cc:91:12:0e:8c:5d:6a:41:
                    d8:15:f1:05:7a:f8:54:29:ff:75:b8:41:50:25:0f:
                    77:e7:6c:5b:33:83:84:08:84:1a:c0:df:64:ee:94:
                    d3:cf:26:38:53:28:70:2c:a2:c9:b9:22:87:62:60:
                    68:a7:49:55:cf:e5:9f:8b:bd:14:34:bb:8c:7b:fb:
                    d6:3e:fe:66:2e:35:c6:08:2a:6a:6a:f9:64:f4:ad:
                    bd:0e:dc:33:0d:a4:df:59:3b:20:ce:84:e7:5c:65:
                    6f:5d:44:7d:d5:18:fb:a3:3b:ae:0e:23:d5:2a:b5:
                    c7:e2:a0:80:36:f9:4e:08:2d:7f:3e:89:e5:94:d5:
                    78:fe:75:6c:98:82:b7:8b:c7:e0:88:57:ea:57:23:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:8A:B5:23:79:B7:83:61:A5:D0:1F:29:DB:CF:DC:26:AE:51:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ded33fc9-aae3-396c-820b-f5dedaf749e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:94:f8:c6:9f:f7:64:f5:c7:12:4a:46:f9:a4:be:e7:b0:da:
         30:11:4d:81:d6:4b:68:56:4e:4f:df:1b:8c:9c:d4:05:75:92:
         81:7c:dd:42:6d:bd:0d:05:39:44:cd:79:96:60:a7:90:ce:59:
         e9:bf:f4:6f:56:a3:4e:fb:e8:de:a7:1c:dd:e9:19:2e:73:2b:
         b1:25:86:96:36:39:ff:1c:eb:36:9b:23:72:ed:d4:a0:24:0a:
         42:71:36:40:21:69:48:da:ce:05:f8:bb:f7:56:31:84:9c:44:
         aa:ed:ef:90:c7:a0:60:17:17:b0:a2:1c:3f:5f:f9:1d:b2:e7:
         fa:61:b1:30:bc:01:75:56:c4:b0:1e:4c:6c:d4:0c:1c:90:ae:
         2b:e8:ba:84:87:0e:87:9e:65:30:d6:18:73:35:11:02:24:15:
         a6:b2:e6:9e:be:b8:30:6e:48:c9:87:4d:2f:bc:2f:57:89:fc:
         71:ee:bc:3e:0a:b6:c4:0a:2c:41:29:ad:75:7d:fc:15:5a:1b:
         2f:b0:5a:97:1e:4c:f6:44:73:2f:50:b1:61:ad:4d:46:e7:ff:
         22:6d:7b:39:3a:38:fa:ed:cd:07:12:55:25:33:7b:c2:4b:c7:
         3b:aa:9e:61:05:6d:65:18:d7:c5:a5:83:34:33:8e:d1:fd:40:
         cc:b5:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:31 2025 by rpki-client