Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9a069a0-5791-3a3d-8a36-1d291396903b.roa
File:                     e9a069a0-5791-3a3d-8a36-1d291396903b.roa (raw, json)
Hash identifier:          ymha1qqnHsii836thaUjzBgEXgBb6Yu0mMgFnNB4eBw=
Subject key identifier:   99:49:83:36:28:8D:D5:AD:2C:AD:54:B3:6D:45:76:2F:27:58:98:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A841243C322E76746E3D6B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9a069a0-5791-3a3d-8a36-1d291396903b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396543
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:43:c3:22:e7:67:46:e3:d6:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6d6d9971-7b06-4198-8abc-30f3f918be52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:36:8a:20:62:7d:90:f6:52:84:6f:dd:61:
                    23:87:cd:37:5c:65:17:34:18:eb:64:cf:4b:f3:01:
                    c3:f4:dc:2c:3b:41:5e:d4:92:cb:75:b9:2a:22:88:
                    99:fc:81:d7:c9:9c:1a:65:f5:ea:64:3b:16:2f:b1:
                    75:b1:91:44:86:cb:9a:99:48:0e:49:3f:14:81:92:
                    96:8e:e3:c3:d0:fe:f0:0a:db:25:a7:2d:e7:41:4b:
                    2c:4a:f2:37:02:7f:d9:04:bf:03:0b:17:6e:6a:8c:
                    4a:13:07:78:34:42:37:93:b5:9c:38:08:b8:2b:bb:
                    ea:54:df:e7:ad:d2:b5:f3:dc:e5:a3:64:91:f6:66:
                    1b:42:68:e5:ed:83:49:59:39:77:e9:d9:6f:27:60:
                    fd:a6:4a:b3:43:b4:32:80:0b:1c:98:ce:31:ce:32:
                    53:1a:7b:d3:85:1f:4c:50:1d:85:b5:11:8c:c9:44:
                    6b:e6:a1:0c:36:1b:4a:55:e1:b3:eb:bd:bc:40:be:
                    95:81:70:be:8f:3b:67:ab:44:e3:d3:c7:b3:7f:59:
                    d0:61:1a:46:59:b7:71:52:d9:93:98:3d:f0:90:47:
                    be:fa:ad:22:f3:37:0c:2f:7b:50:55:14:95:42:ac:
                    8f:1f:08:30:63:62:ac:dd:69:13:26:0a:ed:bb:4b:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:83:36:28:8D:D5:AD:2C:AD:54:B3:6D:45:76:2F:27:58:98:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9a069a0-5791-3a3d-8a36-1d291396903b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:93:b7:08:99:b5:56:8f:83:20:e3:21:94:26:ae:36:40:93:
         00:b7:9e:10:30:34:71:1e:08:71:c7:37:92:fe:19:38:a2:35:
         df:bf:79:d2:32:45:26:ab:2a:54:3c:36:c1:fb:4d:49:02:78:
         f7:c3:9e:0c:8e:cc:00:c5:09:ae:aa:0e:59:9e:da:8d:3c:4b:
         e7:a6:24:11:a8:46:d6:20:14:df:b1:f8:2b:1b:4e:79:7e:7d:
         3d:0c:f4:2a:82:6f:31:44:f9:7c:b5:2e:41:f1:69:37:2e:04:
         84:44:ea:ad:ac:7b:fb:c7:72:c2:49:de:f7:cf:a5:fc:73:43:
         f1:4b:54:7c:6a:de:8d:f9:ea:3f:55:2c:98:73:dd:7b:8d:68:
         af:d1:76:cd:4a:bf:68:a7:a7:03:09:f2:61:19:2e:06:af:f3:
         a0:52:01:40:95:88:8b:d3:28:39:f8:9f:b5:d3:90:be:46:9f:
         11:6b:97:42:8e:f0:2f:f8:78:ce:8c:3a:44:66:a2:cf:cf:8c:
         a8:7a:81:94:cc:b9:83:8c:e8:56:3b:08:ed:7b:4a:a7:19:60:
         70:31:14:ce:54:e9:59:62:a2:f5:96:41:62:9d:cc:7e:1a:bc:
         ab:63:fe:37:9a:7b:3e:14:60:d6:6b:63:c8:d4:12:f9:cc:97:
         46:8b:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:07 2025 by rpki-client