Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa
File:                     eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa (raw, json)
Hash identifier:          3FBa/JgX4dHAeAYQLJf2vVLsmJfMX28KLy/v+f4HkoA=
Subject key identifier:   89:65:45:5D:F5:41:EB:45:80:87:37:0F:D0:DA:37:EF:75:55:F8:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C55D59DC10F8E44BE94C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa
Signing time:             Tue 22 Jul 2025 12:41:18 +0000
ROA not before:           Tue 22 Jul 2025 12:41:18 +0000
ROA not after:            Mon 20 Oct 2025 12:41:18 +0000
asID:                     396657
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:55:d5:9d:c1:0f:8e:44:be:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:18 2025 GMT
            Not After : Oct 20 12:41:18 2025 GMT
        Subject: CN=aa6121fb-0deb-4a58-a9d8-a1a352f18f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:06:67:02:08:ff:78:55:37:30:03:e6:fa:
                    f5:a3:2e:b9:ef:0d:6a:63:4b:2a:68:3e:04:2b:69:
                    92:36:fb:b0:71:b1:90:31:d5:83:d6:d5:41:b9:d1:
                    9b:b7:dd:91:2d:f1:61:46:dc:6d:6e:7c:74:b3:73:
                    7f:60:c8:44:9c:8a:46:70:95:57:a5:c2:d8:bf:48:
                    be:98:d5:32:04:e4:40:83:ae:8e:cf:6e:a5:ef:33:
                    5d:6c:d3:7c:0b:c3:f0:28:55:f3:2b:cb:75:21:f4:
                    ae:14:c5:41:93:80:cd:1e:86:75:60:38:fb:87:9b:
                    cb:05:09:6e:a0:1f:12:69:ec:fa:46:13:35:bd:2b:
                    e0:d5:b0:30:5f:42:17:1c:90:97:a6:20:99:95:41:
                    80:df:ae:d6:6e:fc:4f:64:db:2f:9b:91:a5:7d:7d:
                    93:13:e0:d2:50:72:4e:f0:cc:ab:61:ba:6c:2a:ae:
                    01:e2:39:3f:3f:c8:5d:98:cf:db:0e:cb:b2:d9:41:
                    0e:ba:b9:82:18:50:45:45:8b:7d:54:96:6b:c8:af:
                    9a:3d:da:fb:dd:b7:9c:94:16:73:cc:ad:02:38:75:
                    1e:de:31:06:a0:a8:34:54:6d:c6:fe:a8:1e:20:1d:
                    07:f3:91:9a:08:07:60:d2:ff:1c:43:6c:e3:47:49:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:45:5D:F5:41:EB:45:80:87:37:0F:D0:DA:37:EF:75:55:F8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:bf:59:f9:2d:2b:ca:73:63:bd:b5:8b:ff:a9:76:9b:07:
         a0:4a:e6:18:9f:c4:09:e1:60:74:5c:1f:6f:b8:6d:f7:57:ea:
         ff:29:f0:d6:62:d1:2c:7d:37:90:4b:e1:d4:a3:65:af:f6:2d:
         bc:76:9c:69:ac:3b:13:0c:89:60:b9:6f:fa:7c:09:b7:c3:c4:
         72:ae:0a:38:fe:00:c5:11:97:22:f1:5a:6d:3f:e2:ab:f7:80:
         26:a5:b6:60:bf:cf:ce:90:1f:86:93:c0:3e:01:4f:c5:11:7e:
         4c:5c:f9:24:9a:77:73:22:bb:ad:cf:ea:dd:52:97:11:24:fc:
         ed:1d:58:a8:bd:c9:f8:92:ef:26:32:78:10:bc:b0:78:33:c3:
         83:af:48:e7:57:13:89:c0:dd:01:bc:2a:24:28:c7:c5:1b:c1:
         b3:2d:af:04:52:82:30:8a:3a:79:b7:f6:e3:b4:a3:65:93:d5:
         06:71:f4:36:6c:7e:b8:df:45:f2:6b:42:2b:f5:47:2a:bb:a1:
         81:27:98:86:66:ac:1f:49:6e:0a:06:4b:24:82:37:3d:b4:9e:
         f9:50:ce:54:0a:a6:f5:d4:8f:78:3c:d1:29:4c:cc:59:52:a8:
         b8:f4:a3:76:8e:95:99:96:d2:06:91:2e:95:3f:2e:09:7e:1a:
         22:58:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:34 2025 by rpki-client