Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa
File:                     f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa (raw, json)
Hash identifier:          3ed7Xp54SA7EgAbyyuXKC8LXgp+hpCT0eKfqwXkU9EA=
Subject key identifier:   5E:B3:2A:33:7A:A9:DB:75:AA:AE:ED:C1:BC:C1:73:FA:0F:14:E6:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A841256E02C13DF17630BF400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     397206
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:56:e0:2c:13:df:17:63:0b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d89c1791-0509-4819-ae67-1522f31689c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fe:c3:b1:91:73:44:49:b2:fb:e6:b1:58:53:
                    12:75:d1:0c:e5:a8:da:38:b7:4f:25:f1:07:1c:18:
                    a2:e8:a0:c2:40:db:ed:13:f9:36:1d:11:cd:f6:79:
                    bb:18:03:f5:33:e7:5e:e8:21:fc:f5:29:4f:7b:a5:
                    82:72:32:fc:8b:3f:3a:54:3d:7a:7d:51:e2:bc:61:
                    ab:a0:49:06:e6:48:34:78:c7:08:9c:11:59:5b:41:
                    5d:07:dd:92:7d:71:15:9b:b4:92:fe:94:31:89:ad:
                    10:5f:20:97:d5:d0:43:37:37:91:cf:ad:91:4b:f4:
                    44:d5:6e:92:88:f0:84:54:40:6a:24:04:11:5f:40:
                    de:14:74:73:88:5e:08:e4:69:ef:19:97:cf:1e:97:
                    0b:73:9a:8a:93:57:77:bc:f1:25:22:9f:68:0a:de:
                    76:1d:21:bb:24:87:e0:36:0e:25:9d:4a:d0:fc:e6:
                    14:89:b1:ca:14:d8:01:69:42:ba:01:c9:17:05:84:
                    9f:ad:70:80:03:dd:42:a9:02:fa:e3:3a:f2:36:06:
                    6d:d4:b8:c7:a1:ad:2b:54:e4:9c:6b:72:42:be:7b:
                    02:61:1b:ca:90:66:39:7a:4d:d6:53:4c:ff:83:6f:
                    09:4d:23:7b:70:4c:65:e2:e2:cb:e6:4d:03:c7:9f:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:2A:33:7A:A9:DB:75:AA:AE:ED:C1:BC:C1:73:FA:0F:14:E6:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:03:a9:11:be:2c:57:31:73:69:d8:bb:9f:20:db:7c:d1:
         74:41:dc:5e:02:34:da:36:7b:64:24:d6:0e:22:5b:91:c6:d4:
         92:93:41:f0:3e:64:bf:1b:4e:b2:96:82:63:8e:77:9c:48:b1:
         53:a6:3a:be:96:ac:94:77:c4:03:2b:fc:ef:a8:66:5b:32:62:
         9c:cf:1d:17:75:f4:dd:9b:19:b7:da:7f:e0:5d:fc:ed:04:1f:
         56:2e:c9:43:dd:88:17:ca:eb:ef:5a:b9:dd:56:ae:e7:56:87:
         77:7e:65:d2:31:ab:f3:85:6f:03:df:f7:da:4a:dc:5e:01:7d:
         43:3e:18:c9:f8:9e:3a:b1:5f:dd:e3:e3:49:94:82:bc:da:57:
         0e:72:ff:2a:1e:29:7b:df:d0:c9:ef:04:a1:77:f9:cb:c6:84:
         f0:f9:05:4c:9b:4a:4b:62:49:51:b0:22:97:41:f3:c8:24:b4:
         3b:19:73:5f:47:6a:72:e0:1e:81:07:a3:e9:6f:84:86:e8:c7:
         32:fb:cd:0d:e2:9f:51:62:cf:21:c2:92:37:19:0e:62:99:58:
         b6:dd:98:10:93:cd:21:7a:fa:97:80:30:9a:ee:4d:89:6e:b3:
         38:76:04:f0:65:d6:2e:40:eb:0e:4b:e8:ea:f2:10:e5:6c:bb:
         7e:ef:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:24 2025 by rpki-client