Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9699bd-04c7-3c07-8746-05a68a0490ce.roa
File:                     fa9699bd-04c7-3c07-8746-05a68a0490ce.roa (raw, json)
Hash identifier:          N/FiwphWUknqT0LP2WMr+GzU+4PBq8+vzfrNPKxK+f8=
Subject key identifier:   62:F5:7C:D0:13:41:E9:A9:59:B7:D5:89:B3:7D:AC:32:C2:40:52:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4DCE7BBD71DE4704D71E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9699bd-04c7-3c07-8746-05a68a0490ce.roa
Signing time:             Tue 22 Jul 2025 12:41:14 +0000
ROA not before:           Tue 22 Jul 2025 12:41:14 +0000
ROA not after:            Mon 20 Oct 2025 12:41:14 +0000
asID:                     396694
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4d:ce:7b:bd:71:de:47:04:d7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:14 2025 GMT
            Not After : Oct 20 12:41:14 2025 GMT
        Subject: CN=807b6bf0-3266-4b2e-8694-f1b27c3ba400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:41:46:bc:5f:a6:59:1d:32:fa:d8:16:8d:5f:
                    ed:0e:a5:95:a5:56:47:87:6c:ad:83:cf:75:59:8c:
                    eb:a8:7d:3f:e5:e1:0f:9e:b2:79:c0:7b:a5:03:24:
                    39:53:90:ff:5b:0a:2a:25:02:08:f9:dc:a7:46:3a:
                    5d:06:cd:55:07:6e:28:ba:56:72:28:e3:9d:a1:e7:
                    55:37:36:0f:9d:46:47:e8:e5:ae:a1:d0:30:78:cf:
                    9e:28:6a:fe:1c:38:d6:90:1e:6c:90:28:d9:51:07:
                    7a:38:b8:1b:bd:e5:67:96:fc:63:52:b7:49:cd:8e:
                    e8:f8:f5:93:6a:65:3e:33:54:f0:b9:cb:33:4c:51:
                    92:a4:4c:1f:c3:9e:fa:16:83:cd:64:94:12:84:08:
                    94:29:9b:f4:d0:22:5a:51:98:aa:82:63:83:96:9c:
                    3f:2b:ad:af:c1:86:35:32:b3:07:28:70:c9:99:ef:
                    6d:4c:ab:8c:d5:db:9f:e4:af:a0:3b:98:b2:39:08:
                    51:28:6d:dd:25:ac:42:db:61:1c:a6:74:a0:3b:08:
                    02:d7:d5:77:75:84:6a:ab:43:3b:82:6f:8f:5e:f8:
                    bc:f4:65:28:31:0f:ad:29:31:b9:de:bf:8f:5e:81:
                    ff:a8:58:6c:9d:9a:c5:58:b4:86:cb:de:8d:b0:8e:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:7C:D0:13:41:E9:A9:59:B7:D5:89:B3:7D:AC:32:C2:40:52:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa9699bd-04c7-3c07-8746-05a68a0490ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:09:28:22:10:a7:31:55:21:de:27:f2:da:55:5d:e3:e0:
         81:e9:67:f6:bc:26:8a:33:35:8e:4f:bb:e7:fc:3e:fc:4c:dd:
         f9:7f:0d:bf:48:22:45:69:82:e6:cb:bf:7f:0b:b5:95:3f:cb:
         6e:36:2c:fa:f1:77:09:23:3c:03:f2:b7:31:2f:b1:80:0a:20:
         ed:ab:5e:2a:f2:9e:b4:d6:2b:a1:45:0e:52:62:54:b3:6a:9c:
         3f:da:c7:f8:7f:7f:64:66:83:d2:c0:cd:8c:36:1e:0e:6c:ee:
         30:3d:21:33:05:17:7a:60:5b:00:22:89:65:23:db:cf:16:84:
         58:ea:9a:25:1c:69:79:fc:3d:28:b3:79:14:42:2e:30:39:07:
         45:b8:26:0b:fc:79:e0:97:a2:f7:74:cc:e9:54:4f:68:a1:2f:
         61:ed:7b:50:e5:f2:18:9d:92:c8:09:2e:f3:06:53:59:d4:13:
         a5:21:09:1c:b0:68:0b:d6:94:22:03:01:fe:15:0a:6f:65:63:
         b4:16:1b:5d:e8:56:92:e0:9f:27:15:11:86:a4:7a:d1:49:52:
         20:8e:69:81:db:a8:ba:8c:ba:0e:81:d3:ac:3f:0d:8c:69:9d:
         f1:dd:e9:77:1c:c3:92:e2:df:70:bb:a8:24:dd:d7:11:c7:42:
         ce:08:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:37 2025 by rpki-client