Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/c5281e00-8f74-324e-a7c8-55eedfa9996a.roa
File:                     c5281e00-8f74-324e-a7c8-55eedfa9996a.roa (raw, json)
Hash identifier:          KZyU/qmw6Q/2ITjF4JRvOLKhNV9z0sq/9ebIONfMEtU=
Subject key identifier:   EE:31:52:77:40:82:C1:1A:8A:A5:0C:34:D5:C8:33:0F:1A:AE:93:89
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F4328584A9FFBAC785EA34E658339DB80
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/c5281e00-8f74-324e-a7c8-55eedfa9996a.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2001:19e8:282::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ac:78:5e:a3:4e:65:83:39:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=2d90fb26-e967-4f07-9820-81bb30e26109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:cc:9e:cf:3a:08:96:b3:d2:01:83:8f:a5:
                    44:d5:2f:ad:c6:3d:d9:94:90:dd:cf:06:91:b8:e1:
                    9e:74:58:f0:32:32:c7:53:f9:3d:62:10:81:a0:6d:
                    7d:0f:fa:68:05:c0:b3:50:16:cd:76:02:18:66:11:
                    d9:c4:f1:bd:92:36:b5:e4:f3:ea:8c:dd:10:f5:4c:
                    59:89:db:7c:d2:20:7d:8c:c9:86:1f:c9:de:77:b6:
                    83:65:fb:39:36:f0:b5:56:50:3f:a4:09:c8:4a:93:
                    05:4e:36:7f:fb:b2:f7:58:c1:55:50:28:5d:e4:fb:
                    b8:63:e7:bf:f7:ef:3f:e8:8b:a9:ba:53:d3:d4:63:
                    a4:2f:cb:e9:54:ed:2d:f5:0e:c6:e0:a0:0c:1f:70:
                    26:dc:66:1f:1d:9e:12:54:ba:00:46:e5:5c:e1:07:
                    99:11:93:d4:e8:cb:2c:59:3c:7f:97:84:e2:f2:82:
                    d5:cb:8f:d4:ea:9e:9c:70:31:7b:e5:a3:98:80:4c:
                    9d:fe:ea:64:57:e6:77:b4:85:0d:79:cf:8b:96:d9:
                    4d:95:d2:4f:b5:fc:0a:19:4e:55:40:43:2d:7c:af:
                    99:5c:19:ee:b1:60:ff:30:de:56:ac:65:05:5f:ea:
                    ac:cc:ac:85:c2:51:d1:95:eb:91:fe:56:bd:e8:17:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:52:77:40:82:C1:1A:8A:A5:0C:34:D5:C8:33:0F:1A:AE:93:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/c5281e00-8f74-324e-a7c8-55eedfa9996a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:282::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:00:85:09:98:90:68:b7:71:18:9d:99:ba:98:35:b6:7e:d0:
         69:84:eb:29:34:ac:9c:02:14:8a:a5:db:3c:90:eb:5b:dd:6b:
         32:b0:8d:40:6c:48:86:12:6b:b4:fb:78:ef:e2:ee:52:19:08:
         53:4d:c9:f2:ae:ba:34:77:b0:e3:9d:10:64:d4:60:05:53:eb:
         cc:cc:22:bc:69:ce:04:fe:e0:7f:16:7f:49:56:b8:d9:6f:39:
         ba:54:d8:a8:11:c1:76:f6:53:d4:a1:27:a5:69:5b:6b:a9:f3:
         71:e7:a1:8c:d5:5b:9d:f4:d4:98:9e:bd:32:45:45:59:33:5f:
         7c:ce:3b:92:60:54:0f:34:dd:a8:91:dc:da:17:ef:37:c7:3b:
         3f:21:aa:30:0c:9c:d8:33:7d:71:7a:71:4e:61:d8:75:fe:40:
         f9:1f:ac:b4:80:c1:53:71:77:02:b6:52:4b:7a:76:57:5b:5c:
         9a:63:14:dd:1e:29:76:5c:15:b7:b6:56:65:ec:ba:df:d6:04:
         75:39:18:3a:4a:21:9f:51:94:a5:4e:9e:0a:8d:22:c2:c2:86:
         7a:ed:72:f8:83:3a:8b:ab:c1:28:8a:62:74:5a:63:48:f0:c5:
         cc:3a:1b:a4:a5:7d:f0:b2:0e:78:f7:46:70:73:60:7c:31:c8:
         07:f2:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:34 2025 by rpki-client