Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa
File:                     27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa (raw, json)
Hash identifier:          lojGSaD1vp5yJifb9PQdJitQAN67MrbQdccCG/8X+18=
Subject key identifier:   EC:A1:C7:FB:2D:59:3A:24:E4:A3:09:7A:40:86:8A:C3:C5:3B:71:BF
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F4328584A5765CA80F55B86166618CD20
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     19381
IP address blocks:        2605:c400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ca:80:f5:5b:86:16:66:18:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=a69f2fcc-1e65-431d-aef8-0b12cd05142d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:36:61:b9:88:35:59:ea:0b:77:30:ec:6e:
                    33:fd:23:18:e9:fd:a2:89:70:54:b5:cf:f1:5f:5a:
                    91:6c:bc:01:5c:a8:17:28:af:f9:60:69:a6:07:9a:
                    2a:fe:ab:f4:48:44:5b:60:b1:9e:bf:7e:fd:d9:07:
                    bf:f9:8d:d1:f9:cf:80:83:28:4f:9a:a1:11:94:b6:
                    7b:2c:20:82:45:42:44:de:fe:b6:a9:10:28:ae:34:
                    de:b4:b9:27:4f:33:4e:83:ea:c7:00:b9:79:a3:c9:
                    cf:df:d1:ad:bc:fc:c3:ba:8b:c0:eb:59:48:0e:30:
                    9a:29:ee:d5:15:19:b2:ee:79:5c:29:bf:78:3e:48:
                    00:51:1d:06:a8:dc:b8:06:7d:4f:b9:ad:1c:8e:0e:
                    ae:97:8d:a9:6c:cc:18:97:bf:74:e8:5e:4d:ef:90:
                    58:99:24:b0:4d:fc:7c:55:d6:19:21:cf:28:5b:6d:
                    cc:e4:f7:c3:12:a2:eb:4a:13:47:24:11:4f:2e:b9:
                    27:5b:c9:6b:a8:12:b0:5d:e0:24:ac:ef:17:7b:79:
                    00:f5:d4:fa:b9:f4:3a:e2:ef:eb:4e:e0:d6:f7:36:
                    f3:29:7c:0e:e1:a4:09:20:12:64:89:da:8f:db:46:
                    20:ce:c4:77:ff:41:7d:4d:c6:21:fd:40:b3:8e:d2:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:C7:FB:2D:59:3A:24:E4:A3:09:7A:40:86:8A:C3:C5:3B:71:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/27e4bbfc-6011-3f9a-8498-9ec9e7d95f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:58:c3:c7:a6:5c:9d:43:f7:76:2c:91:85:d7:4f:ae:6c:
         57:f1:4c:2e:39:74:90:d9:5e:2a:ea:1b:f3:73:91:d0:a3:67:
         ee:53:2e:f8:2b:e9:1c:80:89:e0:81:f9:58:b2:13:7b:8b:1c:
         a3:9b:9f:6a:95:1b:ae:f7:69:0f:7b:53:f5:d1:63:ed:b7:43:
         17:a2:a7:e8:9f:7d:44:0a:ab:a1:73:f6:92:13:b1:1c:7c:2d:
         bf:37:b4:08:66:a6:5a:85:18:c8:c7:cc:aa:1a:3b:07:4d:4a:
         06:80:68:a5:83:c9:1d:d9:a0:3f:f9:ea:c1:c2:da:6b:46:94:
         fe:64:31:5c:41:6d:e3:b4:66:13:f5:a5:50:5a:4c:b4:25:eb:
         4e:a2:66:3c:ee:65:4b:07:09:93:69:a4:84:97:2b:a7:5c:9f:
         4f:c8:52:a8:ef:95:69:23:fc:50:13:be:d1:2d:09:94:ae:33:
         d8:e0:89:2a:40:4d:c6:ec:c0:ea:62:c8:44:a9:1e:ba:4f:32:
         78:c7:14:95:e0:8a:0f:d0:03:5d:17:40:01:85:12:58:11:4e:
         86:d6:5d:01:29:9e:c7:72:ba:47:7a:ab:26:72:10:e8:56:40:
         1d:c9:0e:02:5a:aa:3d:f2:4c:e5:1f:8f:35:7a:ec:e5:6a:ab:
         26:21:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:07 2025 by rpki-client