Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa
File:                     0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa (raw, json)
Hash identifier:          eHSRHKIn0wbXlxuX6YkvyVOQ7szZQn5EF/z63BsYxMk=
Subject key identifier:   75:E6:31:E2:1C:23:C1:25:DF:AD:6F:02:9F:67:C0:FA:67:FC:7F:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CC8D871CCFFA45D28F1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     397197
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8d:87:1c:cf:fa:45:d2:8f:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a29c1fe0-e440-45a6-9743-c8a31f335796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a7:89:98:05:70:96:b2:a3:6b:ca:1c:fa:ae:
                    c3:d3:41:b6:e2:d1:a4:76:87:5e:36:bb:13:e5:6f:
                    1e:74:05:32:e9:be:a1:c0:65:27:57:9f:99:c8:dc:
                    d9:df:17:2f:b6:d8:24:d1:3a:3f:1f:56:5f:a7:da:
                    8c:f6:de:a6:48:94:3f:90:9d:e7:b3:91:2c:10:c8:
                    09:c8:4c:47:3b:ea:52:62:03:85:8e:04:38:0e:00:
                    c5:2f:75:6c:2f:0f:20:90:6f:fb:7d:f4:8c:67:44:
                    b0:7a:47:6a:53:66:aa:29:97:66:5c:15:c7:25:15:
                    ae:38:bb:cf:2f:95:bd:69:f6:ea:1d:b1:87:26:7c:
                    05:69:62:37:0f:4e:d7:89:69:a9:f1:a9:38:e1:f4:
                    60:96:bd:66:3f:6f:20:c8:57:b8:d7:9e:0e:89:cf:
                    e2:b2:16:84:2b:80:ed:0a:a1:0f:75:9e:3b:08:43:
                    e6:47:97:50:fd:07:7e:eb:99:b1:4f:6e:55:8a:64:
                    4d:4d:1c:7f:54:63:ab:a8:89:70:cf:f4:f7:40:ae:
                    fd:81:19:be:b3:88:00:a4:93:01:bb:82:eb:cb:d4:
                    5c:d7:fe:a2:b0:60:79:ee:4e:c9:fe:ab:ba:0a:8a:
                    49:c1:b3:a3:f0:08:ad:22:c1:7f:d8:a9:bf:1d:ca:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:31:E2:1C:23:C1:25:DF:AD:6F:02:9F:67:C0:FA:67:FC:7F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:5e:18:45:05:e4:37:dc:38:a7:bf:66:57:87:0f:f1:c4:
         bb:0e:7d:57:46:1f:5e:56:21:33:87:35:bd:76:d8:c0:29:f3:
         b5:da:5f:1f:f1:fc:3f:c4:cf:d1:70:81:98:57:f8:94:d0:32:
         85:bb:0b:df:e4:3f:dd:e0:1f:aa:f7:b8:53:b1:b7:d4:54:c6:
         46:e0:2b:0b:97:96:85:c6:9e:04:2e:de:cf:f0:09:67:10:b5:
         cb:7c:0f:2a:7a:4c:3c:28:98:bd:d7:fe:21:c4:bf:db:70:78:
         05:db:9d:34:7b:9f:53:d9:60:f9:18:32:3b:cd:89:23:46:7e:
         c4:60:43:25:5e:24:7a:2c:ec:01:98:93:1a:da:f3:80:b2:f3:
         bc:59:41:51:cd:5b:d9:40:f0:89:f0:b2:60:3d:e0:d2:5e:66:
         b7:2e:b5:f1:a3:2a:c9:c3:76:8f:66:a4:6f:54:a4:da:3e:7c:
         45:d1:bc:6d:b2:20:9c:da:55:db:30:61:53:3e:d5:32:9b:fa:
         6b:5b:90:38:37:46:e6:4f:4f:1b:70:73:d8:31:e7:93:ee:a0:
         96:da:f6:b3:4d:43:e4:6f:08:1e:b9:4e:0d:c1:e1:be:47:47:
         89:ea:99:ae:56:32:2e:92:bc:55:f7:2c:8c:d9:85:c2:77:c1:
         cc:f7:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:36 2025 by rpki-client