Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f808521-7888-3371-93a4-cd0a519e34e4.roa
File:                     0f808521-7888-3371-93a4-cd0a519e34e4.roa (raw, json)
Hash identifier:          j8ROXRK3TqWlLuuJTdxo9e5k3001WrlAUXXb/nDEnDw=
Subject key identifier:   6D:12:38:C5:DE:07:26:F3:D6:D3:CE:C6:36:91:24:BF:4F:22:8E:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCCC9033F377F62EBE9B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f808521-7888-3371-93a4-cd0a519e34e4.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396560
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:cc:90:33:f3:77:f6:2e:be:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=c031bf25-7eb5-4dd2-a1ac-1a53e6312dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:3f:07:75:b7:eb:39:c6:95:8b:14:03:f2:
                    5e:4a:c8:c5:4e:e7:c8:3e:26:6f:ef:b8:d5:45:35:
                    79:de:03:82:73:e2:c6:70:af:cd:74:fb:ce:98:4d:
                    17:f5:9b:3f:f9:43:80:f7:65:b3:1c:87:18:0e:e9:
                    0b:8b:c4:64:07:81:07:55:d3:2e:e2:30:19:a4:16:
                    84:e3:71:5c:d8:04:a9:1a:1f:9d:20:87:bc:6c:8f:
                    a8:9a:11:74:ce:55:d7:0e:7b:bd:f5:95:2a:be:02:
                    b9:f5:f7:3e:ec:ae:71:af:56:4f:75:da:7a:3f:07:
                    fa:da:67:f0:81:3a:c1:8e:55:fa:b2:48:10:ab:b6:
                    75:c1:ca:46:6a:fb:4a:dd:d7:0f:94:80:d7:53:b6:
                    0a:f0:ba:86:97:7e:31:e6:7c:99:83:cd:0d:08:85:
                    44:29:9e:3a:9c:4b:f2:a9:96:e1:f3:3d:0d:bc:85:
                    b6:b3:50:5e:53:a3:70:29:2f:c6:14:bb:14:bc:1a:
                    3b:86:42:e7:28:27:50:22:2d:f7:86:14:c8:a8:c7:
                    c6:7b:d0:94:96:5f:df:e3:0f:03:ac:67:0e:23:3f:
                    2b:65:25:e3:fb:86:e1:4f:63:59:f2:4d:17:21:49:
                    e7:03:f2:83:65:cf:18:11:ed:e7:49:cf:98:09:c1:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:38:C5:DE:07:26:F3:D6:D3:CE:C6:36:91:24:BF:4F:22:8E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f808521-7888-3371-93a4-cd0a519e34e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:18:58:50:0f:f3:56:1f:3c:9b:86:aa:e3:29:70:6d:2f:
         84:cd:7e:31:dd:95:0d:f0:fa:88:cd:35:7c:b3:f6:b3:82:85:
         d6:d6:c0:3b:d5:5c:c5:f6:1f:4c:3b:2c:65:63:74:65:3f:39:
         e0:5c:b9:df:54:59:19:d0:cd:4c:78:a5:88:a4:df:5a:46:87:
         da:33:d3:8b:f5:4a:ab:15:57:2f:58:05:26:1d:0e:97:e0:46:
         a7:7a:7d:34:85:ef:69:71:b1:1f:cb:30:0f:b4:d5:27:54:99:
         28:2c:15:b6:84:8d:00:7d:63:89:83:8d:c6:90:65:95:ad:36:
         60:1b:ca:a0:69:cd:d5:a3:6d:a8:71:f6:eb:4e:89:27:3d:c0:
         f8:46:64:86:d1:bd:11:40:b4:2f:25:c2:22:ea:32:a3:06:cc:
         6c:91:16:15:c3:c9:5b:77:9e:29:38:f8:fa:72:13:eb:4a:c4:
         e6:4b:ec:2d:88:80:bf:b2:1d:8c:6e:b9:15:c2:e2:59:b2:03:
         22:41:4c:b6:82:09:86:9f:dd:3a:0a:70:07:a6:34:d9:03:8a:
         3c:eb:1b:8a:ac:b7:41:1b:43:a7:84:86:e2:29:0a:5d:68:43:
         03:19:a4:f0:77:0c:29:26:d5:8a:ec:50:d9:88:bc:7f:bb:ae:
         44:e2:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:42 2025 by rpki-client