Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f57cca7-1239-3f66-ba99-07aa2896de21.roa
File:                     1f57cca7-1239-3f66-ba99-07aa2896de21.roa (raw, json)
Hash identifier:          0m40LDvyCTIFhMHiIWLJKza/FqGzZCQgah+vGwRUQRY=
Subject key identifier:   BA:4F:89:AF:E0:4E:CC:28:DC:31:91:DE:8F:AE:2E:BA:87:20:FE:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD56FA11BF2E5A6EB4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f57cca7-1239-3f66-ba99-07aa2896de21.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397199
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d5:6f:a1:1b:f2:e5:a6:eb:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=77f332db-f34c-4608-8b89-c4ac7012f171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:fe:7b:43:5e:05:49:b8:d1:a2:c4:45:d4:
                    e5:0c:9d:cc:44:66:77:dc:98:51:96:cb:cb:23:4f:
                    ec:06:62:e0:2d:ab:fd:d4:e0:40:95:a2:d9:e0:b5:
                    80:94:80:92:35:33:4f:64:e1:2b:bb:64:64:36:1b:
                    63:f5:1b:13:56:d1:04:82:38:07:ab:97:f6:df:90:
                    36:98:95:ff:d6:9c:58:ab:8c:74:84:9c:4b:50:9e:
                    93:3e:32:f2:7e:74:e6:98:04:1a:6f:c6:c4:e2:a7:
                    a1:32:74:da:f7:cd:4a:9a:b7:fe:b3:cd:a9:0b:26:
                    35:2e:85:8d:1e:05:bc:01:cb:c2:99:82:cf:1a:51:
                    e1:cc:12:8b:75:e0:d5:19:6b:a2:24:f5:55:9b:27:
                    06:ab:aa:9c:29:20:af:da:a0:74:b7:e9:e8:b0:93:
                    54:9b:b5:a3:d9:86:b8:4d:73:ec:35:dc:83:89:be:
                    b5:ca:82:7d:7d:18:92:a6:07:c5:68:05:ed:49:05:
                    75:d1:dd:f5:ef:fb:37:7b:80:78:ed:58:72:e9:af:
                    1d:9e:b0:3a:61:b6:63:61:59:5e:f0:c8:06:56:34:
                    7a:a5:08:ae:55:38:b0:13:5a:10:9f:73:7c:ab:da:
                    d2:50:c9:45:4a:45:dd:e4:0b:86:2a:a4:9a:00:df:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:89:AF:E0:4E:CC:28:DC:31:91:DE:8F:AE:2E:BA:87:20:FE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f57cca7-1239-3f66-ba99-07aa2896de21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:96:ad:44:96:32:78:89:84:40:09:97:ef:7f:62:da:44:af:
         b2:73:36:e0:0b:84:3c:73:52:4d:8b:98:26:ae:27:3e:83:06:
         fe:ad:b8:e9:17:86:67:2b:fb:2a:b8:f9:16:4c:d9:08:21:18:
         c4:3c:16:ba:3d:4b:43:d0:85:e4:d4:4e:ff:70:92:3c:94:86:
         01:a5:38:16:12:42:bb:7a:3a:ae:bf:26:08:90:9f:78:1e:88:
         ba:85:a8:98:7a:79:e3:56:e6:30:a4:6d:63:c5:7f:dd:3f:2b:
         33:be:77:35:05:fc:c2:ba:97:4b:66:ac:94:cd:b7:99:8e:a0:
         7c:84:a8:01:2d:da:7d:da:73:62:6d:bf:61:08:98:27:71:97:
         3c:76:a0:7b:a0:72:7b:26:91:a9:52:61:94:37:8c:f0:d9:8e:
         cf:2c:b8:12:c3:bd:74:9c:79:78:e7:ba:20:7e:b4:8a:98:d7:
         09:5f:17:a8:d9:62:7d:f2:83:cd:be:ed:e7:fd:c9:63:0e:f1:
         9e:00:44:d8:a2:40:cf:a5:9b:77:f2:06:42:4c:cb:59:31:f7:
         5c:71:68:cf:a1:ad:fb:e8:77:b2:37:eb:ba:6b:88:9b:f1:ac:
         33:f1:4f:83:7e:57:c7:81:d9:bc:0b:db:13:b8:54:68:aa:7a:
         40:e3:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:27 2025 by rpki-client