Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa
File:                     23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa (raw, json)
Hash identifier:          5c4QK2RvHGMoHnNlb3j+5HRD7ma3ah/BoxwDIFi+MRQ=
Subject key identifier:   81:26:C9:D1:27:E9:44:72:00:59:D6:2B:C8:C2:48:3A:B4:86:40:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE47F66F1D8869BCD05010
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396614
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:47:f6:6f:1d:88:69:bc:d0:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cdf613ad-4db2-45ab-bc07-9f7af88991a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:28:3b:1e:81:9a:6c:75:07:33:fd:28:b9:
                    63:e9:8d:73:ff:24:71:8c:4f:0d:78:5a:d8:23:fd:
                    35:08:07:ab:8c:ea:ec:f7:44:a8:01:9f:59:ae:c4:
                    cd:7e:6e:91:bb:b5:0e:92:2c:36:44:31:6c:fe:83:
                    67:62:5b:49:01:04:c5:50:49:75:ba:0e:ec:90:be:
                    32:d5:f5:e4:88:f1:bf:5b:39:33:f2:ab:0c:a1:e8:
                    74:5c:92:b6:1b:a6:f8:97:f3:c7:b5:50:ad:89:e8:
                    2a:50:01:72:2b:54:06:ed:37:db:9a:bf:b7:3f:57:
                    da:16:79:66:b9:f3:4e:8b:56:fc:3f:a6:11:da:cb:
                    4e:dc:ce:d8:78:24:f7:c7:8a:74:b9:ee:5a:72:8f:
                    b6:bd:c2:cb:da:ee:66:dd:ba:ed:3d:43:18:57:12:
                    fd:67:8a:b8:f8:18:18:07:06:45:8a:c4:18:bd:5e:
                    f1:01:87:c0:f1:2e:ee:3b:ff:a9:f1:e4:bb:8c:b9:
                    93:51:71:12:18:d6:79:57:c4:91:08:cc:7b:43:8a:
                    e8:71:86:85:70:e9:df:fc:30:93:3d:06:1f:65:d4:
                    d3:9e:38:a1:06:91:79:d0:28:d1:3e:b0:ea:97:d6:
                    24:3e:92:2f:64:63:6b:21:3e:e1:50:99:a6:7a:e6:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:C9:D1:27:E9:44:72:00:59:D6:2B:C8:C2:48:3A:B4:86:40:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23f15fc5-0ecc-32ca-9c51-95c8102b1fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d5:a3:3b:71:30:7d:06:76:34:84:41:10:c7:02:9a:72:a6:
         cb:13:d1:94:90:72:17:0a:96:09:12:43:7f:8a:4b:1a:3f:41:
         3c:9c:d7:35:42:dd:ae:a2:b0:ce:cc:bc:8f:1b:38:de:75:7e:
         c5:0e:1b:00:13:d7:ee:83:c9:35:e1:ab:14:10:7b:a0:8b:00:
         59:23:a6:36:d0:78:b2:6f:f1:56:c1:9b:98:6e:8d:40:00:70:
         80:21:5d:37:2c:67:40:d8:17:46:96:2e:8e:d4:fa:c0:85:5a:
         dd:0c:2d:05:94:84:1d:81:29:b8:23:3d:3c:9d:a1:6a:c8:ed:
         45:29:2a:ab:d9:a1:3a:5d:33:d6:b5:2e:0d:22:b9:a1:12:a8:
         46:b9:88:45:8e:26:01:e9:d9:86:09:3c:7d:63:d8:4f:06:ac:
         9d:7c:74:9a:e4:fa:68:bc:db:ce:25:0c:b4:a7:d0:93:18:55:
         e6:db:cb:ee:f8:12:00:2e:df:45:42:39:59:cf:dc:f0:a2:af:
         85:e4:aa:cb:ad:38:43:d9:ad:ac:43:cc:a3:b4:3a:59:21:dd:
         66:e3:a0:a5:a3:b4:3e:6b:52:cc:c7:ca:d8:6e:cd:a7:49:8f:
         9e:9f:f2:6d:a1:51:f3:29:db:ce:59:42:88:68:0a:d7:eb:66:
         34:5c:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:23 2025 by rpki-client