Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa
File:                     3657ce32-2ed6-3d85-8046-d42eee12cf33.roa (raw, json)
Hash identifier:          Ixcl3WwV4p0PrDGh3isusHnRHjGnN4bsCD//SJJpaNM=
Subject key identifier:   3F:66:B0:9A:2A:E9:6A:F9:2D:73:27:19:4E:6B:73:04:A0:BC:80:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE515EFCDA5AF8786D4340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396617
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:51:5e:fc:da:5a:f8:78:6d:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d056e330-7c5b-4620-88b1-2182d40a9ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:6e:16:54:57:f1:15:b0:05:1c:f8:58:b3:
                    44:d4:a4:44:fb:96:90:9f:da:02:ab:d2:47:e4:1a:
                    56:ef:8a:1e:e5:d9:3f:cd:3e:e1:49:c5:01:41:e7:
                    d0:0e:c2:75:d8:f8:a0:9f:a6:a4:18:b6:72:e4:e5:
                    36:5b:62:55:49:c1:a1:99:0e:5d:a7:dd:18:2d:28:
                    8a:cd:fe:95:f8:99:22:57:98:fb:81:e9:b5:74:d3:
                    7e:fe:32:5b:58:eb:c5:f5:c0:af:06:be:94:fa:4d:
                    11:51:5d:1c:dd:85:0e:d8:9d:5d:39:3b:d4:4a:4a:
                    04:ee:a4:b4:f8:b1:e5:97:6a:01:a4:3c:c0:e5:28:
                    ea:53:29:57:77:40:36:d6:09:38:a1:99:e4:4e:55:
                    f8:c1:24:46:d5:ac:69:5a:b8:59:4f:d0:f3:f3:09:
                    bd:49:55:0c:95:08:00:b7:42:0e:63:1d:ae:ff:63:
                    74:ec:10:0a:99:cc:8b:11:2c:9d:fa:c7:cc:82:68:
                    c7:13:4c:e0:50:2d:d9:2d:55:38:b2:a5:a3:52:a4:
                    b4:a7:9e:c5:2c:ee:64:37:57:a6:ca:38:b4:ed:c4:
                    a6:ea:c0:5c:5b:39:5d:7a:43:97:0b:09:ff:b2:2d:
                    34:f1:4a:ae:19:d5:58:1a:f5:e1:cf:59:90:32:0f:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:66:B0:9A:2A:E9:6A:F9:2D:73:27:19:4E:6B:73:04:A0:BC:80:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:86:5e:16:d9:e6:f2:e8:e4:57:28:25:7b:bc:0f:7b:bb:
         3b:ad:57:da:2a:ec:fe:39:47:c0:9f:43:d0:e6:17:28:c8:af:
         b3:87:06:41:b3:57:24:9c:09:fa:a6:92:8a:5c:04:18:f6:c5:
         b6:a5:a1:82:2f:28:f3:7d:6f:4b:77:bd:56:ca:d4:29:16:69:
         ea:76:06:70:67:e0:5b:05:81:2a:e6:30:36:41:2f:24:e2:59:
         fe:fc:79:7d:a8:0c:ba:3f:6d:b7:41:93:1c:f2:3a:94:4f:b5:
         c6:8c:26:6a:c2:64:6d:37:8c:9e:99:7f:aa:ee:9b:9c:66:d7:
         06:29:9a:b9:a3:27:e9:84:ed:93:ea:e0:f2:9a:cf:77:5a:13:
         66:66:8f:ff:23:65:4f:99:5a:1d:d2:cb:fd:a3:55:23:3c:df:
         ae:05:e9:fa:5b:f2:1b:0a:13:86:a4:11:90:01:24:73:20:30:
         a1:83:d6:0c:b7:01:6a:84:95:9f:2b:da:d7:32:35:3a:13:bb:
         bf:c1:9c:da:3f:1f:16:cd:ed:b4:18:f4:58:ba:a3:02:61:dc:
         22:35:cd:47:71:16:74:78:a4:71:de:af:4c:df:74:82:e7:e3:
         00:0a:76:0a:55:28:97:7e:8e:8e:6d:79:eb:61:ac:c9:35:bc:
         d3:da:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:37 2025 by rpki-client