Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ee569b9-c890-3269-9251-2f18356f7929.roa
File:                     3ee569b9-c890-3269-9251-2f18356f7929.roa (raw, json)
Hash identifier:          XMIpcsDTdM5lkeHKOTG8CqjPUY1o5m9uKNfJ/fBkFPw=
Subject key identifier:   99:8D:C6:EE:AE:1D:DC:73:6C:86:31:89:AB:20:A6:88:95:D0:19:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE5C358200EBAE6BAE5C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ee569b9-c890-3269-9251-2f18356f7929.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396606
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:5c:35:82:00:eb:ae:6b:ae:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=19314fda-4902-4a33-aaf4-938996386f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:3f:75:9d:b7:90:60:da:ab:1d:31:6d:81:
                    e6:cc:d3:53:28:b4:d1:86:18:6c:a2:34:dd:62:68:
                    1d:6b:b6:19:9e:10:7b:ed:88:5a:37:4a:87:67:0b:
                    a8:dc:9a:fb:ae:e0:9f:ad:68:2b:c4:2f:22:16:0a:
                    9d:80:4a:cf:d0:30:d0:02:16:a4:c7:e3:0b:6d:20:
                    67:dc:4b:19:f0:20:65:3e:46:c8:4d:d3:8c:bc:58:
                    95:23:8a:f4:66:e8:28:2b:63:9a:eb:d7:61:63:58:
                    92:01:20:e5:16:15:db:7a:c1:f8:ce:97:dc:33:d6:
                    34:7a:64:7d:75:d8:3e:72:fc:73:25:bc:09:91:70:
                    27:69:66:14:12:1c:39:b7:bb:c4:c0:22:8e:f4:40:
                    74:f8:bf:20:48:2f:75:fd:9d:54:60:62:39:64:d2:
                    58:cc:ca:eb:61:ad:d1:5f:69:4c:45:82:60:dc:6b:
                    be:ab:2f:98:1f:43:6b:0a:f7:c6:7f:cc:9e:90:eb:
                    ac:10:fb:de:d9:ac:84:62:f4:2d:69:9a:87:4c:99:
                    bb:93:49:5d:a5:92:71:a8:a8:6c:79:f0:26:18:2f:
                    57:bf:63:fe:22:3c:f3:93:ed:97:cc:c9:ab:1e:3b:
                    43:b8:ae:6d:c3:bb:2b:42:b5:72:7f:17:73:40:fd:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8D:C6:EE:AE:1D:DC:73:6C:86:31:89:AB:20:A6:88:95:D0:19:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ee569b9-c890-3269-9251-2f18356f7929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:2c:c9:85:9d:29:9f:2e:62:3a:11:72:66:a7:a3:7c:4d:
         42:96:cc:ed:ee:8b:44:6e:c0:04:98:07:d3:ff:eb:81:62:b9:
         28:f4:35:b3:95:2d:15:12:e5:df:91:3e:fb:c8:05:b8:a5:ff:
         7d:cc:ac:d8:53:cd:5f:f9:53:60:56:30:a8:d6:c0:12:ec:24:
         0c:bf:9f:12:ef:be:30:71:6a:96:6e:d2:d7:6e:81:53:df:9d:
         4c:29:b6:62:10:48:77:b4:0f:ae:9f:68:cb:c1:7d:4e:e3:44:
         79:7e:d3:a7:4f:14:f4:9b:bf:9b:70:4c:85:fd:cb:9b:4d:cc:
         dd:e3:17:5d:31:19:ba:c6:aa:aa:f7:c3:fa:fa:50:8f:06:ed:
         ca:92:10:d1:95:5f:41:ea:15:95:ae:52:91:f6:c3:00:c0:27:
         2c:73:73:72:f5:4a:72:d3:c2:1b:17:73:5d:84:09:e2:b4:2a:
         bb:b2:bc:78:c8:4f:20:3e:6e:f4:4a:d0:01:59:7f:38:b7:96:
         1d:2b:91:bb:7f:16:ed:7b:64:73:a8:73:5c:02:17:70:d2:9f:
         a7:42:da:52:b8:47:d2:0b:a5:ca:b5:f9:3f:dd:37:69:2a:c6:
         cf:a4:c9:b9:e3:e4:9e:38:6a:de:a1:39:6c:7a:29:f6:4b:f7:
         a4:21:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:10 2025 by rpki-client