Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa
File:                     5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa (raw, json)
Hash identifier:          WaJYDf7KpL9pFJjkvSsaKb1lYGJVJIISlrQTpE/OLcw=
Subject key identifier:   62:29:E3:9A:6B:7D:80:35:C5:60:FF:53:F6:AC:F5:6B:A5:3D:33:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE5EE8AE777DF13C4FDC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396585
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:5e:e8:ae:77:7d:f1:3c:4f:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d9758e1-4ab0-4e15-9ae1-d5d79cfdba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:1a:56:71:f0:a1:b7:2b:42:70:ea:1c:c2:
                    94:6f:17:10:46:c4:69:99:e0:54:60:13:01:de:d0:
                    3c:e8:54:80:35:56:01:90:eb:19:ea:fe:a6:a2:5f:
                    da:33:ab:09:fb:15:bf:0a:af:d5:36:df:48:01:c8:
                    26:7b:a4:aa:8b:eb:b3:81:89:ce:b8:01:c4:54:c4:
                    29:66:08:9d:ff:a8:74:38:d1:6e:fa:e6:f3:16:b6:
                    87:ea:a2:75:69:4b:af:18:19:03:4e:3d:46:5d:52:
                    c3:47:69:a5:de:5c:2b:89:b7:f7:de:3f:45:b1:9c:
                    d7:b9:c3:80:cb:f7:cb:3c:2a:77:24:7d:b2:dc:7f:
                    df:f4:86:bd:5f:22:f6:46:c9:99:86:91:bf:37:69:
                    f9:fb:92:29:a0:7d:03:37:a3:3a:54:55:c2:56:ac:
                    b8:a1:06:fb:f7:b4:90:95:a8:5b:84:46:95:6b:e7:
                    64:b9:fd:82:c9:51:35:ff:37:cf:90:5b:3d:52:b9:
                    6f:2e:65:f7:eb:11:9f:72:d5:14:22:cf:1d:9b:d3:
                    6d:bf:1a:1e:48:ff:ec:f8:e8:77:a5:1e:37:e8:7e:
                    d4:ca:49:4f:ba:8d:cb:d0:3f:81:5b:4a:57:5b:fd:
                    cd:2c:0c:47:92:fb:63:49:3f:15:72:8b:22:0a:ba:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:E3:9A:6B:7D:80:35:C5:60:FF:53:F6:AC:F5:6B:A5:3D:33:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5705a03a-d42f-387d-a7f6-0dd9bde581bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:1b:b7:9d:d3:a6:12:1b:35:7b:34:a2:61:41:e8:b3:a6:
         27:4d:e3:b1:76:ff:22:88:2c:1d:b0:44:ca:58:9d:31:4b:9b:
         63:1d:2b:f8:bc:df:dc:0f:8a:59:86:dc:26:fc:1d:29:55:7c:
         58:8e:04:9a:10:9f:02:d0:1d:4b:c8:5d:92:53:33:0f:45:d2:
         c7:75:61:0e:7e:ee:c0:05:56:66:87:76:7b:be:d6:49:5f:28:
         33:c7:42:51:0b:98:5d:51:53:d0:66:4a:b3:16:08:70:21:fe:
         fd:e7:77:27:a4:35:15:3f:70:49:99:29:ea:18:08:4d:81:0e:
         97:70:fc:ef:bf:9e:0e:d1:eb:f9:ad:f8:b5:36:b7:ee:36:39:
         62:6d:51:da:02:7d:09:bd:7f:0a:f4:7d:3c:79:2b:f9:40:c8:
         d9:2b:8b:f8:73:f7:9c:7e:93:b3:59:25:ba:e3:35:49:c3:a9:
         ce:bf:64:21:1e:9a:8f:e3:a5:84:9f:60:de:14:90:25:5b:ec:
         a6:69:22:2b:77:d8:b6:71:ef:33:4f:0a:46:d3:c0:ac:34:19:
         11:ae:50:81:25:f6:cb:27:3e:54:07:9a:d1:5d:5c:e2:3d:2b:
         34:5e:11:d7:6a:fd:89:2f:be:59:cb:c8:d3:11:3b:fa:e9:fd:
         0d:8e:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:39 2025 by rpki-client