Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59bb185a-2fd7-3eb0-8c6c-d64a9aee2796.roa
File:                     59bb185a-2fd7-3eb0-8c6c-d64a9aee2796.roa (raw, json)
Hash identifier:          HNf+RC84wjlYXZgCD1Eet6bYUW+w7TPRJUmd2GugGzM=
Subject key identifier:   35:72:90:2C:B8:75:9C:A4:E3:5D:1C:AD:7E:77:F0:D5:F6:3D:49:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCDA5830744182308EFA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59bb185a-2fd7-3eb0-8c6c-d64a9aee2796.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397194
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:da:58:30:74:41:82:30:8e:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=91482d22-ec84-45c7-9078-e8d4ce845710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:83:fa:45:61:bc:81:da:dc:4d:ef:d5:2e:
                    3b:63:ce:76:cb:53:d7:75:72:02:ec:d0:62:ca:37:
                    5e:9b:44:17:31:6a:2f:90:27:9f:1e:c0:a7:8f:e8:
                    80:eb:d0:0a:dc:ff:8b:f1:d4:aa:02:a1:8b:e4:b7:
                    26:13:d3:aa:c8:cb:ea:3d:17:c1:c8:f2:a4:05:72:
                    96:c2:22:f9:f1:ee:6b:f8:75:08:96:5c:14:b7:ef:
                    93:d3:f6:52:f0:7c:b5:13:44:70:b0:eb:7b:ce:81:
                    4e:7d:61:51:54:ac:23:2a:5b:bf:69:d8:01:14:ca:
                    db:8a:81:0a:95:bf:be:aa:b2:e5:b5:86:42:2d:51:
                    67:b3:27:14:8c:67:2c:e8:0a:01:ae:cb:f0:1f:d7:
                    8e:d8:e8:8c:e5:bf:71:b1:69:e6:90:e4:50:91:ce:
                    31:ca:2b:be:26:45:59:9c:a3:ab:29:92:9b:f1:76:
                    de:0e:9e:de:f4:59:fb:9b:8f:b2:9d:eb:64:f9:77:
                    07:8e:14:e1:0a:2b:dd:36:1f:cb:5d:24:40:d1:50:
                    19:9b:2f:08:82:76:b2:27:18:d9:20:f2:59:71:0a:
                    79:89:24:63:04:35:7a:ea:c0:c9:92:dd:0f:bc:fb:
                    d9:65:93:83:31:25:a8:f4:90:3f:a3:f5:f8:b0:00:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:72:90:2C:B8:75:9C:A4:E3:5D:1C:AD:7E:77:F0:D5:F6:3D:49:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59bb185a-2fd7-3eb0-8c6c-d64a9aee2796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:15:de:b4:39:35:1c:94:3f:30:98:bf:e5:42:71:1c:be:d1:
         15:31:6a:a1:e8:fb:83:53:c5:f4:51:a4:df:cc:67:83:2e:9f:
         21:da:29:5a:91:17:c9:a3:00:57:f6:14:f4:53:46:66:da:98:
         98:05:e4:70:6e:92:21:64:8c:30:d4:75:1b:4d:8c:4e:99:9d:
         8e:44:97:3a:7f:8c:26:b6:16:c3:41:9a:3f:a7:fe:cd:27:aa:
         f6:cb:af:a7:83:c3:87:ce:9d:4e:8e:a1:e0:fd:b5:58:0e:c7:
         35:28:ad:9f:69:d6:19:10:8d:a9:48:31:0d:03:93:01:ca:4e:
         24:07:a0:41:ac:78:fb:2e:4b:e4:45:97:36:2e:ee:25:02:61:
         a7:03:03:96:2f:80:32:35:2c:e3:ea:89:57:05:d1:ec:5f:13:
         dc:64:b3:ca:58:a4:81:f7:43:b7:55:1d:be:de:64:6e:64:71:
         c5:30:b9:97:63:0b:26:4b:f8:86:7f:c9:ff:f5:18:b4:1f:9c:
         cc:00:6d:19:b0:78:fb:09:4f:bc:47:14:19:b9:83:5e:61:ba:
         ce:f7:b0:6d:5e:92:e3:1e:34:0b:77:aa:d8:23:e5:ef:94:3d:
         48:3d:66:93:ab:bf:d3:e5:76:ea:d3:9c:88:4d:4b:2d:93:c6:
         7b:37:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:32 2025 by rpki-client