Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ff5e6e-0028-345f-97c3-a9890be3272a.roa
File:                     63ff5e6e-0028-345f-97c3-a9890be3272a.roa (raw, json)
Hash identifier:          iv454udKh2bmC6hZG3vSokr+tD8kZD1rI/VhkF+OEY4=
Subject key identifier:   A7:5B:A4:AF:3D:FB:8D:33:8B:22:9D:DD:C0:21:FB:03:E4:7D:F1:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE436CB6F54863C2CA3980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ff5e6e-0028-345f-97c3-a9890be3272a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396562
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:43:6c:b6:f5:48:63:c2:ca:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bed1ae31-a635-44f2-bf9a-b3ec4958f145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:4a:da:15:4e:75:1c:48:5d:37:3c:c3:5e:
                    aa:07:86:c2:68:b9:46:f5:e5:bb:01:27:a4:7c:ba:
                    01:f6:c1:a0:20:91:da:e2:de:07:5c:5c:4c:f7:9a:
                    26:b4:b8:87:41:da:7c:9a:47:b6:41:94:e0:19:4f:
                    bd:70:42:4f:1e:3d:95:a2:ad:aa:66:8c:9e:18:ce:
                    bb:43:0d:47:c4:14:0b:17:09:42:df:c0:e4:24:9d:
                    a1:67:54:b2:82:30:cd:2d:3a:bf:9e:83:82:e8:7c:
                    42:c7:0a:34:54:21:d8:72:84:31:5a:5c:7e:e6:5d:
                    10:2e:90:16:97:dd:22:22:db:9b:40:de:52:44:c5:
                    75:5c:84:61:bf:20:77:1d:97:61:e0:52:2e:8e:5c:
                    fe:64:a2:44:9d:5a:d8:4b:84:34:7d:62:55:21:f1:
                    7c:53:11:c1:a2:a8:c5:6d:a9:e7:b9:d2:14:6a:69:
                    2a:37:fa:ac:6b:f4:ab:74:0f:db:55:13:76:e5:b3:
                    49:ef:94:4c:5d:8a:f6:8b:4d:88:ee:65:79:ed:07:
                    28:76:a5:d5:d7:b3:50:8e:58:b1:aa:59:4c:3c:90:
                    ad:79:46:ed:bb:6c:64:17:29:f1:36:f0:48:77:21:
                    db:ae:99:a1:87:4f:1a:18:30:80:13:95:90:13:64:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:A4:AF:3D:FB:8D:33:8B:22:9D:DD:C0:21:FB:03:E4:7D:F1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63ff5e6e-0028-345f-97c3-a9890be3272a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:d4:ac:88:0e:bc:11:25:ed:7d:ac:a3:3c:29:03:8a:69:
         cb:19:96:74:81:d8:65:e9:cd:08:c3:86:e8:54:35:8a:27:3e:
         ac:42:9c:cf:52:92:c6:43:a5:82:b1:17:45:c4:35:19:c6:07:
         e1:a2:26:83:77:76:a3:c0:00:83:44:9c:63:7e:4c:ac:d7:c2:
         72:c5:a4:26:2b:c7:bd:12:0e:1d:0e:04:3b:a5:e4:8c:26:41:
         1e:e1:59:cd:30:50:d0:94:3b:5e:53:5b:d4:5f:98:4a:3f:9e:
         05:1a:48:75:0d:23:0f:0f:33:cd:d1:42:2b:71:f4:83:39:24:
         68:eb:6d:85:e9:dd:df:7b:4c:64:65:bd:fe:43:54:14:25:e7:
         e1:0b:2c:0d:15:ec:e6:7b:a0:9c:4e:18:13:8c:b3:5a:2d:a3:
         5d:23:7a:33:d0:d2:c3:33:a6:77:19:e9:7a:00:ff:88:4a:5f:
         92:5d:c6:db:df:8f:fa:bc:d7:14:1b:44:a4:60:06:26:8c:e9:
         65:4b:5a:2d:66:4d:ba:56:90:0a:6e:38:20:bf:99:c9:f9:7c:
         1d:43:9d:b8:c9:c9:da:44:44:1b:27:ba:03:59:c9:d6:10:03:
         86:39:9b:6a:90:e0:c3:f6:27:d8:4c:7a:a9:9d:bc:ce:eb:ef:
         41:3a:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:48 2025 by rpki-client