Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ebbb18d-1656-31b1-9579-8c33d2373f64.roa
File:                     6ebbb18d-1656-31b1-9579-8c33d2373f64.roa (raw, json)
Hash identifier:          vfzgvMYwaVgqzhAY1XjxUDT0QDQTjGM6/0stdzgUXX4=
Subject key identifier:   56:41:25:E8:99:E2:D1:41:02:5C:5F:A0:42:D7:5B:B6:70:7D:4F:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCDDF369FD6BAD5EA86180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ebbb18d-1656-31b1-9579-8c33d2373f64.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396585
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:dd:f3:69:fd:6b:ad:5e:a8:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=e54f3763-a50f-4df5-bf88-ee1bbd01e20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:3b:f6:04:4a:27:68:21:06:6e:62:f1:ab:
                    d8:36:91:40:f5:8e:b4:65:9d:96:54:53:2f:6c:24:
                    f3:45:73:0e:46:4b:77:dd:35:98:eb:d4:60:21:f6:
                    4d:57:1a:2c:0f:f3:a4:0a:24:5e:a7:fd:f3:db:15:
                    65:61:d7:f2:8c:fc:6c:a1:5e:e6:a7:55:e9:3a:44:
                    0c:bd:a6:72:34:c4:47:b4:a4:e7:71:bf:b3:11:80:
                    d4:ea:40:c9:8b:1b:2c:58:3e:9f:83:97:9c:25:24:
                    b1:da:8b:ae:83:eb:fe:a7:bb:27:c0:76:cc:48:8c:
                    63:b0:12:68:cb:04:a5:9a:ed:ae:6f:3c:9d:2a:cd:
                    23:fa:53:d8:41:74:46:10:33:d0:ad:ca:d9:17:82:
                    a7:f3:aa:fe:e0:cb:8e:ad:55:62:7a:fe:0c:64:6d:
                    02:61:21:94:c0:48:9e:1e:73:87:e0:19:ee:26:75:
                    46:96:68:fc:19:99:98:7e:19:9a:a9:a8:5b:30:41:
                    4b:48:dc:de:a9:92:e2:e4:4d:38:a8:c7:82:ad:4d:
                    12:1a:ff:23:f7:fe:df:59:51:f5:9c:70:fe:1b:37:
                    91:21:2f:93:c9:55:1c:18:4e:44:14:d5:a2:52:e2:
                    85:31:68:e7:03:d1:cf:19:4f:38:3e:19:48:04:8c:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:25:E8:99:E2:D1:41:02:5C:5F:A0:42:D7:5B:B6:70:7D:4F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ebbb18d-1656-31b1-9579-8c33d2373f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:58:29:70:04:74:3b:0b:43:e7:21:79:5c:19:e4:21:8c:
         f4:71:81:5a:a0:65:47:02:a3:34:61:ee:0e:60:97:78:ea:b4:
         60:c1:ee:6e:a1:61:12:9c:70:95:69:31:0d:05:7d:47:6d:17:
         4a:b9:43:17:97:3c:df:de:56:f3:d9:69:1c:bb:d5:5d:aa:17:
         ea:a9:07:8a:64:90:28:48:27:d2:71:21:f6:18:a8:7a:43:5f:
         96:47:15:62:ce:dc:f0:bb:6a:b9:84:11:ea:a2:ba:08:59:5b:
         b7:bb:5b:8c:c8:8e:06:8f:27:b3:3a:6b:12:91:51:bd:ed:cc:
         53:25:b6:0a:a7:16:0a:fb:b6:b0:62:ca:d9:97:73:08:63:20:
         fc:d8:17:ec:75:a6:e9:d8:59:07:d1:b7:69:9d:1f:ef:0d:dd:
         ff:c4:66:0b:79:93:e0:f0:75:e9:d8:49:26:e4:20:39:0d:41:
         06:65:32:29:a7:20:c0:47:f8:8e:f7:b7:ac:7f:6b:48:63:81:
         dc:eb:19:9d:a2:48:0e:0d:35:3c:c6:93:d6:2a:8e:76:54:33:
         59:b2:9a:6e:40:3f:d8:57:99:67:ea:da:01:ba:7a:22:d0:9d:
         67:c4:c0:59:6f:6d:12:e6:7a:9e:d1:ee:0f:d7:05:72:b0:41:
         bf:66:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:21 2025 by rpki-client