Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa
File:                     8de00d90-4209-3fb4-a770-6de2cea736e9.roa (raw, json)
Hash identifier:          WZHUxh6aDR6JKv612S/UFFuVjK1/RMtD+l9nK3tpSH8=
Subject key identifier:   DD:89:F6:7C:79:B9:85:AD:C8:E7:CE:44:BF:F6:06:BC:04:DB:91:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CCABFCB6F42E4682424A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36626
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ab:fc:b6:f4:2e:46:82:42:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=88709fa8-90e4-4057-85c9-e341303eb379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:c1:ef:57:1c:78:55:b2:40:68:52:75:99:
                    92:aa:b0:88:6c:07:11:0f:05:1a:b3:1c:50:a9:09:
                    c3:a2:9e:fd:a8:a6:a6:aa:19:34:77:61:03:bd:e4:
                    37:7c:0e:95:df:03:80:6f:fc:be:e9:34:55:2f:e1:
                    97:9a:8c:d9:59:b7:8c:8a:41:77:c0:64:28:06:3b:
                    3c:6b:b3:7b:c1:cf:74:c5:8c:f7:87:b9:8e:ea:04:
                    fb:95:65:6c:67:33:75:30:67:95:42:3e:31:0c:53:
                    88:30:25:0f:27:eb:51:6d:b6:f3:25:65:78:ab:2f:
                    00:cc:fe:a6:b1:41:d8:54:b7:62:9b:bc:21:44:1b:
                    2d:35:b0:b5:fd:96:f6:56:67:b8:3b:d6:a5:b8:00:
                    6c:73:ec:bd:b6:ea:16:ce:7a:05:f3:3a:31:a7:d8:
                    80:fc:d3:a3:8b:85:23:5e:8c:ba:da:39:46:2f:ad:
                    25:bc:15:16:ec:26:89:c5:03:b8:e9:8a:aa:4e:7e:
                    f2:a4:b7:4d:b5:4b:58:0d:7f:28:76:ed:cb:d6:90:
                    c8:0f:ae:e2:bc:0b:67:49:6d:6d:8b:e4:3b:a2:30:
                    f9:f1:79:1c:e6:5b:5b:f4:bc:50:f1:91:ab:97:b9:
                    f6:9c:58:96:4e:6f:61:2c:73:e4:2c:a8:6b:e7:5c:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:89:F6:7C:79:B9:85:AD:C8:E7:CE:44:BF:F6:06:BC:04:DB:91:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:83:5c:aa:cb:c6:96:ba:8a:bb:01:a0:29:97:c5:45:b4:81:
         ea:e7:97:e2:0c:e0:07:ad:ce:92:36:74:68:3e:9e:5a:52:a8:
         cd:5d:30:fd:ae:39:55:55:b4:35:1c:5e:9f:ba:93:41:c4:5d:
         a3:eb:45:02:d5:56:73:7b:82:78:37:b3:99:0b:85:d5:d3:68:
         87:73:a2:17:ee:3b:1c:79:c7:4c:7d:ac:2b:4b:c1:1b:ce:43:
         25:59:94:f0:0e:a3:b4:d4:77:86:3b:f8:c0:31:02:c8:86:ba:
         7f:3f:4c:34:b5:72:22:cc:42:a3:bb:56:73:da:dc:a7:18:ce:
         d1:67:c0:7d:46:3e:47:83:8d:56:35:a3:54:df:ea:94:c1:3e:
         66:8f:32:ea:44:3e:24:b9:68:f0:8e:d6:56:0c:78:3b:a4:c1:
         39:e2:41:1b:17:63:53:03:25:b5:06:5e:f5:59:99:87:b1:9a:
         51:16:c5:eb:d8:27:0b:54:e7:19:9c:60:b0:5d:16:5e:7d:b4:
         1b:3f:ff:ee:44:81:87:5a:3e:af:a5:dd:66:de:00:fb:f0:8a:
         12:74:8c:bb:82:7b:c7:85:6f:03:f9:76:0b:44:2a:67:65:24:
         3b:1b:91:f3:91:4b:03:93:93:36:e4:36:70:67:e9:39:1e:6a:
         cd:0a:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:00 2025 by rpki-client