Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c424f39-7bdb-3d66-bf38-ebdc88d80369.roa
File:                     9c424f39-7bdb-3d66-bf38-ebdc88d80369.roa (raw, json)
Hash identifier:          smURELZdWA/0pwaIRzMd9GBaauALKqjFAWu0bwjYwEs=
Subject key identifier:   85:9E:7D:2C:27:EC:30:55:BF:83:9D:49:3E:41:C2:66:36:E4:AF:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CC977505390D7BA971D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c424f39-7bdb-3d66-bf38-ebdc88d80369.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396549
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:97:75:05:39:0d:7b:a9:71:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4811eb97-c6bd-45fc-af69-b924a0a8c36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:c8:ac:1c:72:1b:b6:5b:37:34:3c:37:10:
                    22:cd:64:84:5a:13:0e:29:f3:67:89:ed:e1:b1:af:
                    29:26:45:ef:85:2d:ab:20:84:5a:d8:d4:fa:28:6d:
                    e9:31:1f:97:91:2e:f9:8c:2f:22:8f:ad:a6:c3:85:
                    16:d9:53:bd:41:5f:52:c9:6a:cb:1e:3e:f7:e6:ae:
                    23:a3:42:80:30:fd:6a:b8:44:4b:9f:1b:cc:87:d8:
                    39:9d:73:6e:1d:6a:d3:52:9b:2f:80:cb:0a:ac:f3:
                    7c:ac:70:4d:8b:d6:33:2b:f3:ab:d4:a7:98:b7:90:
                    f3:c0:3e:cf:74:79:69:86:64:88:8f:cb:bf:28:67:
                    5b:d6:52:27:c1:ce:88:7f:54:5e:a3:17:bb:44:ff:
                    2f:4a:14:f2:00:d4:56:79:e0:8c:38:3a:7b:e6:70:
                    ee:82:4c:89:f8:f4:e0:7f:82:e2:ed:c1:ac:b0:b2:
                    3e:0d:76:b2:7c:99:50:5b:a5:ce:d2:79:8d:c4:b0:
                    d5:ea:c5:d5:38:0b:b0:ab:67:09:7b:e7:ba:6a:3a:
                    b6:c2:e2:7a:61:5e:35:0a:ca:75:7f:d5:93:fd:46:
                    c9:c0:cc:9a:6b:04:10:b5:f7:43:4e:6f:d6:f4:49:
                    df:04:de:a7:d0:56:e3:15:5f:07:00:7d:67:42:40:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9E:7D:2C:27:EC:30:55:BF:83:9D:49:3E:41:C2:66:36:E4:AF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c424f39-7bdb-3d66-bf38-ebdc88d80369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:d8:72:db:64:9b:60:4a:35:7f:94:d8:a5:ed:20:34:e7:
         ec:a7:e5:db:ff:54:72:d2:f6:0c:45:da:d3:1f:9a:87:38:0d:
         1e:bf:40:7b:e6:73:6f:8f:11:9a:6c:a1:b9:ae:50:4c:d1:67:
         30:a9:4d:3a:de:eb:b7:ee:04:78:62:af:24:7a:6f:73:29:c4:
         f7:fb:a7:0a:a8:31:3a:7e:40:60:b4:6a:68:a2:ed:18:92:d9:
         23:8f:82:cf:c1:c2:37:d1:82:5e:6b:e7:24:fb:d3:02:12:2b:
         96:23:4f:a9:e9:e3:77:d8:75:44:f8:8c:a1:7d:c2:53:95:8b:
         02:94:91:5f:28:28:89:41:08:df:a0:bf:a4:49:7c:c6:17:58:
         59:f5:47:2d:78:d2:78:58:87:22:70:fe:b1:65:7b:c7:4e:57:
         98:e6:2e:4b:81:96:38:bb:e9:45:cf:84:81:f2:67:55:27:7a:
         64:6a:d1:a6:4f:ac:86:09:3d:ed:04:3f:93:5e:4d:6e:7e:4b:
         de:f2:7a:71:d7:5f:db:4b:5d:44:79:7c:7f:2b:1b:44:5d:94:
         13:4a:ae:3f:fd:5e:6d:db:64:79:67:8b:c7:d7:e9:91:01:cc:
         15:87:70:1c:34:ca:b3:05:32:73:19:2a:c0:de:66:3c:a3:a2:
         46:28:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:18 2025 by rpki-client