Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa
File:                     9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa (raw, json)
Hash identifier:          SaiNWdgXICqv+Ao73pfHe0t1COQ2gKUgXUoErWJ5yM8=
Subject key identifier:   E1:7E:B4:F5:68:A4:05:3E:E3:B4:24:A7:36:69:62:84:29:BD:2A:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CC94C2F2C82E13693AEB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396584
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:94:c2:f2:c8:2e:13:69:3a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=35d95990-21f4-47c5-8e6f-5ef8831fc40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:c5:ea:78:8d:4d:87:e7:74:ed:09:f7:a5:
                    0e:fc:62:99:7f:3c:af:71:8b:d5:d8:14:cc:7c:e1:
                    66:8c:10:56:fe:f0:56:1c:b3:b3:5e:a0:be:14:81:
                    c4:aa:52:98:2b:44:16:50:88:49:16:50:ca:e9:50:
                    8c:e8:c6:1e:94:a1:bb:09:81:29:4c:cf:af:8d:eb:
                    7e:df:4e:73:4d:61:f4:3c:91:62:18:ef:55:c3:a2:
                    7e:48:0b:0e:d1:f0:1a:8d:c2:e5:ac:6b:4f:e9:34:
                    18:6b:0e:bc:38:c9:f5:37:ce:96:5a:a8:d3:88:70:
                    77:89:68:a4:a4:3f:e6:80:e2:55:38:24:84:7e:88:
                    18:6b:93:58:58:f6:6b:35:cb:12:9d:33:e9:56:30:
                    ed:84:d8:94:49:40:4f:83:8c:b4:88:3c:b0:f3:75:
                    fd:88:5d:d1:92:5c:fa:bc:d7:b8:31:72:ba:f3:40:
                    77:93:06:35:d4:f2:63:6a:c9:f2:69:35:68:99:97:
                    ff:5a:ff:f0:13:75:05:74:45:49:90:c4:c4:d0:2c:
                    60:0c:41:2b:7d:62:a5:ca:aa:bd:c0:d0:96:b3:a5:
                    f0:a8:a8:03:89:9c:25:bf:bb:3b:60:62:b9:fe:dd:
                    2c:22:01:20:9e:d8:3a:c8:7b:03:65:da:16:37:bc:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:B4:F5:68:A4:05:3E:E3:B4:24:A7:36:69:62:84:29:BD:2A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:8c:df:0e:48:d5:6f:20:7b:ad:13:19:a6:8b:12:c2:4f:
         36:28:48:56:ce:3c:06:91:a2:1a:d5:66:26:1b:5b:92:bb:11:
         16:44:89:0e:29:11:92:66:5e:72:e8:d2:9d:93:c8:0c:69:6e:
         8c:92:9c:d0:75:a9:b3:9a:a7:ad:ca:44:7a:69:55:13:39:aa:
         15:ee:b0:6d:53:28:4e:68:b3:32:29:02:43:49:9b:b3:8e:4a:
         f9:7d:87:32:f5:97:c6:61:72:f5:45:35:32:84:f4:1a:76:11:
         b6:88:14:1a:14:0b:8e:d8:e8:48:d4:35:24:f4:f9:cf:ef:8f:
         90:ed:e8:18:be:b5:2b:47:5e:a4:54:aa:42:85:ac:c4:57:58:
         5e:b9:df:bd:22:d4:b4:00:22:d1:59:31:81:d1:fd:2c:40:8e:
         ce:6f:16:e7:b6:70:df:47:ca:a5:7d:fc:3c:3a:4c:98:66:c9:
         8d:36:c4:69:87:93:0e:53:cf:97:63:37:5b:dd:69:fe:f1:86:
         13:45:d8:91:2c:e4:ed:c1:56:85:1f:02:21:00:9c:e7:c1:a0:
         8d:35:87:80:cb:dd:43:5b:72:53:4a:31:1f:bd:db:52:71:38:
         0b:9b:04:2b:34:bb:05:26:c1:aa:7c:2b:4b:8c:4b:7d:ff:c9:
         f3:f4:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:41 2025 by rpki-client