Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa
File:                     ad47d230-8f28-3e38-86e4-42de158b9ced.roa (raw, json)
Hash identifier:          ICexjigv3onNEmckO092450+U/DhDZEk0N1jQqe8zS8=
Subject key identifier:   2B:6E:32:EE:7F:A6:1B:67:95:FC:56:44:0A:65:19:44:05:7E:5E:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCC9B2BF77BA780231D500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396715
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c9:b2:bf:77:ba:78:02:31:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=96ce53db-2284-47aa-b17b-5eaa8a69c377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:cb:e5:a1:2a:fc:ce:9f:4c:3b:9d:10:3d:
                    55:aa:8b:93:66:63:b3:ad:fe:72:4a:77:a3:e2:22:
                    aa:cb:14:90:51:f6:0a:f5:22:a9:bb:ee:da:34:e0:
                    99:94:d8:e0:1a:90:60:97:fb:16:12:88:0d:d0:53:
                    a3:50:6a:de:7c:61:4b:4c:1f:c3:87:10:cc:a9:3f:
                    ef:82:e0:cf:30:71:69:a2:7a:a5:8e:a0:d3:51:17:
                    ba:d9:d2:ea:93:33:49:29:f3:e9:53:e0:96:18:5e:
                    cf:d6:2f:7e:e5:4c:63:d9:9a:85:55:b2:4c:d2:09:
                    d6:4b:2d:0e:a2:e8:97:aa:10:1b:b1:8a:b6:95:ea:
                    0f:83:72:1a:ef:74:6a:f4:19:4c:91:77:4c:86:8a:
                    c5:a6:34:2d:fc:4a:08:92:fe:f7:3b:75:3d:a2:bd:
                    af:ab:2a:b8:dd:f0:a7:26:b6:07:48:97:6a:ac:d3:
                    72:b9:59:26:29:ea:90:4d:01:96:af:34:dd:5c:00:
                    ec:b6:58:b5:d9:c6:f2:b1:29:f4:bf:35:20:ee:da:
                    11:37:81:9a:ec:f3:5f:e8:d2:a1:58:ae:cb:59:cf:
                    3b:52:7e:02:e3:4d:db:1f:70:64:a2:27:1a:b1:32:
                    ba:9d:4c:5c:c5:d4:62:16:35:25:87:3f:b4:d0:a7:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:32:EE:7F:A6:1B:67:95:FC:56:44:0A:65:19:44:05:7E:5E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:ff:06:6f:b5:f9:88:cb:c7:43:a5:43:44:17:f0:7c:c3:
         5c:28:5c:a0:78:03:e2:d8:2e:2b:7a:ca:ff:35:c7:36:ca:b5:
         1a:aa:1f:75:ae:39:7b:ac:b4:9c:8a:43:cd:a4:a2:84:93:60:
         21:63:b0:0a:62:e6:81:7a:e6:d2:cb:af:37:b7:58:50:01:a6:
         c0:d7:69:82:69:ca:ec:21:40:92:ce:54:0b:8e:0c:20:51:5c:
         9a:2b:60:0e:9d:38:6e:42:2e:0d:ab:3e:93:41:a5:5e:a9:8c:
         e9:c3:4c:bb:17:51:6a:57:16:9b:ed:b2:b3:3b:0c:b6:9d:8b:
         67:10:9a:55:01:79:9f:83:99:f3:4a:8d:4b:c6:dc:2c:39:b8:
         7b:f6:fe:98:48:8e:ad:ec:25:41:02:04:1d:1b:6c:8e:f8:54:
         58:f2:09:62:af:bd:c6:58:13:95:4d:81:b7:02:9c:d6:79:db:
         41:da:13:3d:e6:5d:7d:85:d8:a5:7f:78:27:69:c4:49:08:f4:
         0e:1f:c4:18:3a:68:1f:90:82:ba:29:bd:5b:9c:b1:84:e9:d2:
         17:9a:e1:20:5a:32:95:4d:09:b1:f9:76:3c:86:0c:3c:fa:a8:
         95:7e:c9:06:1a:d7:35:d6:9b:08:39:99:58:ae:9f:19:ca:b4:
         76:ea:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:53 2025 by rpki-client