Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa
File:                     bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa (raw, json)
Hash identifier:          mQ6XlhB4txWD1AEPiYr4j4M5E5fJhakpIHp1cv0eDmQ=
Subject key identifier:   C7:C3:0F:9D:78:AC:EF:A9:59:24:39:4D:EC:30:24:96:4A:1E:2B:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CC855F7D221B0F7647F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396564
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:85:5f:7d:22:1b:0f:76:47:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=14797e38-b9d8-4d2c-97e9-8906a8858a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:b3:a4:6b:ee:c4:90:15:1c:d7:0f:6d:c1:
                    e3:6b:01:d6:cc:b5:1b:bb:1a:ea:d0:29:b1:99:ee:
                    87:c5:16:cc:2d:d9:28:e1:f8:00:cc:62:68:de:36:
                    16:54:3c:ab:84:cd:be:7d:f2:86:14:bc:13:b2:00:
                    0a:a5:f3:c2:43:a2:18:9c:02:bb:ef:e7:ef:2b:61:
                    6c:b0:f3:60:bd:51:26:91:9a:c1:0e:a6:05:58:de:
                    4a:8e:98:3e:ae:cf:54:ee:11:47:46:f2:89:c8:c7:
                    85:c3:6c:ba:04:a5:6b:e5:85:73:e9:7d:fe:84:ca:
                    de:fe:89:35:3a:53:3e:99:ec:d6:64:d5:f0:0e:f8:
                    e2:48:81:64:c1:4f:7b:e3:94:8f:34:65:a8:b0:a3:
                    e4:f1:9a:9f:7d:b7:11:73:57:40:5e:7f:5c:b7:25:
                    2c:c5:82:77:e5:01:f7:64:bb:15:0b:28:57:bc:02:
                    ae:49:2e:ca:7f:ae:f9:b1:45:c9:8b:d8:e1:f9:c2:
                    3a:c0:32:0d:b0:56:ee:bc:9a:56:2b:ae:78:89:02:
                    01:ad:c9:0a:85:0a:d6:60:b4:9f:b0:9c:74:30:58:
                    ea:43:d0:4a:28:6e:38:ef:eb:b5:e2:07:6e:3b:8b:
                    2f:ab:bb:40:a5:ca:44:e2:37:4a:55:56:8d:7d:f0:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:0F:9D:78:AC:EF:A9:59:24:39:4D:EC:30:24:96:4A:1E:2B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc55dce5-00c8-37e2-8b6f-e5a9ad6bdfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e4:64:00:0a:e9:92:60:0a:ea:22:32:8f:65:91:dc:d1:38:
         69:94:69:4c:f9:17:19:cf:b5:ea:41:e3:70:31:36:cb:9b:05:
         97:be:85:ea:bb:13:e2:21:5e:10:d7:69:82:9c:2f:5e:53:24:
         91:a4:6a:81:df:1f:1e:a1:21:6d:39:f3:9f:f9:03:fa:6b:51:
         16:7f:c7:21:5a:43:37:91:1d:86:4d:5d:3d:84:c9:a0:eb:1d:
         c2:8c:41:4c:b8:1a:6f:95:f8:8c:36:a6:30:9c:12:48:23:12:
         d4:82:2d:ca:4a:63:2b:e3:cd:ae:7a:13:e9:a0:a6:d7:d3:08:
         8e:6b:60:52:af:3d:60:5c:87:d3:1d:57:5e:d5:8a:d2:60:d8:
         41:eb:2e:c9:7f:73:00:cc:a5:cc:d0:81:08:4f:37:dd:b0:47:
         b3:a3:00:ba:a3:de:85:24:8a:06:51:a6:f3:05:17:ed:87:d5:
         af:d5:b6:30:10:dd:5c:c3:cb:6c:e4:fe:1c:5d:b7:c6:50:94:
         03:9e:38:c5:c1:64:1a:d9:43:dd:ef:f4:94:e1:a0:2c:c7:ea:
         88:21:94:69:c6:9c:dd:00:45:01:19:be:43:e5:96:a6:85:7c:
         bf:03:dc:06:c4:d5:7a:77:86:10:df:3d:aa:96:18:e6:e8:6a:
         c4:f3:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:55 2025 by rpki-client