Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d57b1930-3661-3203-b8a9-e5ce87406f98.roa
File:                     d57b1930-3661-3203-b8a9-e5ce87406f98.roa (raw, json)
Hash identifier:          T+B+/jKqGwEIlAnlNh0O73n7o7X3KM1ZqUY6fjxnZdI=
Subject key identifier:   6F:C3:CD:CB:1B:61:4A:D4:81:7B:2D:DE:5C:C2:2F:12:FA:FA:37:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCDCE0925B550918498880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d57b1930-3661-3203-b8a9-e5ce87406f98.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396619
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:dc:e0:92:5b:55:09:18:49:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=da0fdf31-daaa-46cf-99d9-fca25c322589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:8f:41:f7:6c:63:6b:d3:a4:ef:6d:23:41:
                    bb:38:9d:b9:4f:6b:90:fe:54:08:22:85:35:56:04:
                    bf:a4:1a:cb:e7:c1:9d:4f:8a:07:88:a6:25:f5:66:
                    70:6f:d3:64:4c:08:f4:50:4f:bd:df:13:49:c4:1c:
                    9a:70:26:20:79:8a:09:f5:97:7e:e3:9b:e3:28:d5:
                    37:cf:11:56:b5:83:53:fa:bc:c7:41:60:72:55:51:
                    3d:d2:eb:6d:60:39:41:e5:70:9b:fa:b9:66:91:41:
                    81:8e:30:d9:49:b9:1e:82:64:20:69:11:05:de:cf:
                    5c:8a:c0:03:a7:0e:4a:67:ec:09:b5:d9:fc:92:d2:
                    03:64:3a:0f:ec:49:02:b7:58:16:1a:a5:65:a8:2b:
                    8a:a1:4a:bd:56:50:3a:12:b3:dc:77:e0:23:97:87:
                    ba:f8:35:0d:71:bf:2d:7b:75:f9:f1:71:3f:1d:27:
                    a5:cd:b6:11:e3:32:c9:82:98:52:0c:79:e4:a0:2e:
                    ca:b6:ab:15:44:fc:f6:d4:76:65:17:23:34:38:94:
                    35:ce:ec:02:dc:19:ac:63:d5:e7:50:81:b2:5e:2d:
                    ae:f7:7b:0c:d6:0e:01:b4:95:b3:a2:c4:5e:6a:d7:
                    39:ae:3e:b5:ec:d4:c0:81:b0:e6:11:22:fe:de:f5:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:CD:CB:1B:61:4A:D4:81:7B:2D:DE:5C:C2:2F:12:FA:FA:37:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d57b1930-3661-3203-b8a9-e5ce87406f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:56:05:f0:5e:40:1d:17:e5:a1:09:ea:21:2e:e2:67:6c:ed:
         b0:ce:e2:af:f8:8c:00:58:c0:71:00:05:9e:a0:33:64:65:41:
         46:6b:86:f6:86:4c:7d:29:46:03:8a:22:a7:a4:c3:7a:14:1f:
         d7:88:79:f8:18:a7:5f:73:87:7a:47:ce:bf:79:fd:e3:d6:1a:
         a3:f1:8f:07:07:5c:87:b6:63:84:69:eb:ee:d3:49:a6:59:41:
         67:2e:92:59:d9:3c:28:de:3a:5a:0d:b6:f7:9a:77:b3:f1:c5:
         9d:53:d6:34:54:3c:55:fc:9d:95:8f:06:35:01:87:da:46:c1:
         e8:e4:1f:80:aa:2a:d2:fb:80:5e:91:c4:4e:d6:db:c8:65:d2:
         af:33:08:f6:c8:48:9f:6c:24:c7:06:dd:6c:74:c2:6c:6f:25:
         e4:77:d7:07:92:16:9c:15:ca:fb:8e:e2:6f:b3:bc:58:f2:3a:
         07:ea:2a:40:bb:be:9a:4b:dc:58:bd:71:4f:dd:90:08:37:07:
         49:ed:01:5f:d0:be:b9:09:cb:5d:e3:e4:cc:e3:26:2f:2f:7d:
         c7:28:26:11:39:2b:d8:35:37:10:aa:e1:c9:db:33:2c:b9:9e:
         7f:26:bd:18:52:89:74:3a:75:e3:e0:3a:d4:24:ec:30:f8:e1:
         db:c0:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:21 2025 by rpki-client