Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d919ab-5dc8-3280-b363-75cf68bbf3b3.roa
File:                     d8d919ab-5dc8-3280-b363-75cf68bbf3b3.roa (raw, json)
Hash identifier:          CnPnz40N7IDyBnE6jxdFLWsh845Do7ZHrepleG9ZQAg=
Subject key identifier:   2F:C3:DE:E4:2A:A8:0C:BA:60:17:5D:F5:84:54:09:3F:01:F1:CB:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CE6222D129BEC3070FC7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d919ab-5dc8-3280-b363-75cf68bbf3b3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     397196
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:62:22:d1:29:be:c3:07:0f:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7966c168-152e-446a-b6b1-1e107e56eab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:2f:6d:b9:04:cc:6e:5c:e9:be:ed:27:98:
                    59:44:08:5b:d4:a9:b4:11:e4:1a:b7:68:0b:46:4f:
                    6b:2b:c3:bc:fa:db:13:26:59:14:2e:54:33:98:59:
                    bb:de:ce:be:90:13:b4:14:4b:65:bc:1b:9a:34:6b:
                    ac:3e:bb:51:fe:a0:f7:c6:01:1a:1a:63:fe:f5:c1:
                    3f:8a:3b:08:b1:28:b7:2d:0b:fd:a2:67:5d:1e:db:
                    71:ee:47:4f:6b:90:bf:65:a0:d0:35:6d:62:45:c7:
                    0b:6b:1a:74:11:90:06:cd:ea:17:fd:08:d9:eb:4f:
                    1b:b6:1c:c8:43:51:39:94:95:27:41:01:46:e6:ca:
                    c4:50:a2:57:68:13:8a:57:f8:bd:ea:cc:d6:a3:7b:
                    78:5e:ea:c6:ed:ff:50:29:64:14:0d:0e:07:b9:33:
                    81:40:a9:ca:76:86:9c:b4:2d:5b:94:ac:62:2c:01:
                    55:c9:63:84:50:ab:ff:78:dc:5d:72:57:66:e5:cb:
                    06:6a:43:a8:e7:da:6f:6b:2c:03:b5:28:02:bc:80:
                    52:c5:84:ce:a7:c7:f4:1e:6b:db:17:46:fd:b3:cd:
                    b2:9c:e7:77:45:b7:7c:a0:f7:32:94:cb:b6:28:58:
                    5b:dc:5c:61:1a:d7:93:ac:f3:4d:24:04:46:83:f2:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:DE:E4:2A:A8:0C:BA:60:17:5D:F5:84:54:09:3F:01:F1:CB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d919ab-5dc8-3280-b363-75cf68bbf3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:62:49:2e:19:54:64:01:15:70:36:54:5c:80:d3:ce:c9:47:
         1a:a4:6d:5d:94:63:6e:95:b1:36:ee:5c:4f:30:38:d3:00:52:
         71:19:bd:b2:90:81:40:42:92:9b:28:70:76:4a:45:8e:49:30:
         44:c6:e7:20:fe:5f:e9:56:d6:7c:ff:66:4d:55:cd:d1:27:16:
         4d:91:e5:14:c7:8b:75:af:c7:f6:da:d6:58:33:69:e9:96:7a:
         7b:8b:3d:85:15:4d:69:bf:05:9c:4d:5c:98:cc:81:22:74:14:
         03:ed:65:60:bc:a1:d7:75:55:3e:a8:7b:dc:cf:59:1f:8f:6e:
         41:9b:ab:84:2f:6d:63:04:71:b4:7e:6d:84:be:f2:29:2c:f5:
         ce:88:ca:a3:39:dc:6a:8e:5e:b9:b3:d9:7b:aa:a9:6b:3b:2c:
         9e:e2:0e:ee:a1:53:cf:73:63:71:67:79:50:45:bc:63:91:9f:
         49:8c:60:57:14:c6:2b:cb:87:be:7e:fa:e0:e7:a4:a5:1a:ea:
         57:3b:81:19:13:b1:74:25:a5:b2:16:7f:a4:0d:6e:cc:7e:33:
         6b:51:32:85:6b:10:b0:10:eb:0c:f9:71:1e:95:e0:d9:d8:b5:
         58:6f:3b:72:df:dc:76:3a:91:fd:12:32:e4:4f:bf:bf:11:b2:
         26:03:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:08 2025 by rpki-client