Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
File:                     ddc02893-df28-3f75-97c1-785b64e1dafd.roa (raw, json)
Hash identifier:          OH/lGJ9VRiz2FqXSZ7rUseZxCknk63lx0FDh6A9YuNI=
Subject key identifier:   03:4A:A4:4A:E7:05:1A:84:7E:E6:82:E2:99:BD:38:C0:8F:A9:17:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD444619039B665CA1080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     27544
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d4:44:61:90:39:b6:65:ca:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=02cefa1a-c119-4c3d-8fbd-360f61249e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:4c:85:d0:95:e9:f8:36:d9:16:75:6f:a2:
                    5a:43:96:4e:89:29:29:9f:e0:83:46:1b:a0:08:7e:
                    0e:f3:a4:13:bb:93:40:fc:b1:8e:83:8e:f7:7e:0f:
                    ad:ff:37:35:38:28:8c:d0:03:cd:0a:49:c6:b1:93:
                    85:7f:8f:ba:5b:d4:10:0a:d8:37:92:5e:ed:85:b9:
                    c6:aa:b8:40:c4:86:9e:18:93:36:5f:b9:64:98:25:
                    f7:60:6c:f4:c0:e3:c7:df:91:4b:be:c1:ea:0d:95:
                    25:1f:d9:95:99:75:31:31:75:20:81:98:b4:44:af:
                    6b:42:08:87:a2:b2:29:7a:d7:ac:85:16:92:32:77:
                    f7:53:85:f3:c6:75:54:f3:7a:d6:70:60:c8:34:10:
                    a1:46:72:3a:5d:34:da:fa:5e:19:cc:76:23:f1:e8:
                    ee:0a:cf:cf:cd:13:f1:ed:66:c4:27:88:99:0b:98:
                    89:ab:5b:1c:09:de:2f:39:f0:2b:8f:5f:65:06:09:
                    6b:38:74:20:2c:4d:09:d2:4d:36:f1:b1:fc:d1:42:
                    2f:cd:95:a8:82:be:31:fb:9d:96:5b:e8:3f:93:a2:
                    51:d0:20:bb:33:fe:8c:7f:40:31:59:6c:40:a5:68:
                    c7:54:ab:6f:3d:89:07:63:d8:f0:1f:3b:9c:3f:27:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:A4:4A:E7:05:1A:84:7E:E6:82:E2:99:BD:38:C0:8F:A9:17:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:14:14:24:cf:7c:70:73:82:1f:47:02:95:67:f7:c8:75:ce:
         3a:01:37:fd:f7:a8:5f:10:5e:f3:fb:71:61:90:08:5f:89:16:
         5a:c5:d5:6e:9b:03:b4:dd:32:cd:65:af:91:58:c8:1d:26:fc:
         b6:cc:8d:69:0b:15:94:5c:6c:86:b1:2d:a0:c5:a0:e0:83:ed:
         be:b8:ab:fd:ac:df:a8:31:02:11:cd:fd:c1:25:d3:52:f9:2d:
         bb:6c:4d:5f:4c:04:28:9a:50:a0:a2:8a:63:a1:cb:5d:d0:4f:
         6c:3e:5c:b0:46:38:91:8e:78:a9:d7:12:07:d1:6b:27:2e:22:
         f7:6d:15:a6:e4:50:a0:e4:6f:74:50:eb:3c:b1:a3:e6:79:94:
         27:a3:10:57:bd:e9:6e:01:2e:a3:3c:4b:92:6d:42:03:9a:dd:
         55:d4:86:ac:b3:98:03:7a:00:4c:62:6b:96:ae:df:83:6a:c2:
         33:b5:00:e2:65:66:94:37:4c:a0:e3:40:26:5f:e5:d9:36:fa:
         6f:39:58:ed:db:50:4e:d5:ba:0f:8f:9a:74:8e:d0:0e:66:91:
         10:36:8a:23:1c:04:2d:7c:e6:e9:2a:41:69:86:e2:8d:d5:66:
         e2:55:20:54:18:0d:1e:75:62:52:79:7a:07:28:04:ad:43:3d:
         34:44:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:22 2025 by rpki-client