Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
File:                     e8ecae6c-4778-387d-88a6-7131036ca703.roa (raw, json)
Hash identifier:          YzJ4k8dkZqSuAEUWsivBqLLB2rIjhtKIu93grQODFes=
Subject key identifier:   08:39:D1:47:03:C8:B3:0D:18:7C:B8:17:12:0B:DA:79:47:71:1F:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCDC260B1E70B4C762AFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396695
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:dc:26:0b:1e:70:b4:c7:62:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=1de50d5f-a4c6-4857-9a7a-f3a168840f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:e3:b8:8f:b2:7e:db:77:b5:a4:51:61:b4:
                    b0:b0:c5:26:8a:40:b4:bd:94:7e:59:ad:11:1b:b8:
                    22:83:43:ad:41:55:5a:e7:4d:fe:e0:21:e6:9d:6b:
                    d5:7d:a1:e8:cb:38:8b:6d:f4:8c:82:a6:50:bd:79:
                    98:2c:52:c3:83:e8:2b:aa:a6:90:da:26:ed:cf:7d:
                    0b:04:8d:af:f1:08:77:d6:97:66:66:c2:3c:17:5c:
                    71:58:a0:3c:f9:43:8f:f6:0e:6d:16:a6:4c:6a:c0:
                    d3:e3:bd:52:cf:0c:4b:1f:9f:3e:f2:60:ff:b5:8d:
                    7c:f7:a3:4f:b1:04:fe:1f:69:4b:bd:49:14:7e:dc:
                    da:cb:f7:02:de:6d:cf:1c:7c:85:b8:17:ad:49:dd:
                    d1:da:aa:df:97:1a:4f:a8:a0:0d:89:b5:b4:26:fe:
                    bc:17:fd:42:84:04:27:97:6a:56:5d:54:c1:c9:82:
                    7a:de:98:2f:a7:d7:e5:59:7b:fb:06:24:47:2e:22:
                    3a:17:9e:f6:51:f4:d8:e9:4b:3c:49:50:ea:2e:d6:
                    29:42:24:2a:6d:b3:be:70:86:58:a8:0c:24:15:ef:
                    8e:ea:fe:36:18:37:67:99:4e:53:20:d4:32:02:8e:
                    28:bd:b2:6e:df:54:1c:b9:9d:82:9c:c8:a6:0a:8a:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:39:D1:47:03:C8:B3:0D:18:7C:B8:17:12:0B:DA:79:47:71:1F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:f8:e1:21:2f:2b:1e:a6:a9:c9:c2:ea:55:e3:eb:35:7a:
         cc:8c:d4:4f:71:4a:eb:07:31:52:a0:75:11:44:8f:a9:f5:36:
         ca:6c:e5:8b:9b:1e:5e:52:0d:4b:9b:b2:c0:c2:fc:6c:fc:63:
         c2:1b:e1:c5:3a:19:63:22:64:a6:9a:d4:a6:e0:51:8b:a5:02:
         db:cd:49:06:4e:62:3a:f6:12:59:16:de:99:19:4a:ef:62:51:
         25:75:a1:49:ac:50:9f:45:77:71:1e:b0:dc:03:d7:5c:2a:89:
         de:5b:6f:d3:38:9a:c0:3c:62:b0:b5:46:4b:b1:69:a9:33:0a:
         37:22:80:be:29:0e:97:4e:28:fa:85:4c:8c:ef:ff:04:6b:ad:
         42:a2:8f:26:bb:83:2a:71:83:e7:10:32:fb:0d:b2:64:83:2b:
         9c:80:44:cc:4b:54:9d:a6:61:0e:2f:2d:c2:a2:8f:cf:7e:2c:
         4b:0c:7d:f0:39:d5:64:e1:c7:81:3e:5c:20:c1:75:28:cc:c2:
         be:fa:5e:c8:85:50:ef:07:36:3a:68:3a:1c:a0:04:f3:be:7f:
         4a:52:c5:5b:c5:38:80:b6:ba:ea:9d:aa:13:5a:7a:b2:f0:3c:
         c9:97:6d:01:01:bb:52:dd:8e:76:6e:92:0a:90:60:04:66:09:
         be:c5:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:37 2025 by rpki-client