Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef6b8e64-f368-3fb6-87d4-d725da53165f.roa
File:                     ef6b8e64-f368-3fb6-87d4-d725da53165f.roa (raw, json)
Hash identifier:          0vVu2oPUhLWbKvd4A8dok250WqGNhpIlC7d81X+9T7E=
Subject key identifier:   23:0D:4F:85:2A:85:76:6A:7E:2F:BF:C5:6C:38:56:2D:0B:A0:64:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD6500BB34ECA6C6C4D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef6b8e64-f368-3fb6-87d4-d725da53165f.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     36619
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d6:50:0b:b3:4e:ca:6c:6c:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=8ee78683-5046-4704-8b2e-44831ea1cadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:7f:61:49:8e:01:e4:43:05:12:81:fc:93:
                    cf:a6:5d:06:0f:6d:63:70:cb:b1:7d:20:47:f9:62:
                    33:58:0c:81:c6:74:32:b5:8b:fe:79:70:55:5f:f6:
                    06:78:5a:fe:0e:c5:72:05:fd:15:8a:04:a8:38:0f:
                    8b:50:84:c8:83:77:db:1b:27:35:32:a4:5c:a6:60:
                    19:35:ab:c2:e9:9b:4d:96:60:48:54:96:e1:f3:d4:
                    24:c6:42:10:af:fe:82:12:ac:1f:fb:59:74:3f:30:
                    3a:01:41:a7:27:77:64:a0:42:8c:43:52:8d:52:01:
                    9d:6f:bf:01:df:88:98:7d:1b:18:88:8c:36:43:2a:
                    8c:a5:11:ef:5a:0e:27:d1:e0:00:1f:7b:88:ef:c4:
                    3d:79:ac:72:3c:ca:a0:3c:5c:79:ee:59:7c:a5:1b:
                    6e:bf:4d:b9:4a:4b:c4:08:9f:c8:da:63:75:b5:13:
                    ed:de:83:f7:8f:a0:aa:9d:a8:96:14:f9:b5:97:f5:
                    7c:23:1d:1f:19:9d:53:bd:db:7d:c4:f3:b6:f7:02:
                    d3:75:5a:63:9f:02:fb:cb:e6:e1:3c:e1:0f:77:c9:
                    27:03:b0:71:9f:9f:25:31:7f:2c:ff:a4:c3:a7:57:
                    97:f8:70:ab:b6:15:e0:b5:e3:62:6c:2c:b5:cf:33:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:4F:85:2A:85:76:6A:7E:2F:BF:C5:6C:38:56:2D:0B:A0:64:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef6b8e64-f368-3fb6-87d4-d725da53165f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:ce:ac:b8:bf:9e:97:be:e3:ef:50:a2:d2:b9:f4:9c:b6:
         77:76:70:5c:6c:f1:07:73:cf:e4:cc:a0:b2:46:f8:86:92:77:
         cb:c0:9a:1a:ef:d6:2f:0f:7d:cf:46:b2:7d:5a:56:50:c7:d0:
         cc:a4:04:7f:73:df:c4:60:9a:e3:a8:dc:bd:82:02:2a:11:6e:
         7b:a6:ff:2b:88:27:f4:a1:cf:86:d2:65:f2:4d:c8:9d:37:7a:
         0a:02:16:69:e5:86:d6:f2:ac:fe:14:18:e9:b1:20:4b:00:fc:
         83:55:b8:55:0b:61:6a:64:20:41:b1:b4:53:12:fe:4f:23:4b:
         c0:12:c9:c5:57:cc:2b:de:36:1a:ea:03:09:24:86:65:24:2d:
         b2:ff:98:ae:59:44:66:8d:3f:4e:2a:db:d9:28:2f:4f:d3:5e:
         61:0c:e8:56:88:c1:f9:5f:0b:bf:09:fa:1d:14:05:21:e5:f4:
         fc:f2:4d:ad:da:53:7b:8b:5e:6c:31:3a:4d:48:4e:47:85:85:
         ce:16:85:79:be:35:57:3c:84:eb:39:de:42:b9:ad:cf:5a:9f:
         a7:5f:f9:74:64:ba:7d:86:f7:12:e2:79:d9:c8:4b:e5:e6:47:
         69:9d:19:60:3d:57:e3:f8:1d:09:1e:5f:96:8a:dc:3c:76:74:
         a9:19:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:28 2025 by rpki-client