Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22e0fdd-19a7-39ce-820b-00140a5ff9de.roa
File:                     f22e0fdd-19a7-39ce-820b-00140a5ff9de.roa (raw, json)
Hash identifier:          PxHzAtakKPsXVcU3ldbmLRaj2MNpjAbYaZOgZU2kZyw=
Subject key identifier:   6E:24:53:8E:C6:DB:80:62:C6:05:03:9C:2A:C9:55:F0:4B:7B:42:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCCB6FC86D7B1F8E4FB210
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22e0fdd-19a7-39ce-820b-00140a5ff9de.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396614
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:cb:6f:c8:6d:7b:1f:8e:4f:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=83798ae2-75ff-46fb-99e0-7461d2dbdda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:f7:b0:c2:6d:73:a5:e4:70:e0:88:73:0f:
                    82:7a:e0:ff:a1:9b:56:30:d2:03:0b:24:48:39:0e:
                    a3:3c:6d:16:a0:19:5f:b6:70:19:de:0f:a3:e7:d0:
                    d1:d0:51:9b:07:2e:e6:0b:b3:c7:b0:00:98:ce:06:
                    bf:7a:ba:00:b1:41:d5:a4:c4:0f:f1:11:1b:e0:3a:
                    10:29:d0:c5:c9:70:a8:7c:7a:69:8f:be:a3:1c:2a:
                    fa:32:06:92:4d:7b:f1:90:84:b7:2b:b1:d1:5e:f0:
                    67:58:71:bb:47:04:86:52:9c:86:1f:2b:f3:5e:70:
                    b7:7f:b3:3d:af:c1:53:43:33:2d:c0:24:b5:75:52:
                    35:f0:54:27:59:8d:a8:44:98:94:a1:b5:06:0f:cb:
                    89:33:a9:2d:94:5c:61:36:32:af:91:e3:0d:f7:32:
                    96:0b:2c:16:09:ac:7b:d6:ef:ba:da:9f:bd:c3:fc:
                    f8:ab:ee:1d:8f:cb:e6:43:d8:a8:2f:c6:e1:5b:cf:
                    79:6e:57:37:4c:84:03:0d:d1:47:d1:02:b3:94:e8:
                    68:f0:59:28:cf:52:59:a4:37:69:cf:83:e9:d5:a2:
                    be:55:b0:a7:f2:27:8b:0c:ad:26:7a:9c:9d:08:8a:
                    8d:10:cc:1b:38:9e:8b:32:2e:ce:fd:57:3c:22:81:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:53:8E:C6:DB:80:62:C6:05:03:9C:2A:C9:55:F0:4B:7B:42:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f22e0fdd-19a7-39ce-820b-00140a5ff9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:84:0c:19:26:a9:94:ac:38:2f:0f:84:ef:7e:22:89:83:
         41:48:da:da:37:ba:81:94:20:28:c8:26:c9:b4:71:92:ce:90:
         74:54:6d:15:fa:fb:f0:46:36:d7:e7:46:f2:2f:7d:0c:38:af:
         26:b3:14:89:a4:ee:f9:06:c1:b9:8e:8a:f0:8f:a1:b8:27:98:
         16:22:5f:d1:5e:06:c6:92:83:8c:eb:70:1e:fd:78:15:c1:77:
         c7:5f:92:a0:fc:e9:c5:95:aa:df:5e:7a:b6:9e:6e:f7:68:91:
         9a:2d:f0:cc:38:a5:5e:7a:90:8a:e6:3d:42:ae:86:cd:2a:6f:
         66:8a:b8:d2:0a:3b:1e:f4:d1:c6:9e:d5:00:ac:77:68:36:8e:
         b2:a9:c8:d1:36:31:f5:87:3e:bc:e4:d2:e9:65:40:17:c6:5e:
         04:77:7b:92:6c:89:f1:2b:f0:8e:35:ac:e9:35:89:ef:e1:58:
         4c:ff:42:ee:02:66:73:06:63:ab:0f:bd:4c:d9:c2:86:4d:ef:
         b4:87:d3:51:48:d6:60:ee:be:17:38:e3:61:4c:d4:fd:dc:2f:
         d2:16:29:45:9a:b9:0f:ef:b7:e9:70:03:9f:92:5c:8c:a5:2c:
         58:a2:b1:bd:c2:9f:03:c4:d9:f1:4c:33:8e:14:9d:19:1f:0f:
         9f:fb:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:30 2025 by rpki-client