Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2eaf5c7-80c4-3f22-bc65-ddfed3b05ddb.roa
File:                     f2eaf5c7-80c4-3f22-bc65-ddfed3b05ddb.roa (raw, json)
Hash identifier:          xVvB0h6OCwBE7SWed77StsdVCPUnXw8i1yk+0sGQc9E=
Subject key identifier:   11:C2:36:9C:79:EF:95:67:CC:F5:68:02:14:F7:B3:CF:C9:8A:2F:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD38EC85AEE0FBAEF2580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2eaf5c7-80c4-3f22-bc65-ddfed3b05ddb.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396674
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d3:8e:c8:5a:ee:0f:ba:ef:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=f39f987f-6994-4311-b421-bc41c458f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:03:f0:70:25:ad:93:2a:bd:87:fe:2c:dd:
                    50:1d:3b:9f:08:e0:80:d3:25:bc:bc:47:af:23:0d:
                    bd:45:c0:18:e4:5a:86:02:42:f4:07:84:3b:e3:bb:
                    c3:3c:fd:22:07:89:51:67:76:33:b0:96:50:fd:03:
                    55:67:bd:ca:d8:69:fc:41:44:94:3b:f9:d9:79:98:
                    e3:0b:5c:16:3e:e4:ee:0e:6a:aa:da:b4:a7:cd:45:
                    2c:f1:52:c5:65:15:c7:30:28:3d:78:f2:66:b3:97:
                    b6:7f:e8:8f:8a:a9:19:21:40:1e:b3:f9:fd:48:e7:
                    34:0c:cf:8d:64:fd:38:76:b8:8c:62:0a:03:04:55:
                    63:0f:1f:0d:8f:82:f8:c7:42:e1:41:e0:da:3d:7b:
                    3e:f6:af:9d:40:ab:8b:78:c3:57:0c:b4:46:1f:39:
                    73:07:79:25:18:a1:0c:3a:04:08:09:c5:18:0e:dc:
                    f9:22:bf:04:bb:03:ee:7d:70:7b:f7:d1:cc:60:2d:
                    da:78:a4:fb:d3:39:36:3b:f1:9c:e6:8f:eb:b3:a7:
                    d9:4d:8d:eb:5e:ed:5d:82:27:04:65:19:83:b5:42:
                    67:12:45:18:6b:32:66:08:45:d6:ca:61:74:a5:9f:
                    8e:27:4d:3e:48:1c:26:31:75:03:eb:a7:2b:13:0a:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C2:36:9C:79:EF:95:67:CC:F5:68:02:14:F7:B3:CF:C9:8A:2F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2eaf5c7-80c4-3f22-bc65-ddfed3b05ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7b:9f:6b:b7:47:dd:f6:43:16:7f:0d:6a:20:2a:25:22:29:
         14:bb:1e:6c:c9:b6:3b:de:c3:14:d8:df:4a:05:19:ed:dd:da:
         f3:68:3e:92:ec:c9:83:62:a9:b0:95:b3:ac:f3:54:41:1a:f7:
         fd:8a:3b:42:01:b3:9c:54:c2:7f:05:8b:9a:1f:02:da:c5:a7:
         a1:57:a4:9d:58:82:f7:3b:55:67:cb:89:a8:cf:55:4d:e0:ed:
         15:5a:ae:cc:37:1d:7a:6a:a5:38:b6:46:09:62:7d:0a:08:7f:
         c5:3e:00:a2:66:da:94:1f:2d:4e:3e:b7:cd:6c:cf:66:8e:9c:
         13:7e:ba:15:cf:98:8b:0d:05:ee:78:8f:99:d6:99:b7:14:8b:
         e4:bc:f5:ed:15:92:0c:3d:bd:c2:b4:be:ad:43:de:67:e0:03:
         ec:9d:bd:7d:d3:e5:ea:55:de:ba:5f:e5:8e:c6:69:68:04:3f:
         44:d2:83:1c:f7:7e:dc:73:bd:1f:07:32:3d:7c:3a:d4:0c:13:
         da:9a:7e:a5:24:f0:04:f6:c8:a3:03:b7:72:af:a8:1f:59:c3:
         e8:74:7c:46:6c:31:ab:86:2e:6b:9d:ef:86:0f:19:88:06:3a:
         84:4b:8e:73:4c:a9:cf:c5:fe:4a:bb:7b:00:d4:e4:db:f5:0e:
         27:f2:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:35 2025 by rpki-client