Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f771e154-c68c-3c3e-8e9a-9199dbd72e82.roa
File:                     f771e154-c68c-3c3e-8e9a-9199dbd72e82.roa (raw, json)
Hash identifier:          iKnaZz7T7hE3UA2WM05gzdVAct1yyJMKgNtEJOWLPwA=
Subject key identifier:   E8:1A:2D:D3:9C:7A:37:A4:89:27:65:C0:D1:93:D3:8B:8C:84:FD:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCCA9D7464C1CD343E4E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f771e154-c68c-3c3e-8e9a-9199dbd72e82.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396683
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:ca:9d:74:64:c1:cd:34:3e:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=d218b59c-23e7-4790-ad21-760e29686a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:f0:06:26:a1:d2:bb:d6:b5:2f:9d:43:cc:
                    b2:18:54:b4:fd:56:b6:6e:bc:8f:cd:e5:bc:5b:6f:
                    80:4b:2f:6c:b0:18:4a:11:45:86:5e:09:69:69:74:
                    1b:7d:74:b2:af:09:c5:62:64:f1:a8:17:9e:04:0d:
                    14:3b:12:a7:fc:91:ce:bc:68:fa:9c:18:9b:53:05:
                    77:dc:ea:66:40:bf:0d:3e:70:11:e3:de:55:62:91:
                    cd:90:ae:d4:6f:b5:8b:fe:4e:2a:09:8e:39:5f:4e:
                    2f:b3:45:c9:de:1d:33:7e:92:50:60:10:36:c4:50:
                    35:a5:17:8c:ac:97:5f:7b:a7:89:11:f9:69:16:65:
                    6d:e4:20:2b:34:c0:ad:24:9d:7b:d4:25:8f:b2:ee:
                    98:dc:27:e2:86:c9:c4:3a:1a:30:ca:dd:6c:0c:f8:
                    68:de:4b:7b:59:d1:5b:58:89:4f:b1:4c:2a:5c:e0:
                    60:ec:81:52:07:e6:05:0d:89:6a:af:15:75:c5:08:
                    0a:e9:70:92:66:6e:64:fd:0d:63:95:6b:fc:5f:c9:
                    37:35:94:65:34:24:89:f9:f1:3b:42:71:ed:1f:dc:
                    e8:0a:a2:f7:f9:2c:cc:5a:ad:2b:fe:37:e2:57:73:
                    b7:73:16:78:8d:38:a8:5b:cc:d3:9c:db:67:e6:63:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:2D:D3:9C:7A:37:A4:89:27:65:C0:D1:93:D3:8B:8C:84:FD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f771e154-c68c-3c3e-8e9a-9199dbd72e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:59:1b:89:74:29:01:b8:8a:d9:e8:e5:fc:a5:49:aa:51:ee:
         f8:37:75:d9:b3:63:50:27:6d:97:0d:b7:2f:fe:36:75:33:cc:
         e1:f7:b1:b2:98:9c:7c:4f:a8:2b:21:0c:8f:46:b4:54:5a:b6:
         95:7e:f7:3b:ae:8e:42:93:e8:6a:57:6b:88:de:ae:91:72:59:
         4e:9a:db:0e:0a:36:4b:ed:c8:e3:00:93:c8:a8:88:b0:56:44:
         cd:32:d4:76:66:7f:01:51:cb:7d:1f:e6:cc:d0:a4:a9:af:f4:
         d9:d7:c9:9a:d7:0a:fd:10:0b:e9:00:92:de:ac:6f:47:e8:2c:
         f7:d3:9c:9a:a9:b4:f3:e5:1f:b7:82:97:b9:f6:f7:9d:ef:21:
         f8:dd:a7:66:44:9a:f3:56:ae:63:f3:bf:e3:44:c9:15:2d:4a:
         99:d6:45:3a:e4:90:92:9b:ce:4f:f0:ac:83:fb:bf:8b:8b:5c:
         7f:44:d2:4c:16:e0:cb:87:81:44:ba:5c:de:a6:e9:ed:03:06:
         ca:d6:82:1f:04:35:5e:40:77:03:e2:79:ff:41:b2:1b:ed:c4:
         9a:ef:a4:17:d4:d0:1b:25:f2:c9:38:a9:c0:e8:b2:1b:03:4b:
         8e:35:d0:81:85:e5:01:f6:eb:65:76:aa:d3:7e:47:62:bd:3f:
         16:f7:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:00 2025 by rpki-client