Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aba26b-be45-3973-9cbf-0384d926dee4.roa
File:                     27aba26b-be45-3973-9cbf-0384d926dee4.roa (raw, json)
Hash identifier:          k7anfjplkN1qdYKTqcsLtEy3Izy8AUx9an1Bklu0/4I=
Subject key identifier:   26:74:F6:90:D8:46:DB:CF:E0:5E:D8:EB:08:23:63:A5:51:80:6D:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B62FB5B8A2B1E5CF4CE080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aba26b-be45-3973-9cbf-0384d926dee4.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     396596
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:2f:b5:b8:a2:b1:e5:cf:4c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=6b49f7f4-c989-4a38-998a-79acd3abdb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:00:2b:38:db:8a:63:97:25:7a:85:df:f4:
                    5e:97:dd:ef:24:7b:80:d5:5b:22:e3:4f:9e:b9:af:
                    b6:bc:c8:3b:24:45:71:0e:65:f0:bf:e0:c0:9d:da:
                    2e:82:5a:91:cc:3c:61:92:b9:cc:59:37:ef:bb:4e:
                    fc:e6:bd:a8:d6:b2:e5:11:e4:43:58:17:e5:b0:04:
                    1c:3b:b1:ee:83:24:52:e2:ad:3a:1a:f2:23:0b:93:
                    37:34:0b:73:e4:50:dc:5d:19:b2:67:f1:09:d2:5b:
                    e0:62:af:57:bc:83:08:26:72:1e:59:cb:1e:55:2e:
                    75:c1:6b:0a:c7:d7:16:96:0d:03:9b:2a:97:77:1f:
                    96:bc:6e:07:4e:2a:44:ec:31:f7:3e:62:e5:f9:73:
                    4d:4b:5a:0f:5a:79:d4:a0:96:9b:c0:bd:47:cb:71:
                    cf:f3:3e:59:fe:01:81:04:83:d5:35:93:59:de:ce:
                    d5:f0:e1:f5:9f:a0:a9:94:51:f7:16:f4:50:12:3b:
                    19:bd:18:48:1d:82:c0:db:49:0c:b9:a7:ca:12:90:
                    79:70:17:9c:5f:9f:44:9d:5d:0f:ba:7a:ee:4a:52:
                    4b:d0:34:ad:19:40:bf:d1:f7:f1:db:2d:15:c3:5f:
                    91:66:ed:a3:b1:bc:37:bf:1b:00:a6:b2:3e:87:5c:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:F6:90:D8:46:DB:CF:E0:5E:D8:EB:08:23:63:A5:51:80:6D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aba26b-be45-3973-9cbf-0384d926dee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:03:a2:e3:3d:1f:0e:cf:39:01:fa:f7:38:d9:ef:12:aa:
         07:a6:c1:d5:78:de:b9:cb:95:b7:b9:88:44:3a:3d:c3:84:26:
         d7:b6:a2:2f:17:9f:9e:c5:e3:83:1f:34:3d:b9:61:07:4f:76:
         72:03:ce:02:b0:66:80:ca:ff:15:f2:41:9c:64:84:b9:b7:e3:
         0c:21:ed:30:59:60:b1:14:63:80:7c:32:ca:3d:f9:fe:f9:95:
         ff:a8:61:4a:27:3b:4e:70:dc:0a:b1:28:15:3e:f7:06:88:d8:
         01:f7:6c:36:29:d1:9f:35:0c:6e:15:70:2d:3a:34:e3:a4:1b:
         29:aa:80:8c:95:3a:ab:11:2e:57:00:63:c0:55:55:7e:b3:6d:
         87:16:a4:12:77:ce:e9:01:7e:3c:e6:c3:88:f8:c4:67:42:33:
         e8:a7:e9:7e:fd:d4:bd:9b:39:73:c4:36:74:1c:a7:3e:78:d5:
         f3:a6:d6:d0:4e:ec:bb:e3:90:0c:ad:f8:7e:75:62:f4:3b:95:
         7b:44:83:65:64:9b:76:61:f6:12:b4:01:27:a0:05:11:16:2d:
         d1:0f:93:e0:88:2b:bb:dc:cc:c0:4c:73:f1:0a:c4:80:7b:6e:
         2c:e6:0e:f4:23:b2:d5:7a:13:26:9b:ce:da:be:d0:27:8b:51:
         c9:ed:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:10 2025 by rpki-client