Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0645cbeb-285f-36f9-99ab-d4aa27896761.roa
File:                     0645cbeb-285f-36f9-99ab-d4aa27896761.roa (raw, json)
Hash identifier:          uwt7Gc+C92p8WKjQVyhK9TrqTM78D73Wf79aefwY0ZI=
Subject key identifier:   26:29:8D:36:C0:99:AE:7C:8A:62:7E:2F:F8:68:0A:1C:71:9A:EE:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15E990AA9C648EC2FB3A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0645cbeb-285f-36f9-99ab-d4aa27896761.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396540
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5e:99:0a:a9:c6:48:ec:2f:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=d68b8258-6cc2-47ce-8082-4a911ee26558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:62:2b:35:c1:01:ab:0c:8b:85:c2:15:cc:
                    c5:6a:2b:40:57:5f:20:d6:0d:9e:69:4f:5e:18:ad:
                    ab:9e:a0:d3:1a:f9:3d:79:28:56:3b:30:57:b5:af:
                    ab:e2:55:b2:22:14:69:60:9c:39:10:34:e8:0a:98:
                    e1:f3:34:b5:a8:23:aa:a1:b6:6b:b5:69:97:1c:ba:
                    7d:58:5a:25:fd:03:57:3f:0d:5e:b2:7b:8a:e5:87:
                    19:6c:67:92:5a:5f:68:2b:c4:8d:50:39:c1:2b:fa:
                    69:13:c5:0e:04:93:bf:5a:43:68:80:e5:27:eb:04:
                    25:dd:fb:87:85:90:71:05:36:29:8a:e3:08:06:b2:
                    c6:5f:73:27:32:52:06:fe:30:d5:98:0c:22:f2:9e:
                    11:6e:ec:31:e3:e2:70:b2:56:33:7b:27:0a:27:c1:
                    74:2a:1f:ee:75:54:4f:ba:f8:e5:20:9a:19:76:56:
                    d0:e0:45:1a:ce:af:91:5c:bc:19:91:a0:3d:17:56:
                    25:9a:d9:84:ad:cf:d5:ab:54:14:12:8d:98:aa:a4:
                    6b:cf:ce:35:76:96:ec:ae:b6:19:cb:0d:5e:8b:20:
                    0f:8b:e6:e1:3d:de:ff:c9:63:8b:3c:62:c1:cc:ce:
                    2f:98:84:48:f4:86:7e:a8:79:aa:8a:bc:b0:b4:5b:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:8D:36:C0:99:AE:7C:8A:62:7E:2F:F8:68:0A:1C:71:9A:EE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0645cbeb-285f-36f9-99ab-d4aa27896761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:ce:18:87:9f:40:14:3d:97:6b:03:58:1d:dd:14:96:41:
         64:ee:e1:43:fb:d9:8b:e2:23:76:0e:91:1e:a1:f6:1b:0a:d7:
         2c:ab:af:43:f7:0c:fe:aa:ca:25:fd:a5:1a:9d:74:98:6a:2c:
         0b:e7:7f:41:d6:0c:df:3f:f2:22:a7:65:31:4f:89:11:4e:42:
         59:a3:23:d7:f2:e8:6f:b6:93:84:e4:d6:6d:6d:9a:99:a5:47:
         43:a9:ec:07:0e:ac:c0:da:3c:3d:29:2d:6a:06:8b:4f:f5:25:
         18:4e:15:7e:e3:a8:50:0c:1a:ff:6f:e6:bf:a2:a9:1e:4e:27:
         3f:1a:43:61:5f:b2:9c:8c:d6:05:1d:2d:51:65:a3:7f:86:8c:
         d4:09:e2:2f:ca:a5:94:7b:92:c0:ff:97:19:c2:a2:00:c8:51:
         15:6a:fb:66:68:c3:53:83:e7:de:fb:fa:fc:b2:31:35:41:2c:
         e6:44:76:e4:56:9e:50:c3:20:3d:7e:5b:e1:fb:de:10:cc:e2:
         69:86:21:8a:bb:53:df:3e:81:58:ce:f3:a2:50:41:b5:ed:74:
         16:76:18:4a:03:35:f0:c9:a9:a6:38:31:59:ea:f5:1f:88:f1:
         6a:86:f8:7c:06:0d:72:f4:b4:33:51:c9:98:d7:6b:09:2f:10:
         2d:55:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:53 2025 by rpki-client