Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/183250be-c5dd-3d23-92b6-37e112078ce5.roa
File:                     183250be-c5dd-3d23-92b6-37e112078ce5.roa (raw, json)
Hash identifier:          gblBCUKXxOlp6hjmDao/sfRu3fF3eTl41VOn2R2WNFg=
Subject key identifier:   98:0D:2D:FD:90:49:48:9D:E4:55:8C:4D:7A:D4:4B:07:FC:EB:1F:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB1532B56D0F0A5E0953FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/183250be-c5dd-3d23-92b6-37e112078ce5.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396602
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:53:2b:56:d0:f0:a5:e0:95:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=c87e4ebc-89dc-44cc-994b-265879237b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:f8:65:c7:2c:5e:10:00:54:29:5c:e1:0a:
                    51:03:4d:7a:31:d8:d6:17:07:38:64:bf:68:45:7a:
                    25:89:de:c2:e4:e8:22:3d:82:b0:08:81:86:7a:bc:
                    69:42:79:e6:c7:07:58:58:d6:48:33:00:27:db:57:
                    a3:6d:a8:be:21:c7:d0:cb:03:9e:1c:f6:e7:cb:9d:
                    9b:5f:81:24:76:73:0e:ca:f4:c0:29:b3:4d:f3:3a:
                    91:db:99:82:80:17:42:ef:82:cb:ca:a9:4a:55:fd:
                    ea:fa:0c:33:c5:b4:c0:f5:bf:05:8d:4d:8a:36:25:
                    87:c9:92:f8:0a:85:05:f9:0e:72:e6:c0:78:d2:f1:
                    fd:11:b3:42:85:a5:7b:80:b2:91:d7:86:83:8d:2d:
                    d0:d6:db:ce:63:72:1a:6a:8f:40:ee:4f:32:fb:af:
                    b5:50:c1:8d:c9:d5:87:a4:60:fd:31:13:7f:16:31:
                    6f:aa:6c:3f:0d:76:65:01:b5:1b:23:03:a1:7f:d3:
                    68:5b:f8:a8:03:b6:83:b5:b4:bb:f0:8d:e9:8d:5d:
                    1c:16:13:05:0e:2d:6e:7b:b1:72:79:1b:db:99:5d:
                    0b:bf:fc:57:31:c5:6b:4f:fa:15:28:09:96:81:f9:
                    f1:37:c5:35:60:90:16:90:fd:c9:58:0c:68:28:bd:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:2D:FD:90:49:48:9D:E4:55:8C:4D:7A:D4:4B:07:FC:EB:1F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/183250be-c5dd-3d23-92b6-37e112078ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:70:e4:68:63:ae:7e:ee:87:09:53:b9:de:6a:c5:84:45:e6:
         66:63:df:41:aa:bf:5b:b8:82:10:e6:ef:1d:ec:a6:8c:76:a1:
         fd:ee:fa:69:bd:74:76:c2:e7:5d:42:79:71:2e:ec:1c:cb:81:
         55:53:e2:de:8b:48:37:3a:be:32:a6:c3:2d:c7:18:61:2a:05:
         eb:78:4b:16:18:17:48:97:7a:e3:1a:71:74:4d:d4:c6:57:ec:
         3c:c9:45:ee:62:f4:f9:a1:09:5f:f4:c2:78:e2:61:df:57:a7:
         29:bc:a8:6e:80:75:21:95:98:d3:54:55:d1:bd:9b:26:0f:4f:
         39:cf:f9:51:c6:04:20:fd:4f:63:83:9d:ee:a1:34:44:ff:c7:
         76:9d:8b:eb:b8:27:e6:e7:42:3a:34:33:b1:db:15:22:13:2c:
         a7:80:69:12:e0:b8:6c:82:81:aa:62:d2:92:de:33:f6:3d:7c:
         36:bd:ee:0f:43:1b:04:58:7d:ff:63:d5:a3:3b:ee:f5:a5:d8:
         90:2e:52:6d:80:a5:de:6b:f6:eb:a9:77:b5:12:7a:ba:31:d5:
         27:7f:a8:79:d2:9b:18:e5:0d:c3:14:42:c0:1c:cb:b7:86:1d:
         1a:5f:3b:01:ec:ba:4c:b0:00:ff:53:3c:ce:e8:19:2d:a6:f0:
         d2:30:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:21 2025 by rpki-client