Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22964371-9a5d-37bc-af00-86bc2a14a699.roa
File:                     22964371-9a5d-37bc-af00-86bc2a14a699.roa (raw, json)
Hash identifier:          du2vr/TStDI0/FCX0bEVa8YYKcq+kBrU40Svtmepays=
Subject key identifier:   56:D3:05:7D:52:BC:27:B4:47:FE:92:DD:82:72:E1:9F:25:9B:FA:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7295DC977F263F03F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22964371-9a5d-37bc-af00-86bc2a14a699.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396549
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:72:95:dc:97:7f:26:3f:03:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=e6a1005e-d374-4d7d-bd9f-40ccea90efb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:2b:4e:41:9e:a6:6f:e9:89:05:ed:eb:1b:
                    98:cb:7a:e1:00:1e:84:7d:11:e9:bf:e9:ee:42:c8:
                    03:64:83:a3:b8:9a:2e:d3:67:85:11:d5:46:f6:85:
                    3d:2e:96:49:dc:1f:6b:8f:76:7a:b7:82:9c:8d:15:
                    03:55:a2:4a:8b:0a:3a:2d:e0:d2:3b:5d:90:ba:30:
                    59:ea:51:b6:2b:7f:9f:c6:4c:dd:21:a5:a3:6f:b5:
                    83:49:54:86:09:9d:c0:e2:61:9b:9a:ce:09:18:5b:
                    4c:2e:ab:79:43:f1:f5:50:92:6c:ef:1b:5f:3a:1a:
                    b2:a3:f6:a3:22:ff:0d:3e:33:8c:27:6a:46:7f:65:
                    5c:6d:65:e6:91:70:cf:0b:db:79:df:ec:d8:cd:0e:
                    c4:8b:49:bd:f2:8a:a1:06:aa:57:86:87:86:9a:90:
                    c1:d5:49:14:0b:0c:b7:2d:a6:03:93:94:04:16:44:
                    cb:a6:14:35:7a:03:78:c5:14:c0:ee:00:6f:ae:f5:
                    80:0b:3b:69:49:e8:fa:b0:4d:6c:85:58:57:69:82:
                    cb:66:38:81:9e:39:1b:06:63:4b:87:4d:56:e8:be:
                    26:a3:f2:d8:e7:51:0f:26:5f:31:3a:c4:cc:5c:33:
                    18:75:8d:74:7c:3a:e6:4e:05:13:9b:04:70:56:ed:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:05:7D:52:BC:27:B4:47:FE:92:DD:82:72:E1:9F:25:9B:FA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22964371-9a5d-37bc-af00-86bc2a14a699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:68:3e:77:ec:c5:bf:34:ae:d0:e8:1b:ac:e2:26:a9:cf:45:
         07:62:5a:a0:2c:5e:c5:ec:ec:64:cb:ec:77:4c:38:0d:28:51:
         69:75:f6:2e:96:97:f3:8d:7b:3a:3c:b6:9a:f9:39:17:c1:81:
         b7:71:4a:c3:13:b4:01:c1:2b:19:e5:5c:52:af:d2:99:32:51:
         ff:8b:4e:a4:7c:8f:6a:99:37:0a:5c:32:53:1e:73:a8:8d:13:
         a8:89:e0:cd:eb:a4:5d:54:a8:b5:58:49:e3:f6:ff:07:14:de:
         e4:4a:5d:1d:ac:17:c6:8a:15:a4:90:b7:99:14:93:90:e3:5e:
         74:d0:54:c1:de:fe:ef:f2:81:58:17:52:30:4d:f9:bb:62:0c:
         02:7b:5e:4f:ba:50:70:40:27:28:a5:81:b5:54:fa:6c:55:f4:
         42:d2:8e:f8:ec:b2:5b:f5:b4:01:e3:27:43:59:63:28:e5:f9:
         23:a9:0a:af:4e:e2:14:f1:36:4f:6c:09:df:ab:4f:ad:2b:ad:
         91:5f:6d:61:5c:fb:ef:f9:f5:63:f1:46:b6:e0:ee:82:2e:e0:
         f2:e6:d7:cd:94:28:c2:f4:86:53:89:8d:b3:59:8b:59:20:d4:
         b5:df:c6:93:43:30:ce:ea:13:54:7c:f3:ff:ad:4f:ff:74:a8:
         db:0f:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:52 2025 by rpki-client