Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa
File:                     29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa (raw, json)
Hash identifier:          kbA+kW8Q28PQEx0t3uI2j5hQ/if1nJpJ1Ef/oimTrF0=
Subject key identifier:   AB:C3:1C:D7:EA:E7:5A:24:F6:8B:7F:30:8D:99:87:84:47:1B:61:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6A80AA0E01FB0CD64E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36624
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6a:80:aa:0e:01:fb:0c:d6:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=19bb3d18-efb3-44b1-98f4-a20a82851611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:f6:e7:df:38:2f:59:96:a3:a8:8a:0f:ca:
                    04:b3:2c:58:5c:15:f9:a5:67:0a:b5:27:6e:dd:50:
                    dd:56:fd:17:6a:61:de:48:e9:4a:78:ad:48:60:08:
                    f2:2d:d7:b0:86:4e:a6:ea:84:c1:93:68:3f:c0:a2:
                    1b:44:55:d0:98:bb:65:e3:ff:40:4d:b4:38:2e:54:
                    13:db:61:c9:d9:d6:2c:7f:72:f8:bb:64:eb:42:1a:
                    90:83:61:f4:46:fd:55:4e:d7:89:b7:19:1d:de:a6:
                    c9:f0:d7:fe:17:2e:1b:6a:a3:e4:34:90:2b:c9:ee:
                    83:7a:15:bc:0c:15:13:7c:0e:78:5b:8e:30:72:48:
                    f4:cb:e3:bc:cb:1d:37:d4:fb:38:07:33:9e:19:02:
                    e9:66:5e:05:17:88:0c:44:b1:4c:85:6a:58:0c:a2:
                    75:42:6d:6a:e9:ac:5b:80:c0:c6:ad:70:07:a6:a6:
                    20:ed:0b:35:78:94:4a:61:a2:b2:9e:5b:fb:89:65:
                    db:90:14:07:7b:39:08:94:19:db:68:c1:0b:02:ef:
                    eb:73:54:a0:a0:75:b8:ce:d6:e5:e0:10:33:a0:f5:
                    35:24:e7:4f:09:9f:77:90:28:ef:76:68:ba:ba:54:
                    48:6b:02:66:07:80:0d:c1:06:7a:c8:cf:8d:d9:16:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C3:1C:D7:EA:E7:5A:24:F6:8B:7F:30:8D:99:87:84:47:1B:61:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29015c21-8a9f-3417-8321-bc3cfe2d8dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:b7:78:e1:ad:e6:46:b6:68:98:e8:86:c1:c0:5a:b8:91:
         1b:42:30:6a:c2:b6:88:08:be:de:a2:7a:f2:20:e9:70:52:bc:
         cf:65:7c:dd:b7:d1:ea:d2:d0:00:c4:6e:66:94:f7:9f:ee:ee:
         20:8b:fb:2f:66:a0:99:9e:f8:0a:88:26:84:51:11:6f:9a:d8:
         0c:64:c6:d8:0a:ea:49:1b:08:ec:ef:ed:37:57:a3:88:37:77:
         f8:e7:5e:e6:da:95:54:1d:8e:c0:99:86:b9:21:81:8e:0c:86:
         64:27:a2:0a:fa:eb:e4:a8:50:86:4a:df:42:ec:67:b1:11:f9:
         e1:ba:ff:c2:5d:47:df:67:ca:e2:f3:0a:ac:b7:ed:3c:4a:dd:
         be:bb:bf:3f:23:d8:5e:e6:a9:e1:8a:e5:2d:53:ba:3e:b3:a1:
         ac:1d:e5:e6:cc:86:1b:a1:0a:0f:4a:1c:00:f5:a2:4b:4f:44:
         bd:43:2b:d5:4e:c7:a0:3d:9b:12:29:c3:95:a0:9d:c9:7e:5a:
         f4:34:74:d2:06:ef:c6:63:01:d0:75:c4:42:57:f3:e1:2b:06:
         75:df:b3:a1:c2:5d:83:1b:b5:13:ac:a5:2d:85:2c:94:5f:63:
         6d:38:99:71:33:d2:6b:5a:f4:7b:23:79:ad:33:3f:4e:55:d4:
         6d:02:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:37 2025 by rpki-client