Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e042032-8bdd-3438-b3be-c7ab35b897f3.roa
File:                     2e042032-8bdd-3438-b3be-c7ab35b897f3.roa (raw, json)
Hash identifier:          P6nzgR9Fu5iBhUYjyUBGnht0qYlg+A01xkuOlfcnjIw=
Subject key identifier:   C1:22:7D:2B:2B:0A:2C:75:C8:4D:8A:FF:4A:DB:B6:94:92:09:70:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA670C76ED60EF450FBF60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e042032-8bdd-3438-b3be-c7ab35b897f3.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396546
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:67:0c:76:ed:60:ef:45:0f:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0c904d70-35ad-4350-afb3-2c11ff38cdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:97:9b:4a:df:0c:30:cb:10:42:ff:97:a2:
                    ad:44:08:09:1e:bf:4d:79:0c:d1:43:54:df:5b:8b:
                    bb:d3:f9:c3:82:ae:06:37:f0:ae:aa:03:04:33:1b:
                    6b:88:11:7b:42:14:ae:66:a1:dc:e4:a7:60:45:a9:
                    c3:03:27:c2:cb:36:32:fa:d2:ac:96:a1:cf:a8:bf:
                    03:b8:bd:04:bf:f2:b9:e0:e4:7b:ad:29:a4:82:77:
                    e9:a5:c3:9a:6f:cf:db:9c:80:22:b5:9a:82:76:b7:
                    eb:21:81:2e:24:08:6d:b7:9c:f0:d4:e1:08:39:ca:
                    39:17:c3:ef:fc:b3:16:ea:e0:30:2d:59:9e:f7:0b:
                    a0:99:a2:f9:c3:57:2c:32:1f:e1:b9:2e:2e:e7:07:
                    96:53:93:d5:3f:b6:09:dd:48:90:a4:4e:3a:79:53:
                    cc:04:51:3b:58:cf:42:d1:ba:50:bf:02:ec:6f:b6:
                    64:a7:86:96:28:8e:a6:61:8f:bf:36:33:19:70:09:
                    12:e7:4d:0c:fa:21:74:8d:6f:a3:7f:82:47:c0:37:
                    b4:1e:08:66:b5:69:a3:42:2e:95:28:92:1d:e4:5b:
                    c3:b2:e1:ab:6f:ca:38:20:12:1b:88:dc:4a:b3:94:
                    27:ca:0c:4a:50:38:c9:52:09:56:4b:1c:d0:45:36:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:7D:2B:2B:0A:2C:75:C8:4D:8A:FF:4A:DB:B6:94:92:09:70:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e042032-8bdd-3438-b3be-c7ab35b897f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:25:92:50:a8:d3:e1:5b:8f:84:48:0b:f9:ac:5a:ec:66:
         7c:b2:c1:97:92:b5:77:66:b0:fb:5c:ae:04:ac:b7:93:05:27:
         b7:4a:a8:11:2d:2e:8d:33:fc:fd:39:e4:06:eb:81:95:fd:38:
         a3:f9:a5:61:d2:0b:d8:a3:c5:aa:f4:8c:60:00:0e:d3:e0:03:
         b7:67:35:58:bd:e5:8d:8a:ce:2e:57:75:f3:c5:49:f1:22:54:
         a4:08:73:b4:8e:62:fb:58:26:63:6c:4c:60:24:e6:85:6d:9d:
         ee:f1:df:3f:71:17:fc:e6:e4:b3:9f:4c:df:9e:96:3b:ee:cf:
         38:8b:0e:21:c0:80:15:0d:f6:53:d9:cc:dc:9e:d0:8f:54:fc:
         78:7d:21:b4:5e:17:f0:56:a3:b4:0c:01:84:88:16:a1:e0:0c:
         f7:71:db:b0:94:13:97:65:7a:52:ec:03:f8:f8:b5:77:4e:ca:
         12:8e:61:30:2d:61:97:0a:3c:08:19:61:a6:f9:9f:da:6b:d7:
         0b:4d:42:90:28:6c:96:cb:73:a0:75:bb:2f:ba:33:d0:d5:f8:
         b5:0a:09:a8:f0:a8:1e:a5:16:95:87:9d:93:34:c9:f4:a8:c4:
         dd:32:94:f5:0f:2c:08:3a:a5:fa:7c:01:fc:3d:04:28:f5:45:
         3e:c1:b2:12
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnr6mcMdu1g70UPv2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
MGM5MDRkNzAtMzVhZC00MzUwLWFmYjMtMmMxMWZmMzhjZGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cmXm0rfDDDLEEL/l6KtRAgJHr9NeQzRQ1Tf
W4u70/nDgq4GN/CuqgMEMxtriBF7QhSuZqHc5KdgRanDAyfCyzYy+tKslqHPqL8D
uL0Ev/K54OR7rSmkgnfppcOab8/bnIAitZqCdrfrIYEuJAhtt5zw1OEIOco5F8Pv
/LMW6uAwLVme9wugmaL5w1csMh/huS4u5weWU5PVP7YJ3UiQpE46eVPMBFE7WM9C
0bpQvwLsb7Zkp4aWKI6mYY+/NjMZcAkS500M+iF0jW+jf4JHwDe0HghmtWmjQi6V
KJId5FvDsuGrb8o4IBIbiNxKs5QnygxKUDjJUglWSxzQRTaOGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMEifSsrCix1yE2K/0rbtpSSCXBaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmUwNDIwMzItOGJkZC0z
NDM4LWIzYmUtYzdhYjM1Yjg5N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBtLyWSUKjT4VuPhEgL+axa7GZ8ssGXkrV3ZrD7
XK4ErLeTBSe3SqgRLS6NM/z9OeQG64GV/Tij+aVh0gvYo8Wq9IxgAA7T4AO3ZzVY
veWNis4uV3XzxUnxIlSkCHO0jmL7WCZjbExgJOaFbZ3u8d8/cRf85uSzn0zfnpY7
7s84iw4hwIAVDfZT2czcntCPVPx4fSG0XhfwVqO0DAGEiBah4Az3cduwlBOXZXpS
7AP4+LV3TsoSjmEwLWGXCjwIGWGm+Z/aa9cLTUKQKGyWy3OgdbsvujPQ1fi1Cgmo
8KgepRaVh52TNMn0qMTdMpT1DywIOqX6fAH8PQQo9UU+wbIS
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:17 2025 by rpki-client