Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336b11d2-3dad-37dd-9175-7bfa03857980.roa
File:                     336b11d2-3dad-37dd-9175-7bfa03857980.roa (raw, json)
Hash identifier:          i+UY06lLOxfDCLo/+N9/Y2L34CV3m1ZjC+fzJrMBaF4=
Subject key identifier:   5B:D1:B0:7A:D4:6D:FF:5E:F4:68:53:2B:2F:8C:3D:75:82:A5:4C:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA79E4182EA4E25A973300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336b11d2-3dad-37dd-9175-7bfa03857980.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     397201
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:79:e4:18:2e:a4:e2:5a:97:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=8d4ebb2b-303c-48e4-917d-7f3ebf2cbd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:1c:cb:fe:48:53:b8:87:62:93:ec:24:0b:
                    46:c5:74:fa:27:d4:f1:16:ad:ff:93:70:6b:95:e7:
                    d1:d6:d1:80:fb:ae:c9:97:e2:fb:b3:90:49:58:f3:
                    3a:8d:3f:b4:9c:7e:5f:80:e3:8c:dd:f2:09:0d:da:
                    28:64:72:62:68:3b:56:9d:e2:31:ca:ef:cc:6b:b4:
                    3c:01:54:5d:63:d4:fc:09:cd:78:0d:89:f8:a5:de:
                    6b:ff:c3:b7:4f:f6:43:8c:f7:15:87:4c:7b:97:67:
                    65:e5:83:b3:e8:91:00:84:63:be:e5:27:b9:8c:91:
                    2c:f8:c9:43:73:aa:f9:dd:eb:4c:95:fd:21:10:fb:
                    0f:76:c1:59:49:8c:bb:62:cd:65:a9:ef:6a:6a:9c:
                    84:eb:0c:08:43:b6:c4:91:49:93:ba:e7:f0:7b:1c:
                    fd:2b:c1:61:d3:ab:59:07:31:39:fe:34:3c:43:90:
                    35:64:3f:20:58:d2:74:ba:8d:29:83:94:59:fd:fc:
                    23:3d:17:74:45:43:05:da:ee:8a:48:89:44:c8:af:
                    27:41:ce:c8:c7:98:c2:a7:d8:dd:ad:79:d1:65:12:
                    a4:60:6b:ef:c0:44:e1:4c:e0:16:51:9b:c1:bd:49:
                    34:8d:31:f8:f1:1a:85:8e:57:80:fe:76:19:bc:ba:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D1:B0:7A:D4:6D:FF:5E:F4:68:53:2B:2F:8C:3D:75:82:A5:4C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/336b11d2-3dad-37dd-9175-7bfa03857980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:8f:ca:9b:20:0e:20:13:6e:96:b1:3d:c6:e3:e3:4e:00:e6:
         72:d6:5c:7b:4e:69:ef:01:a4:b6:f8:34:32:85:00:53:48:37:
         dc:87:09:6d:a0:12:c9:63:1b:79:fc:92:b3:27:96:63:31:71:
         62:05:a1:d5:d5:bc:a1:47:b6:3b:fe:dd:25:47:0f:77:cb:50:
         4f:53:a6:27:c8:b9:94:c0:79:20:67:dd:5b:2e:19:8a:2f:a8:
         1c:e9:56:4f:ae:6f:27:02:7a:a3:1a:6e:1d:3f:67:ed:a9:93:
         64:7d:bf:7c:32:ef:0e:e2:ac:83:52:d9:5d:7e:fe:71:0a:a7:
         3d:fc:fb:d8:08:d9:56:a6:3d:50:72:44:25:89:0e:16:74:65:
         07:ec:0b:ff:db:14:e0:c6:f7:33:62:df:53:53:9f:59:74:76:
         13:80:f6:ca:1d:e5:c5:88:95:69:b6:ec:6a:88:aa:f3:03:57:
         61:91:b9:45:2d:85:c5:9a:ed:c5:53:63:26:a5:70:7f:dd:b2:
         ca:f9:1b:b2:b9:de:60:e4:a4:06:0e:38:88:96:ec:47:78:c6:
         e5:56:71:5d:a4:80:b1:eb:13:11:e7:fe:a7:a7:36:ec:8d:3d:
         19:6e:1a:3b:0f:ec:da:3a:00:2e:2a:c8:76:fa:9d:c8:83:f0:
         ed:b4:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:03 2025 by rpki-client