Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa
File:                     397024ef-0405-3c32-9613-6a5b37c11f6f.roa (raw, json)
Hash identifier:          uPPy9Iziv016PV1EeBoTIrkbuRH9Qw0LAd7QCUJ7ExI=
Subject key identifier:   7F:B3:09:64:20:D7:AE:9C:E6:F9:89:C3:4D:A8:67:91:26:B3:F5:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7D817AFB5E3D0937B180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396565
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7d:81:7a:fb:5e:3d:09:37:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=baf1586f-cbec-486c-bb9c-44ec2623b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:aa:ec:c0:fc:d0:28:67:17:84:fe:e0:07:
                    17:68:a8:24:75:17:46:82:fb:40:5f:d9:f7:bf:ef:
                    f6:59:35:3c:be:ae:b3:6c:ae:94:f3:46:7a:22:90:
                    99:c1:45:61:3e:1a:ae:0b:b9:0a:f2:01:9d:8e:25:
                    fe:df:49:aa:a2:5c:a0:c6:fe:1e:28:b7:50:ce:a4:
                    48:92:26:3e:e4:bf:8e:14:a1:d0:72:76:87:11:c1:
                    88:8b:c8:f5:71:40:35:9e:97:d4:47:b7:7f:67:a1:
                    74:d7:e9:0e:79:f5:d8:46:2f:2d:d9:c5:cf:a6:9d:
                    6a:4c:c9:96:63:1f:9e:fa:14:cf:81:88:2f:3c:5b:
                    1b:04:d3:dc:1b:04:25:1e:05:da:81:1c:22:7d:07:
                    4c:de:58:50:1c:83:c2:23:28:b8:5a:13:8a:c2:13:
                    54:70:63:5f:ca:d5:22:bd:01:c9:44:d9:f1:2f:ac:
                    28:64:ab:77:d7:48:af:3d:13:0d:29:d4:b0:a0:06:
                    bb:cf:2a:75:78:9a:ab:ea:89:c3:a8:7b:24:e7:35:
                    9c:90:0a:72:bd:93:88:fe:59:cc:bb:70:72:f3:3f:
                    25:5d:fa:ca:4c:85:68:52:a0:e3:45:6a:7c:24:4e:
                    db:8d:bc:0d:93:49:5a:45:9e:04:94:35:73:6f:75:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B3:09:64:20:D7:AE:9C:E6:F9:89:C3:4D:A8:67:91:26:B3:F5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:d2:fc:9e:5a:84:28:ac:c0:fa:f4:bd:41:8a:f7:b5:30:
         29:c6:c8:7e:48:98:f6:b6:33:ad:34:da:d8:06:bd:66:5f:5a:
         fd:a4:b6:77:38:2b:91:97:70:b6:aa:fe:73:ed:a9:c9:ab:4d:
         23:fc:6b:cf:0b:d7:2d:4c:b4:b8:30:4d:f7:96:fd:8d:6e:81:
         b8:a2:95:c4:27:50:e2:1b:73:2c:d1:f5:e5:38:30:30:2d:ad:
         57:96:5c:c4:60:c1:f6:96:3e:3d:7f:91:c9:ef:f3:e3:76:95:
         d4:36:07:2a:f4:ee:51:cc:1b:36:a2:eb:cf:bb:6a:dc:47:3c:
         cc:17:43:67:f3:b5:d3:7a:33:61:c7:8a:56:e0:b3:fb:ba:08:
         83:8e:6e:9b:61:06:ef:d3:93:6d:57:93:e5:d6:95:39:60:0a:
         75:e6:f0:36:57:f8:24:73:26:d2:fd:ad:ae:a5:3b:9e:68:ac:
         57:3f:0b:41:69:17:95:67:b8:8f:d2:54:a3:13:cd:3e:7a:29:
         67:6a:ec:ef:a4:5c:02:fc:f5:e9:5a:25:9d:f6:0a:d0:d5:2e:
         d0:f8:99:c1:f3:ae:e1:04:c2:ba:a7:03:18:76:fa:38:94:7a:
         dd:c9:f1:f5:03:fd:48:da:2e:f8:48:36:cd:b5:8f:0f:f3:c9:
         9c:3f:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:54 2025 by rpki-client