Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1f2588-d6bc-3637-b624-24e4d075166e.roa
File:                     4c1f2588-d6bc-3637-b624-24e4d075166e.roa (raw, json)
Hash identifier:          m4LGoYBdJjR8EioXMCej7AtVnlf4XtkH+KsCLvMjOiQ=
Subject key identifier:   9C:73:60:AA:5C:2A:A2:89:1A:B9:90:CD:F6:A3:B5:35:F7:12:CE:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA747DC09B6AE5A2BAAF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1f2588-d6bc-3637-b624-24e4d075166e.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36626
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:74:7d:c0:9b:6a:e5:a2:ba:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=51bda819-273f-4653-b675-24741dad4775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:14:e1:2b:10:64:68:53:eb:e2:56:a5:e4:
                    72:f2:80:38:64:5e:b8:82:45:bd:43:5c:4e:7d:f4:
                    94:62:94:7d:c2:d7:1c:29:2e:ad:a5:18:52:aa:66:
                    c0:86:c4:ed:fe:a7:40:0e:c0:89:21:8b:df:19:1e:
                    ad:8a:72:16:aa:ab:89:2a:df:61:1c:e9:39:39:a3:
                    62:f3:e8:cf:df:cc:61:de:9f:68:0c:0d:57:30:a9:
                    f6:5f:98:b6:4c:b0:ca:f0:39:f6:2a:01:c0:c0:75:
                    26:8c:fe:45:36:36:c1:14:d8:4c:1a:50:f3:8e:fd:
                    6d:41:f9:a3:64:7e:13:74:25:3e:e8:b3:cb:d2:ac:
                    4d:73:d5:ea:d3:6d:8f:d1:a1:7b:08:fe:c4:c6:82:
                    b2:8e:3d:a5:17:de:57:34:e7:80:6d:16:4d:cb:bc:
                    5e:19:ec:95:15:01:d5:38:a9:ec:9b:fb:a5:db:02:
                    c1:68:5c:3b:cf:03:56:e3:34:82:4b:b4:02:4d:c7:
                    6f:18:4f:96:ca:4b:cc:4d:ee:40:ed:de:90:67:85:
                    2e:88:91:6c:d3:43:d6:68:95:6d:95:0c:54:41:39:
                    18:71:f4:3f:b9:04:f7:03:a7:30:86:d3:25:f4:41:
                    6b:7b:ec:c4:88:df:c4:0b:91:7f:a5:05:b0:f4:37:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:60:AA:5C:2A:A2:89:1A:B9:90:CD:F6:A3:B5:35:F7:12:CE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c1f2588-d6bc-3637-b624-24e4d075166e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:33:5f:d0:5a:ac:fc:b7:ab:7c:f1:8a:5e:7b:b4:59:4e:3b:
         39:2c:45:34:fc:53:c2:9f:e6:03:8b:df:f5:83:b1:33:05:11:
         10:7c:15:40:3b:29:1a:26:79:54:74:45:38:bc:0e:55:56:be:
         90:7b:4a:5a:ef:34:cd:b5:07:b3:74:e0:3a:b0:c5:34:f0:b4:
         c7:5f:2d:72:ff:a8:18:83:da:a4:08:04:f5:33:db:ca:ca:24:
         01:5c:62:89:11:d8:8d:d9:bb:74:44:d0:78:fc:11:8c:11:53:
         8f:78:ae:28:93:3d:f4:47:79:ba:d9:20:37:19:5a:ba:33:df:
         1a:8f:7d:4a:3f:29:db:10:4d:6c:ec:e3:49:f9:e6:09:da:71:
         5b:68:d4:e1:9b:7b:c4:93:66:bf:68:ca:90:50:b6:fa:57:1c:
         6c:45:72:0d:69:df:68:91:2b:d0:55:da:34:73:5e:36:2c:0e:
         eb:63:d4:55:15:9e:dd:57:4e:61:89:a4:09:09:d2:1f:3e:ce:
         eb:8e:13:f4:40:cb:b5:4f:d1:46:1c:8a:84:4c:9f:5d:f4:9c:
         7e:79:90:9c:b6:4d:20:07:ec:49:a1:6c:e9:c0:38:33:75:a9:
         be:de:31:4c:ca:df:f3:9c:69:6a:dd:11:1f:8c:89:ba:2c:2e:
         44:49:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:51:41 2025 by rpki-client