Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4deab89e-4246-3c7e-a7c1-11ebf6223325.roa
File:                     4deab89e-4246-3c7e-a7c1-11ebf6223325.roa (raw, json)
Hash identifier:          GZtn0ENHN48VYVDGw+YrBcThREudYFovivkExVoELKw=
Subject key identifier:   64:80:3A:E3:DA:27:6F:D9:27:2A:9B:EB:17:57:25:00:41:C7:58:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB148FE03FA633182D39E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4deab89e-4246-3c7e-a7c1-11ebf6223325.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396575
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:48:fe:03:fa:63:31:82:d3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=ce103d6f-70fd-42e7-a734-a01df4c44858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:97:6a:f6:bd:57:1c:70:55:f8:88:35:5f:
                    88:00:79:cd:5e:29:0d:07:63:81:b7:df:e6:99:a7:
                    c3:43:95:6a:fb:b0:bc:e6:dc:49:18:31:20:a3:6b:
                    42:68:08:40:c1:49:64:a1:49:3b:a3:56:10:26:44:
                    45:b0:da:17:07:87:31:60:c8:39:6a:b6:53:ad:7f:
                    57:df:a7:65:f6:40:5b:97:d1:12:5f:4d:84:76:02:
                    e4:b8:ee:10:36:d0:a0:d3:87:a8:87:a4:05:05:d0:
                    fe:24:41:3a:aa:37:c0:c2:ae:ec:36:0e:dd:91:87:
                    15:a1:16:da:48:cf:8d:79:1a:bc:65:11:60:12:97:
                    36:0a:75:70:3a:8c:2a:43:0b:c9:ab:e6:6e:01:68:
                    ac:b5:98:ed:8d:11:01:4c:93:d7:1a:98:82:f7:22:
                    76:b5:20:35:28:3c:ab:07:45:01:d8:09:cd:dc:9f:
                    40:78:5c:b6:b9:e2:59:23:37:9c:7a:19:b1:81:97:
                    a8:da:64:c4:31:ad:53:a7:a4:8f:e0:ea:99:04:33:
                    9c:e8:a4:26:13:0f:60:8a:86:6f:d3:ac:09:b8:e3:
                    0e:5c:96:af:84:57:3d:f0:a7:9d:7c:b0:b3:ae:15:
                    2f:94:47:74:20:ea:59:25:02:d9:30:4c:8c:43:28:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:3A:E3:DA:27:6F:D9:27:2A:9B:EB:17:57:25:00:41:C7:58:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4deab89e-4246-3c7e-a7c1-11ebf6223325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:67:08:70:be:98:cc:d9:18:71:3c:17:b3:01:05:ef:5f:
         29:da:7a:00:09:bc:d2:66:2a:9a:6c:94:3a:e6:66:c0:88:06:
         5f:9f:2a:66:23:2c:18:44:97:d7:bb:6c:23:de:ac:1e:1f:5c:
         ca:44:d7:4a:87:dc:b8:c0:7e:53:bb:cb:f2:96:3d:39:44:64:
         35:96:59:e0:62:72:e0:51:22:7f:76:62:13:be:a4:b0:54:1a:
         ff:a9:0a:3d:21:25:95:e6:85:bc:63:e8:b0:64:c0:b5:16:7f:
         7c:83:16:3e:a1:80:8f:23:d8:d4:fb:fd:b4:ce:a3:fe:ed:81:
         cc:8d:1d:57:53:7c:63:78:7a:40:9d:b3:ae:f5:7c:5c:cf:ca:
         4e:fa:b3:2b:52:96:bb:ac:b7:18:de:c2:59:4c:d4:43:59:96:
         78:ed:2d:bd:bf:6f:64:e7:4a:98:b2:49:3b:8c:74:0b:de:ea:
         a1:44:42:a4:60:57:a6:b0:8c:db:eb:95:b4:45:14:eb:30:f2:
         4b:fe:9f:0b:92:22:b6:d4:8f:75:59:10:b7:ec:12:ab:34:61:
         f1:fe:50:e1:fc:4a:8f:5b:0d:c5:d4:32:95:ca:91:ee:9c:0b:
         c7:e1:ec:a3:cc:0e:b4:1a:de:93:93:2c:09:06:6d:9a:bf:ae:
         bc:10:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:33 2025 by rpki-client