Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa
File:                     5d97d731-35fd-3e28-8224-78588f31f0da.roa (raw, json)
Hash identifier:          LfEluQCUhYgNcEDpQEHtBeZcu7h58r6P4CVdKGA5oVs=
Subject key identifier:   F9:06:26:65:16:03:DE:E1:59:E9:80:E9:D6:C5:F8:1E:4A:C2:AE:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15EA95671AEC6CE98FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396587
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5e:a9:56:71:ae:c6:ce:98:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=e894b977-f6f0-4de6-a880-4ce7a9feb66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:01:3e:45:97:00:76:ad:7c:59:e0:cb:cb:
                    ca:2e:9b:4e:3d:6d:d1:7c:1c:aa:de:cb:ef:c4:fb:
                    25:15:fb:7b:af:c6:d5:2d:be:68:65:85:fc:a1:8d:
                    29:34:3f:08:44:96:60:a1:e9:03:46:a3:de:bb:2b:
                    f6:3e:f2:ff:8d:42:01:07:3f:36:58:bc:aa:07:c6:
                    86:89:89:bc:6f:a5:88:bf:ea:f6:21:e4:5e:3a:cb:
                    5c:66:86:70:f8:76:e3:13:1e:c9:1e:5c:ba:eb:e7:
                    bf:4b:e1:db:e1:6b:f9:50:50:92:e6:a9:f0:d2:89:
                    f5:51:6c:ba:71:63:48:52:48:ad:9d:e5:0e:8c:ad:
                    8f:24:9b:fe:04:74:b4:63:02:5e:4b:4d:dd:5f:a8:
                    15:e4:ea:dd:e6:ab:1b:02:62:a2:42:de:6d:b0:88:
                    08:3e:e3:48:8d:2a:49:3c:92:ce:62:cd:ca:59:ee:
                    da:a8:be:57:99:06:10:30:8d:7c:16:05:95:4a:3f:
                    06:50:86:75:11:36:ad:77:30:22:ea:3c:8f:9e:98:
                    d9:a3:f8:de:a9:22:b6:7f:2c:4d:bc:32:f2:1d:77:
                    d7:ad:a4:15:c9:a2:05:79:19:06:9c:c0:2c:dc:f6:
                    24:ee:61:dd:e5:2c:ac:04:ce:e9:eb:a3:2a:bf:af:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:26:65:16:03:DE:E1:59:E9:80:E9:D6:C5:F8:1E:4A:C2:AE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:42:51:80:b9:8f:a7:a9:bd:16:4a:a1:bc:3e:e1:65:a8:76:
         0e:f3:66:0f:35:c9:bd:ea:c4:8e:8c:77:f2:6b:15:c6:e7:25:
         68:c9:d8:8b:f1:1c:94:07:71:29:40:6f:08:ae:02:95:e8:9d:
         3e:b5:bc:2d:19:d8:5f:5b:7d:68:a2:33:db:05:2b:4d:55:42:
         85:bb:3e:ef:40:bf:01:30:1e:f5:b8:63:d8:d3:59:1a:39:fc:
         fe:40:f7:9d:e7:90:33:99:59:e0:61:26:c7:70:3e:e0:f2:cc:
         1a:01:1d:49:f9:49:ec:12:a9:0f:2f:d8:69:d1:5f:d5:06:da:
         2d:b1:b7:1f:b1:6f:a4:21:95:d7:e4:5b:53:27:74:54:e9:54:
         26:e5:55:dc:00:54:78:c9:5f:ab:c6:67:e0:58:e5:7f:5e:d9:
         d3:7f:80:06:50:c4:7d:22:a3:1d:e1:ee:ca:5c:7d:65:2e:c2:
         a3:82:33:b1:dc:78:29:70:92:3f:ec:a8:b6:66:0a:d0:ab:49:
         ea:b9:53:fb:d0:b9:fc:3e:bc:c4:df:32:2d:5c:65:e2:4d:80:
         d1:95:40:50:16:34:73:85:3c:5d:1e:ca:22:5e:2a:e1:b0:20:
         01:1d:7e:2c:ca:fe:eb:2d:b8:9b:d6:bf:80:1e:26:6c:6c:61:
         9c:a7:bc:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsV6pVnGuxs6Y/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
ZTg5NGI5NzctZjZmMC00ZGU2LWE4ODAtNGNlN2E5ZmViNjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFoBPkWXAHatfFngy8vKLptOPW3RfByq3svv
xPslFft7r8bVLb5oZYX8oY0pND8IRJZgoekDRqPeuyv2PvL/jUIBBz82WLyqB8aG
iYm8b6WIv+r2IeReOstcZoZw+HbjEx7JHly66+e/S+Hb4Wv5UFCS5qnw0on1UWy6
cWNIUkitneUOjK2PJJv+BHS0YwJeS03dX6gV5Ord5qsbAmKiQt5tsIgIPuNIjSpJ
PJLOYs3KWe7aqL5XmQYQMI18FgWVSj8GUIZ1ETatdzAi6jyPnpjZo/jeqSK2fyxN
vDLyHXfXraQVyaIFeRkGnMAs3PYk7mHd5SysBM7p66Mqv68LxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPkGJmUWA97hWemA6dbF+B5Kwq6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ5N2Q3MzEtMzVmZC0z
ZTI4LTgyMjQtNzg1ODhmMzFmMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABFCUYC5j6epvRZKobw+4WWodg7zZg81yb3qxI6Md/JrFcbnJWjJ
2IvxHJQHcSlAbwiuApXonT61vC0Z2F9bfWiiM9sFK01VQoW7Pu9AvwEwHvW4Y9jT
WRo5/P5A953nkDOZWeBhJsdwPuDyzBoBHUn5SewSqQ8v2GnRX9UG2i2xtx+xb6Qh
ldfkW1MndFTpVCblVdwAVHjJX6vGZ+BY5X9e2dN/gAZQxH0iox3h7spcfWUuwqOC
M7HceClwkj/sqLZmCtCrSeq5U/vQufw+vMTfMi1cZeJNgNGVQFAWNHOFPF0eyiJe
KuGwIAEdfizK/ustuJvWv4AeJmxsYZynvBc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:33 2025 by rpki-client