Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ced73e2-677a-3f23-9d7e-d2c13c2f9e54.roa
File:                     6ced73e2-677a-3f23-9d7e-d2c13c2f9e54.roa (raw, json)
Hash identifier:          AD5VyZmxeKsjiMpBTdp4ENqSSgxj51vGfB37l3qgPks=
Subject key identifier:   24:AC:18:FF:05:B8:25:30:D4:47:C7:7D:CF:AD:42:E7:F3:AA:02:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA71C38928881FC498F980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ced73e2-677a-3f23-9d7e-d2c13c2f9e54.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     397210
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:71:c3:89:28:88:1f:c4:98:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=a565aa25-e1df-4a79-bcc5-f086f8add597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:c7:48:4c:5c:2f:11:4a:c1:3f:f7:3d:05:
                    b1:ae:ff:c6:3e:c8:85:32:77:25:0c:2d:e0:b3:2f:
                    32:c5:67:7b:6a:a1:4c:fa:56:48:86:88:ea:82:e9:
                    8c:21:e0:bc:5a:f3:0d:ec:04:b8:57:8e:7d:32:33:
                    09:0c:02:28:56:e2:21:b2:a3:41:5b:bf:c3:f3:fb:
                    a9:d1:cd:ba:de:66:5a:df:bb:81:cb:cf:f2:9f:97:
                    2f:38:15:33:e6:70:17:30:c0:98:ed:35:b8:4d:2a:
                    08:be:5c:9f:d8:dc:59:07:bf:60:54:92:cf:ef:4c:
                    8b:83:60:13:78:20:62:ed:2c:19:97:38:52:7e:0c:
                    79:42:19:7a:ef:e5:47:6d:0d:3f:7d:5d:f5:5c:ab:
                    c2:b7:36:ff:aa:34:82:0a:d2:a2:8c:29:54:80:ea:
                    e8:4e:2e:ee:0b:b9:94:a9:77:0f:f0:e6:f2:dd:49:
                    e6:45:67:b5:9b:ab:ac:9d:73:16:84:25:6a:92:e1:
                    95:d9:7c:c0:83:f3:45:8c:7e:3e:9b:9c:e1:c2:ba:
                    49:f8:63:ba:93:78:fe:af:0b:2b:bf:6d:27:c1:93:
                    68:ab:22:0c:31:27:bb:93:19:65:e2:de:40:b3:4e:
                    20:e6:5f:07:b4:b0:22:38:56:83:2c:3f:b0:d5:3e:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:18:FF:05:B8:25:30:D4:47:C7:7D:CF:AD:42:E7:F3:AA:02:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ced73e2-677a-3f23-9d7e-d2c13c2f9e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:88:8f:eb:4b:e7:cf:03:52:4f:ae:f9:7b:15:43:55:67:
         d2:0a:cb:23:63:df:76:11:0a:e0:8b:ab:4a:51:05:de:35:42:
         6d:6c:5f:3e:97:ac:26:e4:24:9c:73:13:33:1e:a2:b4:d1:73:
         69:b1:0c:f2:86:03:04:d1:2b:3e:34:27:a5:53:55:81:71:c5:
         ce:ed:39:54:d9:0b:a6:f5:0b:f7:a0:13:3f:3d:9e:c4:56:a9:
         4b:8d:ee:58:ad:c0:40:64:ed:ae:ae:22:5d:69:50:e6:4a:74:
         41:86:44:23:81:26:a7:cf:54:c9:72:c4:12:51:4c:69:86:37:
         44:e8:02:b7:ce:91:44:c9:ac:55:7f:17:c6:a1:a6:a0:d3:31:
         d0:08:9a:98:80:12:b3:09:ca:3a:a9:bc:e0:2f:63:4e:81:ae:
         72:d0:70:8b:1c:8b:43:21:6f:70:61:38:a5:00:9a:8a:3c:ff:
         30:c9:9a:11:36:02:96:e2:5b:b7:70:13:f0:79:ae:66:39:6a:
         f2:8f:61:97:d4:a9:5b:f6:52:de:98:20:01:36:ea:d7:d4:fd:
         35:bc:b6:9c:03:13:aa:34:fa:8d:7f:ad:b5:35:5f:a5:b3:f5:
         cd:00:ac:de:9b:92:42:29:3b:38:40:1f:92:14:bb:35:03:0b:
         ea:bc:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:28:13 2025 by rpki-client