Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b10f678-6232-319b-80a1-4668f2dffe99.roa
File:                     7b10f678-6232-319b-80a1-4668f2dffe99.roa (raw, json)
Hash identifier:          kqM6hAj/u1LErbmOqIKfE4tEgufO+oVYKdYUyi74m+w=
Subject key identifier:   63:99:9F:DA:E4:9F:96:83:CA:B1:0C:D4:07:50:F5:DE:47:98:7E:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15254251AC76C95872680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b10f678-6232-319b-80a1-4668f2dffe99.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396595
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:52:54:25:1a:c7:6c:95:87:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=3fbf1675-6422-47c9-b781-526a07e0d143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:68:a5:24:95:09:f2:b3:ab:3b:c9:90:63:
                    d1:f9:8a:e5:81:d4:d6:ea:ab:d4:81:1b:10:ba:18:
                    c8:bf:0a:da:65:a9:ee:19:65:ab:e0:fe:7c:42:56:
                    ed:cc:e4:a3:b9:48:6c:8c:3d:b9:3f:e0:b3:b6:6a:
                    34:49:f6:60:7f:01:28:e0:aa:6d:ef:18:09:82:17:
                    01:50:73:53:2f:3e:82:ff:1c:de:6a:17:cd:5d:de:
                    86:3b:c1:85:72:84:c0:14:8e:b7:47:5f:16:e2:0f:
                    99:9f:8f:de:c7:4a:68:79:75:98:b4:68:07:86:a3:
                    89:15:73:b5:ce:cb:78:49:5d:bc:d6:05:69:f8:ed:
                    7d:fa:59:e1:2a:e4:41:e1:a9:35:4a:53:be:8c:d6:
                    c5:31:f5:18:e6:c5:3b:d4:69:f9:62:56:1a:e8:35:
                    d4:c6:5e:71:09:a0:18:f2:6e:01:ba:df:a5:4d:66:
                    d8:5e:db:99:f4:7d:97:1e:96:d4:68:55:c0:2d:7e:
                    c8:c1:78:2c:97:cc:87:67:75:ea:3c:a6:9d:2e:d4:
                    ff:c3:73:b2:ca:24:92:52:97:f8:ac:8e:c1:bb:f1:
                    d9:90:92:a0:41:60:7a:ae:79:ea:e2:9d:dd:b5:15:
                    a7:6b:08:83:17:cd:0a:08:26:83:f3:94:a5:1a:96:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:9F:DA:E4:9F:96:83:CA:B1:0C:D4:07:50:F5:DE:47:98:7E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b10f678-6232-319b-80a1-4668f2dffe99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:ba:b8:93:bd:03:4b:69:76:a7:ed:bb:69:f0:d9:16:aa:
         d0:a7:c7:a9:27:40:66:d3:7d:66:23:45:af:a7:a5:28:e0:06:
         85:d0:89:ed:3a:04:a3:57:2f:84:63:b5:f1:9c:19:6c:02:de:
         0f:ab:1a:fa:52:25:ae:b5:02:10:75:86:cd:04:a5:1c:a3:5a:
         2d:7f:ce:ae:a6:1f:85:0b:30:5a:c2:f3:46:37:c4:55:98:64:
         58:f8:03:a1:92:33:0a:50:7d:6e:b2:7a:87:b4:59:75:4e:c1:
         1f:d8:ef:d4:24:b9:47:55:ca:96:26:b3:72:53:41:d4:59:e9:
         73:a6:7b:aa:2c:fc:66:d7:33:59:b7:25:e2:f5:52:5f:9b:b7:
         ad:55:a6:8f:ad:ee:99:1e:88:84:97:51:f5:49:b0:7b:bc:ce:
         91:79:56:fd:15:5d:9b:b3:65:5c:bb:1c:03:64:24:c1:6c:d8:
         d5:30:bd:d9:dc:4e:d7:ce:fb:5f:e5:65:fa:d1:1a:e2:b9:48:
         2f:be:5f:a7:26:89:1b:85:5a:12:d2:be:41:0d:97:29:80:4e:
         2b:2a:a1:f3:67:5c:a9:c8:84:9f:fd:4c:72:64:a6:b4:84:34:
         32:f7:4e:ef:2b:e5:17:04:d3:2c:49:46:44:cd:43:27:c9:00:
         85:42:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:08 2025 by rpki-client