Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa
File:                     846079db-bc09-306f-a626-db8b0fa6140a.roa (raw, json)
Hash identifier:          hbzhSWkaPp0EB9fQRm94tYcgdC3I331AfOPolQGq4a0=
Subject key identifier:   BF:87:CE:1F:5D:A4:03:A4:A3:7F:5C:2A:CF:5F:35:A7:44:D5:BE:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB155EE3B4EE4F43D7BB440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396554
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:55:ee:3b:4e:e4:f4:3d:7b:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=b1d99dd0-d615-4a3f-9ac6-8d01326bce47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:37:e0:56:10:ba:46:a3:91:32:d6:4b:5f:
                    2b:f2:ed:9b:13:1c:47:97:88:17:1e:07:0e:87:ec:
                    aa:24:7f:24:10:6c:31:00:9f:95:df:74:cf:1f:57:
                    9e:e5:71:74:ff:ee:28:9b:de:9d:8a:31:57:8e:b7:
                    61:b9:7f:48:40:5d:df:fd:3d:07:6a:ea:2c:2a:62:
                    98:8e:7c:6d:88:f8:0e:18:47:e3:08:4f:90:70:fb:
                    ba:3d:20:19:78:59:a7:d1:3d:1d:d8:d0:d8:ce:5c:
                    ab:2b:0a:73:01:43:06:d1:5e:82:cb:b8:cd:ed:68:
                    cf:b7:8f:fc:aa:b8:7b:79:27:aa:35:15:ad:c5:6f:
                    ef:b9:e0:da:ea:b3:df:26:51:af:fa:01:17:09:e0:
                    9e:a8:ed:f0:54:d6:0e:bd:6a:f6:67:e0:84:13:0f:
                    0a:10:70:b1:46:0c:a0:ff:24:09:e6:29:09:4f:4a:
                    66:56:02:d6:a5:ef:10:99:07:48:7a:3b:95:e3:6c:
                    8d:b2:ec:b5:06:4f:48:4a:51:fc:cb:e0:7c:a7:59:
                    8d:19:ac:8b:d4:b3:4f:b0:b5:0a:39:e0:e2:0e:11:
                    73:6f:ba:4a:8c:ed:ed:75:7e:c3:43:0d:92:73:d2:
                    2a:cc:35:2a:ca:0b:3e:56:d4:78:f8:21:8c:81:97:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:87:CE:1F:5D:A4:03:A4:A3:7F:5C:2A:CF:5F:35:A7:44:D5:BE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:64:88:57:a5:5c:12:83:66:04:23:2a:30:bf:00:82:e6:61:
         43:0d:d5:55:57:55:a3:6c:9d:1d:b2:14:6b:32:13:65:31:ba:
         c8:6d:75:ed:ed:60:da:dd:ca:51:0f:c2:96:81:e5:7c:56:27:
         f6:f4:e3:32:e6:d3:2b:72:92:a0:d3:f0:a0:f2:31:3f:aa:8b:
         8d:43:e4:eb:91:f5:66:9e:f7:75:28:da:70:9c:1f:ae:91:ac:
         af:83:36:70:d1:43:24:60:ff:62:36:ff:08:20:b6:b5:af:ed:
         71:24:ee:d9:34:7c:b5:fb:58:c5:e3:3e:5b:9c:b3:98:64:ec:
         bf:fb:c0:e9:0f:3c:cd:3a:9f:86:98:92:65:2a:b1:cc:23:fa:
         ca:79:f0:a3:d5:c3:40:df:26:0f:c0:fb:c7:99:d8:38:3b:22:
         11:9f:f6:44:e3:63:a3:5c:54:04:e4:9f:a9:da:eb:a5:8e:7f:
         5e:29:ac:da:50:a5:38:a6:57:84:15:cb:f3:28:33:74:6b:a6:
         71:7f:5a:e0:63:58:7a:2b:d5:e5:2e:91:77:5c:e6:9c:5a:60:
         37:00:e8:ea:14:c3:f7:b2:d5:e1:52:1e:6d:17:4a:6c:62:bc:
         93:17:e4:5d:de:e9:83:b3:06:96:db:aa:c6:54:94:a6:e9:1f:
         c2:b7:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:31:18 2025 by rpki-client