Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa
File:                     846079db-bc09-306f-a626-db8b0fa6140a.roa (raw, json)
Hash identifier:          My5can3q4stz9Vaf33z9PwIlDfejuOFH4uaDYOzFAUQ=
Subject key identifier:   3A:33:E2:B0:E7:E7:94:F4:6F:3E:9E:7B:49:46:66:D3:02:99:5A:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA72B0F34637474C5FA840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396554
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:72:b0:f3:46:37:47:4c:5f:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0a436559-b51a-459a-9181-c02c1e74d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:4f:85:31:9f:6a:7b:c6:21:f5:77:be:8d:
                    15:df:e6:aa:06:f7:52:7e:cd:2a:15:7b:18:bf:26:
                    66:98:e2:49:9e:76:32:75:da:f0:58:86:99:28:7e:
                    e3:e1:da:9c:9e:3d:eb:52:3c:1d:54:6a:5e:8f:ef:
                    9f:78:21:e2:0b:1d:ab:46:71:47:f6:d8:49:1e:b8:
                    17:e6:18:94:f5:18:48:ba:b8:67:53:d0:94:91:0a:
                    e3:33:4d:26:5c:2e:b2:73:96:8f:22:81:27:74:b0:
                    57:3d:db:95:30:c3:cf:cd:df:38:b6:c4:6a:d8:c1:
                    b0:8d:b0:2d:22:8c:e7:8b:9a:63:82:d2:71:97:4a:
                    20:ad:34:1c:bf:4a:3e:5f:fa:42:96:b5:81:a2:6b:
                    88:5a:72:4c:f4:44:06:60:16:9b:c5:66:75:f3:53:
                    b8:b8:b5:a4:5e:64:80:4c:f0:b0:50:0c:a6:9e:40:
                    39:e6:91:56:a3:8a:53:7f:ed:89:10:cf:53:38:cc:
                    79:d4:af:71:86:1a:db:ec:cb:fc:44:1f:3e:b0:de:
                    48:9a:da:2c:09:d5:66:c6:ed:b4:0d:96:87:bf:60:
                    84:69:61:2f:5f:51:97:94:e2:34:1d:f7:50:0f:48:
                    c8:4f:fb:7e:fe:7d:54:43:af:cc:45:2c:4b:42:27:
                    1c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:33:E2:B0:E7:E7:94:F4:6F:3E:9E:7B:49:46:66:D3:02:99:5A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846079db-bc09-306f-a626-db8b0fa6140a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:06:50:5a:1e:61:76:c3:63:06:2c:ec:f0:62:fa:91:21:96:
         eb:74:7b:bd:30:6f:64:b6:2f:11:bb:f5:03:e7:02:4b:9e:e0:
         4c:f1:57:d6:d8:f3:7a:4f:6a:86:da:c1:cb:25:5b:ba:14:01:
         19:39:51:37:04:4e:fc:34:0d:ff:20:d1:f5:12:5b:61:5d:a5:
         10:b6:a7:69:d0:a4:18:50:ba:e2:a5:de:23:5d:f7:93:38:b5:
         82:e7:a6:e3:31:42:b0:da:e1:13:13:70:c0:31:15:c1:fd:1e:
         c8:78:82:ab:51:9a:12:52:0d:9b:87:a0:d6:30:2f:2d:96:d2:
         fe:4f:3e:ad:26:bb:19:89:6e:fe:36:3c:06:ec:c5:a5:b6:4f:
         80:59:e1:a2:c8:7f:6e:f6:99:a7:ea:9d:6b:44:49:36:af:e2:
         f1:47:6c:19:36:2b:5e:ff:f1:f9:09:c6:06:12:68:7b:0b:d8:
         35:12:5f:4c:f1:af:ae:74:26:9e:1f:93:bf:dd:06:3d:20:15:
         7b:ee:54:f2:e0:d7:33:96:97:64:23:5f:fd:b1:fb:b9:7c:e9:
         36:a7:5b:9f:2f:34:30:56:2a:45:e3:24:05:22:56:97:43:58:
         99:70:f6:bb:eb:09:a3:af:09:6c:2d:d4:05:d5:97:58:7d:60:
         d3:d4:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:39 2025 by rpki-client