Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa
File:                     9367b15e-b3de-31c1-a7e0-24d813b616fc.roa (raw, json)
Hash identifier:          UE63PYwIKOATFXzhCf3by0XgOBgBq3Ty2scIjjiBOHA=
Subject key identifier:   11:DE:68:5A:87:B7:B1:55:6B:50:E4:E0:FF:46:C0:33:57:B5:C7:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA63DA73FFB9105DCE6700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396582
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:63:da:73:ff:b9:10:5d:ce:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=145dce09-6a95-499a-b62a-fcb797131478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:3e:53:24:2e:31:0b:aa:83:35:41:c2:a3:
                    12:dc:19:85:72:36:4b:41:d3:89:6a:4e:55:fe:81:
                    6d:27:01:fb:f3:98:42:64:8c:ae:0c:39:a0:2c:1f:
                    c0:77:be:9d:7e:7e:22:d1:1b:c4:d6:e2:af:14:6c:
                    d7:4d:f6:69:9d:b9:37:b1:8c:75:d6:05:e1:ba:df:
                    cd:25:c5:2a:3f:ad:78:bb:6a:38:01:49:43:36:cf:
                    a1:1a:ea:8c:c9:10:54:59:5e:d9:34:bd:36:4f:45:
                    8a:45:11:14:17:49:7a:72:10:4f:99:9d:e7:a0:a3:
                    43:9e:12:e3:43:49:79:9f:2c:d7:d4:85:9b:e7:e9:
                    ca:f2:18:21:de:2a:0e:c6:8b:75:15:27:3a:d5:5a:
                    5c:96:90:28:67:ee:81:be:3a:3e:74:d9:dd:1a:a3:
                    1e:4b:cb:78:30:cc:a9:6f:e0:3b:3c:20:f6:76:b3:
                    45:0c:87:3b:e8:a0:3a:2f:55:f6:b0:ff:44:93:3d:
                    5e:c7:5f:8b:aa:63:68:b8:4f:2b:c7:fa:63:c6:45:
                    8f:9d:58:b9:40:f6:57:1b:0a:18:7b:46:07:c4:51:
                    d2:33:2d:0a:6e:cc:ee:f2:02:1b:d1:ff:3d:09:aa:
                    b6:cf:85:21:2c:fa:92:6e:c4:c3:40:ee:0d:e0:85:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:68:5A:87:B7:B1:55:6B:50:E4:E0:FF:46:C0:33:57:B5:C7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:60:e0:8b:96:e9:b7:5e:59:a5:c4:51:2f:75:0d:3e:a3:
         d6:12:de:de:51:20:37:e1:7e:85:7a:f2:18:7a:01:8c:fa:a3:
         7e:89:74:11:70:1e:2a:e6:36:99:c3:67:a9:d4:04:93:8c:b8:
         38:12:57:ac:f2:24:e9:21:c0:1e:04:d1:3c:9b:19:77:42:4b:
         86:fe:6b:8d:28:4d:1e:87:0b:47:88:5c:53:b8:9a:f1:78:7e:
         1a:73:ae:84:e4:77:d8:c8:60:d0:dc:cb:72:6f:44:33:83:a9:
         a4:ba:d5:96:22:1e:ea:bb:fa:d7:9b:8e:7b:f6:11:1e:df:c1:
         98:7c:cc:4e:10:17:59:b9:96:19:e7:8a:0b:ff:75:6e:a3:dc:
         79:15:3b:9c:c6:34:2f:46:1f:06:7e:24:f5:d1:bd:e4:81:82:
         0a:24:4c:c7:ea:55:5c:14:04:10:13:d0:32:f4:64:60:33:2e:
         b1:fa:b3:42:b3:5d:a1:88:20:98:e6:82:36:12:cc:49:09:75:
         f6:06:e7:b4:98:9c:c4:a1:69:e1:02:ac:49:6e:7d:44:4f:30:
         5b:e2:71:a0:ae:f2:e1:83:41:86:bf:ce:2c:5f:1c:0c:7a:a1:
         79:6b:24:39:fe:f4:8c:42:9c:0c:75:3a:88:8f:49:28:bd:70:
         95:32:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:33 2025 by rpki-client