Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/946039f3-0c45-3a0f-ad3a-f5be4e934bee.roa
File:                     946039f3-0c45-3a0f-ad3a-f5be4e934bee.roa (raw, json)
Hash identifier:          sPZR8vjzIyh0z9T9Nglx2T/h2tZCpgpPUOPH/xcxP7g=
Subject key identifier:   E2:C9:B3:2A:51:6F:65:8C:4F:E4:49:4E:E4:AF:CB:AF:B6:46:A5:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6C2B4778E6AE2850A940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/946039f3-0c45-3a0f-ad3a-f5be4e934bee.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396584
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6c:2b:47:78:e6:ae:28:50:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=5ce0b820-76fe-4287-91a8-1afb4f337191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:23:06:7e:de:1c:3a:c7:66:13:1b:bf:23:
                    2d:77:33:d1:a1:22:8b:41:c7:9d:5a:a5:05:1a:55:
                    3a:a5:df:7a:dc:d6:03:79:33:ac:59:43:62:03:d3:
                    d2:9b:fa:30:4d:95:ed:80:05:ae:59:9d:3b:72:38:
                    f8:96:9f:c1:e0:5d:fe:80:4c:84:4e:fa:7d:6d:03:
                    a0:5c:53:29:cd:aa:4e:72:a9:92:ce:7a:c7:86:8f:
                    23:ff:27:c9:b5:0c:08:b1:c6:03:19:cd:0c:7d:1d:
                    c6:b8:62:03:e2:de:a3:3b:74:a6:7b:62:b4:86:3e:
                    5e:10:86:2b:77:a2:03:b2:2e:58:ed:75:e9:8b:cf:
                    f5:1c:23:35:dc:b9:cf:c3:02:6b:3c:75:a0:e4:b9:
                    5c:ec:01:20:ea:56:c2:c1:af:e4:01:c1:7b:3f:71:
                    27:d9:94:92:b1:48:89:b3:0f:3c:c6:28:49:cc:98:
                    f1:39:44:89:1d:13:12:4a:44:1f:55:84:58:56:6f:
                    37:35:92:4a:e0:00:23:8f:97:43:82:28:ea:db:47:
                    ab:1e:54:b3:8f:88:b8:35:91:99:00:7a:73:83:73:
                    71:af:db:41:da:b0:3d:eb:41:24:d8:e7:fe:6d:7d:
                    b7:79:4a:4b:46:58:38:a2:75:fc:4e:27:36:d5:91:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:B3:2A:51:6F:65:8C:4F:E4:49:4E:E4:AF:CB:AF:B6:46:A5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/946039f3-0c45-3a0f-ad3a-f5be4e934bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:49:ff:e3:54:65:d8:ab:4f:3f:58:4b:bc:4a:11:87:74:
         2b:83:b6:e5:9b:4d:93:24:21:54:73:a8:30:54:13:19:ba:32:
         f5:ac:f3:14:6e:d7:08:81:b5:be:9b:da:dd:21:f8:d4:08:29:
         3d:ea:c3:4a:db:c7:4b:7c:b2:3f:bc:9d:d2:5a:e2:91:e0:f2:
         85:cb:9f:f8:c8:4d:6b:ce:a3:52:ad:79:20:37:3e:ee:b0:fd:
         aa:be:34:31:93:18:c4:82:49:4f:ea:da:ec:0f:b9:6a:c1:13:
         1c:3b:30:0d:79:1c:14:d5:90:22:32:49:29:24:96:27:c4:da:
         5b:af:f8:83:45:39:e4:dc:93:95:ff:f8:9e:57:fc:17:e4:f7:
         3f:a4:4d:5c:fe:84:e0:cb:47:b5:00:70:44:09:da:d2:f3:ba:
         a9:2c:eb:d7:3c:6b:c1:6a:bb:68:85:c4:06:7c:27:6e:af:7b:
         6c:48:ca:56:56:0c:39:4d:f6:90:15:fb:d1:4a:79:11:1c:2c:
         cc:59:c0:0a:05:c7:be:7d:b7:63:97:94:f9:ff:4d:6d:a9:db:
         96:4d:27:f1:ec:a5:c6:70:bc:b4:dc:ae:17:fb:68:dc:3e:58:
         d0:5f:ac:07:91:78:8b:79:89:47:d8:88:f1:37:fa:01:52:a2:
         6d:ce:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:17:24 2025 by rpki-client