Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
File:                     b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa (raw, json)
Hash identifier:          StQM5+hVMZ4mWU+tew7BcLNQUjeq1So2dAq1zBCUJyo=
Subject key identifier:   32:1C:29:A5:72:20:B7:0E:4D:B9:37:E9:7F:A5:73:67:02:FA:B8:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB1644809874687D892D420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     19836
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:64:48:09:87:46:87:d8:92:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=253ac221-5261-4259-8e4c-eb97123ff2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:9a:a9:49:e7:6d:22:a7:7d:ba:53:ae:91:
                    02:25:b1:ed:3a:78:37:c4:75:86:16:42:60:c4:69:
                    3a:29:d0:4d:1e:dd:78:29:a7:3e:47:5d:59:25:a8:
                    30:a7:d8:51:9e:e4:ec:fb:df:2c:8c:22:29:c0:f2:
                    e4:44:98:35:93:c2:d8:d2:00:0c:3f:90:75:61:8c:
                    97:70:95:35:63:81:09:21:e8:71:07:38:0f:a2:93:
                    ec:f4:51:83:c5:b3:9b:cf:d0:4f:be:a8:e3:b5:95:
                    9b:dd:13:f9:fd:35:4a:1d:e1:9e:87:3a:c9:98:65:
                    e8:25:28:1e:e6:a3:4d:a7:00:8a:59:db:a8:da:a2:
                    de:b9:92:f6:34:49:1b:b3:dd:71:e3:2c:10:01:17:
                    36:d1:44:d4:7a:97:3f:65:dc:2e:7c:ec:56:90:04:
                    c9:2c:ce:41:ee:28:fc:f5:de:a6:1c:34:cb:03:e0:
                    2d:2c:9d:10:b5:e6:0c:4b:45:51:1d:0d:1f:66:cd:
                    69:3f:81:b7:18:0b:1b:cb:5f:09:56:ca:5d:4f:d0:
                    d0:d8:c9:f2:23:62:ce:35:54:47:3f:76:81:dc:4f:
                    fc:d8:24:62:98:28:ab:e7:fd:61:84:cd:3f:38:b1:
                    37:9c:0f:ea:d2:6c:8f:cb:72:06:13:30:57:bd:48:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:29:A5:72:20:B7:0E:4D:B9:37:E9:7F:A5:73:67:02:FA:B8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:31:72:e6:c9:13:be:ed:cf:00:fa:3f:70:e7:98:85:a2:d9:
         e9:38:39:bf:6d:5a:36:58:a9:73:01:84:26:91:4b:ec:10:78:
         47:8e:0c:8d:ff:92:2b:15:1f:b3:cc:af:39:90:f6:dc:23:db:
         52:17:ec:b3:05:20:69:38:ec:fc:0e:ec:95:dd:82:08:4f:af:
         a7:d6:e4:51:4c:51:49:57:32:08:b9:86:a7:ca:85:76:ec:00:
         bf:6d:20:fc:03:29:19:bd:74:b7:e5:98:75:7f:5b:ef:94:68:
         9a:96:a3:d0:0b:d2:0e:2e:96:c8:da:64:09:75:cc:47:d0:7a:
         b4:f6:fd:42:7c:2d:bc:89:8d:e3:c6:41:14:89:fc:31:50:d0:
         bd:19:0a:33:da:d8:5c:4e:2a:b5:e3:60:25:84:c9:65:b5:73:
         b3:37:ff:e7:cf:e8:cd:d2:08:12:8f:cf:0b:77:fe:72:7d:d8:
         58:25:42:00:2d:39:ca:35:e3:fd:1f:a5:fe:7d:54:cf:32:4c:
         44:88:cd:48:1c:d4:d1:2d:03:c3:fd:d3:dc:8e:2d:e6:7b:ba:
         15:19:22:38:fa:3f:19:c5:00:11:33:18:59:d9:0c:3a:55:50:
         2c:b4:a1:9c:fa:50:b7:25:50:ae:55:2d:42:c8:cd:14:da:af:
         7f:ee:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:29 2025 by rpki-client