Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
File:                     b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa (raw, json)
Hash identifier:          iEH5m8ns2mQvzPYccqgso5EFE0LFWoxCB4n8tlp5rHs=
Subject key identifier:   4A:AA:4E:83:AE:C8:F9:D3:FE:30:1C:50:C3:1E:C8:F8:63:33:A8:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA80693AF1A702E1064280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     19836
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:80:69:3a:f1:a7:02:e1:06:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=c3caa8da-d100-4300-bfa9-fe7df57e4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:ec:6d:23:ac:67:bc:90:43:a3:4d:06:a9:
                    15:4c:d0:94:8c:f9:45:54:19:b7:74:7b:dd:81:aa:
                    a2:aa:bf:bc:44:3f:e6:4a:d2:06:48:b4:e9:8a:70:
                    f6:c8:37:96:d8:cf:31:ad:7e:81:e2:c7:8a:66:c7:
                    5a:79:36:6a:bd:6c:67:50:e1:a5:9e:84:23:2d:cd:
                    1e:93:9c:14:30:bc:e2:02:67:01:74:72:d8:b8:0f:
                    b1:85:28:7a:0c:00:b4:4b:02:fb:99:d5:56:93:a2:
                    64:84:3d:00:2f:fe:1e:15:fc:18:6a:86:c0:0b:18:
                    bf:2d:e0:29:7b:f6:9a:9c:96:26:a1:62:1a:ce:c7:
                    81:8f:17:ba:75:67:53:31:d0:a7:e2:c6:dc:dd:20:
                    97:14:b6:3c:cd:02:53:ef:ee:a0:66:6a:7b:d6:11:
                    3f:24:ff:7f:ee:fb:ce:5b:55:b3:c1:67:b7:07:de:
                    0f:8f:12:0a:73:8f:e9:44:4c:b1:c8:d2:1f:42:e5:
                    63:b6:2e:e1:e4:77:69:e3:a7:57:fd:91:4c:4b:28:
                    67:38:e3:e5:e0:2c:75:98:91:e5:47:18:18:96:bd:
                    1c:d1:9e:1b:7a:6b:15:c7:3e:28:61:7c:20:b8:2d:
                    b6:75:bf:53:5d:e3:9a:65:6b:41:66:74:7b:77:3f:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AA:4E:83:AE:C8:F9:D3:FE:30:1C:50:C3:1E:C8:F8:63:33:A8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:81:1b:c3:b5:1e:b3:03:c5:1d:3b:2c:cd:02:13:e4:c6:
         0c:85:52:cd:ae:25:46:bb:af:4a:c2:0a:e1:ea:59:23:66:32:
         76:9a:f8:fc:37:18:b6:d0:ed:95:73:fb:00:51:7b:1b:b8:93:
         13:e1:bc:4b:05:77:d7:3a:4e:3e:09:c8:a7:b2:2e:2d:9b:99:
         57:3b:38:51:18:4c:15:36:7e:5c:0d:1b:16:76:24:e9:d4:65:
         1e:a7:b3:b3:71:7c:47:13:04:9d:f4:89:3b:33:03:b8:07:a6:
         26:8c:19:58:e8:69:74:c4:2f:ec:c9:5b:53:f5:f6:19:99:d6:
         57:68:87:46:83:bf:2c:6a:80:94:12:88:0a:7e:ec:af:fc:f0:
         70:0a:4f:61:52:fe:76:1f:fe:62:a9:70:10:f1:61:f4:26:b4:
         bd:76:01:c7:59:32:42:ec:91:e3:e8:cb:ea:14:de:03:ee:05:
         fb:3f:e0:56:89:6b:c1:93:c0:f3:3c:63:5d:57:7e:1c:b8:dd:
         fd:07:5c:87:b1:2d:5c:e3:f2:46:48:a4:0d:41:3a:a3:ef:de:
         cd:0d:dd:83:a7:b6:78:bb:e7:ed:12:f0:db:8f:81:11:70:1d:
         68:51:a6:53:94:5d:28:36:cf:ba:36:7c:0d:92:f7:47:1b:1b:
         a5:b9:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:44:28 2025 by rpki-client