Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa
File:                     bf917705-e4d9-304f-b106-ae96a02b19bc.roa (raw, json)
Hash identifier:          95uTmGg1PVRiYjNz1T0yxUiGaMN/fOjUYr9pCk+lmpE=
Subject key identifier:   98:ED:2A:6A:71:EF:34:46:80:14:29:BD:1B:54:1B:A4:8B:27:0A:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7C75200420F383E41B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396616
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7c:75:20:04:20:f3:83:e4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=256f7710-fc2b-410a-93b0-054436188873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:e0:39:aa:3d:59:81:c3:2a:fb:59:25:51:
                    b5:38:c1:0a:e5:6e:3c:f7:e5:ce:9d:fb:23:af:45:
                    c0:01:9a:20:2d:d0:e0:15:6a:7f:3b:99:a6:5d:36:
                    96:0f:7a:d1:8a:f0:48:69:b3:b7:ea:a9:b0:a8:c7:
                    6a:24:93:8a:85:a0:78:ec:78:27:91:7b:04:9d:1e:
                    30:ec:cf:09:53:19:64:86:ed:99:1a:c4:db:be:d7:
                    a5:79:92:57:1b:2c:fb:35:a4:53:2b:b9:56:c4:ae:
                    aa:80:57:bf:10:60:04:38:92:55:ab:19:d1:83:cd:
                    ae:55:45:1a:7c:79:64:95:2e:7f:7d:e3:3e:4f:95:
                    9c:12:25:9e:27:76:ee:a4:ab:06:3f:14:3d:78:0d:
                    eb:9d:3c:74:33:5c:66:ad:de:58:12:d9:ea:91:05:
                    c1:84:25:a4:49:17:6c:e8:51:8d:89:3d:06:13:38:
                    9b:29:eb:c8:78:b7:eb:72:98:c8:0c:fa:a1:35:0f:
                    63:7a:ef:e2:39:90:a4:68:e6:18:41:9f:85:3f:e2:
                    2d:0d:13:07:df:ea:46:2d:03:49:2e:02:ea:6e:99:
                    3b:67:2d:1c:2d:ff:97:80:39:d3:80:46:37:74:7e:
                    9d:ff:c3:e0:60:fe:39:5b:21:6d:a0:5d:85:96:7e:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:2A:6A:71:EF:34:46:80:14:29:BD:1B:54:1B:A4:8B:27:0A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf917705-e4d9-304f-b106-ae96a02b19bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:8e:b5:b7:bc:3f:83:b7:67:26:97:db:79:69:32:7d:b1:
         b1:ee:38:ac:5c:b2:08:7d:a9:58:6d:00:97:bd:57:8d:2b:62:
         1f:65:90:03:ce:dd:68:11:e0:51:27:c6:cf:bc:4f:f4:10:5f:
         05:07:4f:29:01:ff:a7:87:20:b5:82:10:4d:0f:9a:6d:ac:ac:
         58:94:62:8f:f4:e0:39:f7:5f:0d:a6:f2:43:e6:b7:eb:4f:f9:
         59:28:3b:73:ef:f3:83:ce:ff:57:9c:a1:4d:a2:96:46:f6:ae:
         b5:43:77:4c:35:80:49:72:4f:66:19:ca:38:48:cc:d1:3e:22:
         fe:42:ba:ad:e2:69:41:97:ec:6c:5b:3b:be:c0:c1:7e:fb:78:
         b8:70:63:9e:d7:24:83:53:9b:42:d3:7f:e1:10:e3:a3:87:35:
         5f:34:0f:59:c0:04:c7:9f:5b:9a:b5:5b:fc:91:78:7b:27:33:
         12:de:77:b8:22:91:43:48:fe:f4:bd:9a:f3:6d:af:fd:45:d1:
         2f:b8:4e:71:b4:f4:9b:a0:c5:55:21:f3:99:dc:b3:70:48:dc:
         1a:c0:ce:cf:16:2b:c2:54:9c:52:97:fe:66:4c:92:90:c0:27:
         27:48:c4:fd:ae:0c:97:f2:90:c4:75:a5:98:60:62:e9:79:df:
         f1:88:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:07 2025 by rpki-client