Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3232e0f-5127-3255-91db-97bf69646927.roa
File:                     d3232e0f-5127-3255-91db-97bf69646927.roa (raw, json)
Hash identifier:          ohUksUm70gg5piwjfzSaksYizbqqDT0Vq0QcKBH81qU=
Subject key identifier:   99:64:37:A7:10:AC:1C:56:C5:68:B1:1B:E8:BA:27:B1:2C:A4:52:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA68FEAFBFA8DA94838C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3232e0f-5127-3255-91db-97bf69646927.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     27544
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:68:fe:af:bf:a8:da:94:83:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=7af68e40-8844-480a-97ae-18d2b4fd8ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:59:6f:4d:8f:04:39:8d:6b:08:55:44:2a:
                    8b:80:49:55:c1:23:8e:7a:30:fc:bc:34:cf:19:7d:
                    f5:80:6c:fc:19:05:66:4e:ff:7c:04:f3:c5:76:a8:
                    e0:22:b5:cd:1c:17:37:23:67:ce:ef:6c:ee:11:dd:
                    2c:d9:f8:22:db:27:55:82:e4:97:3a:23:32:28:35:
                    f4:c9:ec:23:3e:86:2c:8e:8f:61:27:e0:53:13:d7:
                    8f:ac:f1:59:83:1c:65:1f:f3:13:c2:26:86:7b:c8:
                    e9:4a:f9:83:04:65:ac:fc:0b:c1:e9:24:8b:b0:fa:
                    68:a2:ad:6f:00:1d:4a:93:99:4a:a4:3e:04:fa:7f:
                    a4:ae:f8:48:f0:24:69:f9:9a:db:f3:52:9e:03:02:
                    d3:8e:d9:c7:36:ef:85:8b:7f:04:51:65:55:60:b9:
                    75:5e:75:1f:54:41:4b:3f:1c:5d:36:99:34:9d:28:
                    c0:e7:ea:47:6a:93:3f:c8:0c:5f:ed:dd:e7:d1:55:
                    ef:57:85:9e:0c:81:79:1e:05:60:17:5a:92:1a:ca:
                    0a:c8:53:8d:2b:75:a3:ba:7f:76:df:0b:3f:4e:90:
                    27:cd:87:8e:ec:9c:91:17:c9:69:28:b6:d7:cb:24:
                    55:df:bf:c0:1b:3b:c2:02:c3:40:94:de:69:9b:3a:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:64:37:A7:10:AC:1C:56:C5:68:B1:1B:E8:BA:27:B1:2C:A4:52:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3232e0f-5127-3255-91db-97bf69646927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:6f:70:55:0a:de:2d:f1:6b:1f:42:c4:d6:17:b4:dd:46:
         6f:b3:bf:3a:d8:94:31:9c:d8:cb:35:68:39:8d:9d:da:57:0d:
         de:4c:57:07:0b:bd:73:23:66:5f:00:4d:4e:f1:4c:2a:c7:b0:
         d0:44:68:53:bf:b6:72:09:13:ab:25:70:27:3a:87:3c:a4:db:
         4b:dd:0a:16:3a:db:71:89:4b:19:9a:5c:9a:2b:85:e6:6b:6c:
         c5:33:40:90:18:08:fc:98:c8:2c:e3:e9:63:a5:93:b0:bf:d0:
         b6:19:ab:c8:8b:8a:44:41:61:f1:3d:9c:37:79:8d:9b:fa:dd:
         2c:43:a7:24:82:bf:ba:37:f7:a3:b3:e7:16:c4:bd:2c:21:22:
         6e:fe:a0:27:5b:0f:ab:21:15:0c:7f:cb:f0:82:4f:64:5e:95:
         cf:8d:12:dc:34:c6:63:5d:87:e6:59:39:1e:29:7b:8f:2a:ae:
         39:86:c5:5f:25:78:ad:5a:40:48:8e:bb:ca:b0:0e:bc:e2:30:
         cb:ad:d9:40:d4:3e:f2:67:3a:c0:27:83:e1:d9:c1:bf:8a:89:
         d5:43:e3:be:37:0b:83:33:c7:5d:0e:18:8d:74:a9:14:7e:c1:
         12:ed:37:0b:7b:6a:58:ec:ca:07:00:c1:9f:12:f6:b8:3d:6e:
         2a:f0:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:52 2025 by rpki-client