Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
File:                     dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa (raw, json)
Hash identifier:          1Mli5Xo31wjvWZaVtl3vNcQGeC6sK9Wkbo+n/RvFD7g=
Subject key identifier:   21:69:4B:FF:92:12:FA:67:EB:D4:8B:7B:5B:C9:4A:A1:25:B4:3E:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA798AAC2469F543574E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396612
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:79:8a:ac:24:69:f5:43:57:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=3fdf467e-05fa-4c77-807b-c9b4e5cad0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:ce:a0:42:f2:45:7e:f6:fd:4c:08:91:94:
                    2c:c2:47:84:19:04:ff:c0:7a:68:8a:a0:6a:0e:61:
                    ab:0f:f3:58:4c:a2:13:c3:e7:cb:36:4b:ae:b8:4c:
                    b5:db:ab:aa:fc:79:70:3a:7e:4f:81:01:2f:c2:a9:
                    5d:a0:70:13:89:85:ca:ae:99:9e:b3:3a:4d:ec:27:
                    e5:4b:ba:ad:b5:12:ca:bc:46:08:5f:8f:4e:2b:93:
                    32:3b:17:4f:9c:c7:69:91:7d:5c:3c:53:7e:f4:05:
                    7b:47:80:6e:12:a4:fe:fe:f1:36:88:7a:b8:f3:af:
                    d4:f3:75:60:b3:3d:74:db:fd:d3:cb:7d:c8:d9:7e:
                    12:f1:d8:b4:ae:a8:27:68:a9:e5:3b:48:e3:fe:a0:
                    fe:49:8d:ca:09:53:58:10:60:b3:c5:82:6b:d0:51:
                    24:94:23:61:c4:12:80:85:a8:82:d7:26:6b:38:d1:
                    34:33:69:7d:ff:a6:cd:14:61:31:45:54:d2:04:6d:
                    79:46:6e:b8:ee:e1:65:61:c2:d3:95:b1:be:2e:d8:
                    28:4d:70:e0:95:d8:c8:8c:91:c8:55:02:5a:e7:ce:
                    a2:71:8f:5e:70:0a:32:2b:24:e7:90:58:63:aa:b2:
                    11:4c:d0:16:71:a4:bd:30:5f:6a:29:05:c6:99:2f:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:69:4B:FF:92:12:FA:67:EB:D4:8B:7B:5B:C9:4A:A1:25:B4:3E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:be:50:fa:8a:e3:21:4c:9a:ee:6c:d2:ab:69:d9:41:17:
         c7:3b:6c:29:d8:b5:03:21:d2:9d:53:0f:ab:6d:6b:2e:a3:10:
         79:78:82:42:1a:74:79:34:4b:e8:10:7a:50:cc:55:de:41:38:
         1e:5e:85:31:ca:b6:bc:e6:fa:58:c1:2b:bc:ea:c9:cc:65:0a:
         e4:f9:0e:1c:7b:fe:85:1d:f1:24:04:69:a2:c9:f8:5f:d5:c1:
         88:68:17:31:3b:bb:58:50:b3:90:9c:76:3b:f5:10:67:0a:95:
         d5:19:f8:32:d8:05:80:ff:02:59:14:92:97:40:00:a3:72:66:
         d4:8a:c9:09:97:4b:e5:2d:5e:44:95:be:4e:d7:70:84:40:cb:
         ed:97:65:dc:9a:7e:95:6c:b2:ad:1f:30:a1:81:e0:5d:23:f8:
         63:cc:fd:e1:24:97:f0:46:1e:15:9b:2d:a2:d1:2e:2c:5d:4e:
         fd:c4:0a:83:ba:c1:dc:54:27:a0:cb:d1:aa:ca:eb:27:eb:29:
         f6:34:03:cc:75:ac:af:af:23:ae:47:ee:47:ef:d9:ef:b9:c3:
         8a:de:a5:c1:27:09:55:5d:a7:ec:76:47:fb:c5:b8:86:a5:64:
         05:ae:f7:98:e4:10:a8:c3:26:09:15:90:e1:26:32:07:54:59:
         76:5a:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:48 2025 by rpki-client