Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa
File:                     df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa (raw, json)
Hash identifier:          1PdcKeZYcskrYupq6Xkw79tF0U+cVhjC1hlrgXhAiwo=
Subject key identifier:   FF:F8:42:02:8C:54:C1:90:42:60:78:AE:57:9F:0C:9E:08:EE:87:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB159F88ADFEA1D4CA72F9C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396826
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:59:f8:8a:df:ea:1d:4c:a7:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=dbcae8c5-8167-4968-9c59-6f0f8cf92957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:02:4a:e6:4a:2d:1c:f6:c0:dc:b5:e7:55:
                    76:d1:01:f9:54:29:59:6f:be:1e:26:56:64:e4:14:
                    9b:9d:20:75:af:af:d1:d1:9b:16:38:af:3f:78:d9:
                    68:d1:08:b7:a5:3b:5b:ee:8f:ae:c4:0b:a6:6e:b5:
                    fd:d9:04:7d:9f:6f:79:b3:26:d5:19:da:74:03:b8:
                    05:83:e1:62:3a:87:1c:4f:62:9a:93:b2:d3:9a:04:
                    09:75:60:bb:93:4e:5b:76:bd:78:47:96:ce:9f:88:
                    a4:25:a3:77:51:35:20:f7:18:5d:9f:57:dd:6d:88:
                    ae:7e:47:3d:15:3c:bf:9d:c8:3d:3c:19:52:59:3a:
                    41:cb:85:3a:12:3d:ea:84:fb:7d:c1:0e:32:7e:d8:
                    eb:96:60:a9:ab:72:21:3f:6b:1f:cb:52:43:ac:be:
                    ad:d4:d7:52:bc:09:e1:50:73:ac:ae:2c:36:de:f0:
                    9f:d5:9b:08:76:ca:54:34:66:09:26:dd:cd:b7:e8:
                    d7:1c:e8:8b:da:14:57:f3:ae:b4:96:80:ad:c8:29:
                    49:ac:7d:9b:d1:bc:57:50:e9:60:96:83:18:23:8b:
                    1b:9b:f9:4f:d2:db:c2:f0:82:63:94:29:a4:7c:df:
                    01:c1:39:e7:bd:ae:3b:a1:84:47:da:3a:6c:6e:f2:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:42:02:8C:54:C1:90:42:60:78:AE:57:9F:0C:9E:08:EE:87:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:22:65:78:0e:8d:0c:99:1e:8b:b2:51:58:6d:2f:2e:db:
         1c:10:0f:1d:4e:b2:7e:c1:9e:68:95:c5:e8:c7:5f:07:b0:45:
         67:de:2c:2f:d1:a3:81:71:e5:34:bf:c8:87:32:a7:a1:bd:a7:
         50:7c:61:53:7a:13:6d:f8:6d:d5:eb:95:38:73:22:30:f5:bd:
         9a:dd:01:de:7c:80:4b:db:d8:c7:29:dc:99:08:d1:8f:c4:bf:
         ef:0f:21:15:cb:04:19:5d:97:c7:b5:bf:f0:1b:87:5c:ce:91:
         9d:c7:c9:06:56:07:c5:24:c1:ee:ef:85:84:5c:96:70:25:50:
         e4:b6:b5:d1:f7:f2:99:29:bc:32:6f:a6:71:0d:95:da:fd:1d:
         b1:bf:47:52:ce:58:46:fd:80:72:21:58:d9:35:05:8b:d0:97:
         41:33:a9:32:f2:59:b6:3f:87:7e:82:b3:0e:f2:fa:4b:6c:3c:
         30:d2:52:80:ba:2c:45:8e:4d:5d:82:a8:8d:6b:f6:5c:3b:cc:
         f7:9a:5a:8c:3b:a4:30:ae:e5:c8:d8:8b:6c:58:ef:14:77:03:
         df:96:4e:f4:fe:6c:61:5a:0f:1b:cb:e5:3e:23:76:c6:27:ae:
         e1:d9:d8:58:39:5b:45:c6:b2:87:ad:6d:58:ae:56:3c:21:8b:
         3f:07:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:32 2025 by rpki-client