Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ce777c-856b-3b10-bd45-2b5589dc53de.roa
File:                     e4ce777c-856b-3b10-bd45-2b5589dc53de.roa (raw, json)
Hash identifier:          Zfl1bFgrTtRyEtmAJTmBYQ6IG3uTkfXT79DTDtKOQcI=
Subject key identifier:   13:3D:88:37:84:2B:22:24:7B:48:7C:F0:4F:37:51:C0:55:89:27:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA743DCC5B7BAE6DA33700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ce777c-856b-3b10-bd45-2b5589dc53de.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396597
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:74:3d:cc:5b:7b:ae:6d:a3:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=01fcd26c-a676-4ec3-ab0d-f4af3a9a8368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:36:f0:ba:ae:8b:ae:4f:63:05:86:c0:30:
                    79:1b:ea:e8:64:52:a9:9e:60:a3:61:7d:e4:65:5b:
                    5f:e7:48:d1:7b:3a:3d:dd:8c:e9:b1:95:e2:5e:35:
                    ae:9b:b3:5e:99:a7:0a:fc:88:34:5b:cb:51:82:45:
                    ce:85:e2:e9:34:8a:41:34:39:dd:dc:03:c3:18:e9:
                    d3:28:59:66:b4:66:49:33:95:80:6b:cc:b6:cd:fc:
                    0d:ac:f4:0e:4c:64:b6:d5:1c:10:61:73:8b:c9:7f:
                    8f:34:b1:e9:26:82:10:85:83:75:60:52:16:71:20:
                    af:46:93:ff:c3:e2:88:7b:94:03:51:7a:de:fb:e4:
                    27:2e:db:2d:f3:8b:ee:b3:45:86:13:cc:4f:7a:36:
                    ce:6f:8e:af:66:e9:74:67:89:8b:05:d2:d3:68:ad:
                    e0:e1:ab:fe:15:3f:ab:ce:72:f8:b0:ee:e4:52:cc:
                    77:15:3f:88:da:a6:65:f4:db:3d:c8:30:13:63:fb:
                    24:91:7b:4e:4e:18:4d:13:02:25:84:a2:be:5d:b8:
                    50:dd:92:cf:13:5a:47:35:c5:05:0c:b1:45:31:3b:
                    67:c7:91:6c:0b:96:43:f0:6a:ed:fa:02:4e:d2:a4:
                    84:d0:a6:24:b9:f4:75:98:a4:50:19:96:b4:df:48:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:88:37:84:2B:22:24:7B:48:7C:F0:4F:37:51:C0:55:89:27:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ce777c-856b-3b10-bd45-2b5589dc53de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:16:9c:c9:32:a6:39:24:c5:9a:03:15:e1:3d:6d:25:1c:
         8a:c4:55:01:b1:06:96:12:bc:48:b6:88:2e:e3:92:4f:3c:f7:
         2a:8c:b3:4e:4a:6f:a9:e1:c4:76:15:f6:51:4b:b1:4d:c7:7d:
         7e:48:53:fb:98:86:d1:ab:8f:9c:32:53:63:db:67:3e:ae:aa:
         19:5a:46:46:b1:17:ef:d2:3a:ba:b1:c3:7d:23:9d:19:f9:a9:
         ed:f4:29:a9:01:aa:68:11:72:e1:ca:c3:79:8c:cd:5b:d9:dc:
         47:af:b8:db:a7:ea:aa:69:5e:9f:35:0e:e3:c5:6d:75:2e:3d:
         06:fc:b1:90:b8:89:99:92:49:fe:a8:5a:51:4f:2b:54:0e:32:
         64:d6:bb:dd:a1:cf:75:5a:f6:01:d5:dd:7f:ba:56:69:e6:f1:
         7c:ca:bb:01:48:55:6c:82:ef:eb:b5:33:1c:2e:95:1a:19:b1:
         93:ff:d4:38:a0:3c:76:44:ab:43:f1:b2:50:9f:3a:5d:bf:ba:
         73:0a:00:d6:d8:16:6b:33:a9:1c:05:13:fe:dd:39:a7:a2:f8:
         0f:8b:d8:94:81:6e:c2:8f:f8:bc:6a:90:5e:b6:d8:70:11:84:
         bb:84:12:0c:e5:e1:05:a9:ce:49:01:4a:e5:97:65:dc:50:08:
         94:38:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:24 2025 by rpki-client