Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa
File:                     e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa (raw, json)
Hash identifier:          TLWcAQsOOmw6fubaSUgVzNTyOBjIMH+nxKmSz169Diw=
Subject key identifier:   77:00:12:7B:4B:D2:56:10:DE:6D:72:D1:14:D1:44:5B:40:61:62:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6BBC22A48E6E35C11740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396596
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6b:bc:22:a4:8e:6e:35:c1:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=a2d0ef1c-d641-4ca2-a68a-b9331448f88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:d1:fb:3b:d7:10:e9:b2:56:81:a5:0e:eb:
                    97:c0:ab:19:75:3a:ff:db:16:02:c3:4b:6b:33:be:
                    ec:3e:a7:b3:42:60:92:79:84:e3:09:f2:b7:a1:d4:
                    23:d0:b0:96:77:80:cf:d6:79:49:6f:63:7d:a0:5e:
                    69:64:db:b7:8d:33:2c:8b:c4:18:eb:e3:da:28:ac:
                    d6:4c:ba:fd:3f:fa:d4:5a:78:b2:26:15:1c:c3:23:
                    85:90:11:d3:10:3d:de:8a:46:2b:c1:23:a0:96:00:
                    90:d6:56:e1:21:40:2b:7b:90:4d:01:c8:14:c3:c8:
                    3a:4c:db:98:82:bb:69:20:95:17:ec:2e:f6:e2:6b:
                    f1:6d:cc:e3:c6:30:35:47:3c:e9:33:f2:54:35:7a:
                    db:d1:e9:fe:3c:90:e8:ed:a7:09:fb:9e:e6:95:7f:
                    1b:01:8a:b9:81:e8:79:ef:74:6f:ed:34:fd:84:76:
                    89:cd:83:43:89:6c:cf:f3:63:b0:3a:74:4b:81:95:
                    b0:3f:32:09:a5:d1:98:c8:8b:77:8a:20:b8:f2:34:
                    1f:37:ef:81:b3:f4:79:90:0d:c8:00:3f:45:e6:8a:
                    0d:17:ad:81:93:2e:32:ab:a5:e5:8f:d9:76:6d:68:
                    2a:23:1b:a1:c4:09:b2:59:ac:5a:f6:fc:96:04:29:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:00:12:7B:4B:D2:56:10:DE:6D:72:D1:14:D1:44:5B:40:61:62:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e7baaf87-3a3a-3715-87a3-4a9c85a34397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:a4:22:82:f7:2f:a1:45:a2:ab:45:a7:21:e7:a5:29:3e:
         b6:ca:d9:7f:31:8e:b1:ef:26:e2:cf:2b:5e:6d:b4:62:76:f4:
         c9:e2:fa:41:06:4c:98:0e:ff:66:7c:68:3e:87:2a:26:23:fa:
         4c:d9:b0:96:aa:3c:87:39:99:aa:47:f0:f3:c2:00:a2:49:e4:
         5a:b3:27:74:e2:29:0b:9f:df:06:54:10:34:99:86:2e:58:13:
         00:bc:98:99:b5:b8:9c:f7:99:a6:83:b8:57:e7:7d:c5:54:e0:
         93:c4:a0:2d:a5:19:e9:ac:d8:7b:f9:b8:89:75:53:e5:05:61:
         74:3d:75:0b:0f:26:80:56:8e:c9:ba:0f:bd:77:76:7a:ea:a5:
         8b:1f:4a:40:82:7f:17:1b:cf:3e:ab:78:d8:e9:80:71:f8:9b:
         c3:3b:27:dc:95:30:5a:6b:42:8c:52:99:3a:30:99:ab:0e:d4:
         9f:42:58:5b:7d:31:ac:5e:22:62:52:26:c5:b4:01:a7:f0:f3:
         35:3e:5d:2b:10:70:93:08:b8:85:63:9e:01:1b:cd:bb:5c:16:
         83:31:66:fa:89:9b:d6:7e:93:2b:53:d2:d4:c2:0a:8d:14:56:
         71:6d:f5:b7:3d:fa:ae:b5:13:7d:f0:4c:e0:06:32:1b:3e:a0:
         8c:3b:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:03 2025 by rpki-client