Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0031f94-a21d-323b-9aa9-d72d69b02fb4.roa
File:                     f0031f94-a21d-323b-9aa9-d72d69b02fb4.roa (raw, json)
Hash identifier:          JxaFHWpn3ZOvxm0EBR+CYQCz9pkHxngplLJVYLxGV9E=
Subject key identifier:   C4:02:4D:C9:82:57:32:EF:6B:EC:C4:B8:97:E8:DC:11:C7:84:3F:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA69C5A6081B34BEA02700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0031f94-a21d-323b-9aa9-d72d69b02fb4.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396580
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:69:c5:a6:08:1b:34:be:a0:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=ee143d12-1146-48ae-b44c-4087adb76113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:34:3c:26:51:78:a7:db:d8:d8:09:36:46:
                    6d:80:fe:d0:64:24:b9:84:75:3a:1b:4b:39:88:0c:
                    07:8c:7b:c6:f7:4e:14:82:00:f3:ae:1b:12:f7:5c:
                    4b:d6:d8:88:54:60:69:cf:69:34:5a:fa:9f:cb:e6:
                    5a:b6:4f:ee:79:80:be:9b:27:63:f8:16:4c:8b:89:
                    ee:95:eb:84:94:d4:3a:9e:00:da:1a:1f:a8:96:ac:
                    ec:78:9a:c8:15:06:5d:0a:9e:60:14:73:b6:1a:4d:
                    6d:67:75:28:82:a5:da:b1:42:71:ca:48:eb:05:f6:
                    45:aa:b7:31:07:fa:3b:02:18:f8:97:62:af:16:a3:
                    40:bb:fe:ae:84:0d:6d:ee:c5:8a:29:9a:e0:d0:be:
                    e6:c8:42:0f:0d:66:d4:2d:c2:47:9c:d6:5a:68:40:
                    ef:cb:4f:ea:28:41:a6:0a:29:c8:68:47:ed:7d:be:
                    52:83:dd:69:3c:94:f2:51:63:a7:1a:97:5e:28:36:
                    2b:1c:d0:03:05:bc:7e:1a:8f:93:61:50:cd:e2:23:
                    15:70:62:ea:21:0e:9d:d0:17:ec:85:c0:fa:d5:d7:
                    87:2a:4b:11:d6:8e:12:fd:b0:5f:cf:19:dc:ca:07:
                    61:0a:90:f0:9f:af:d0:eb:99:fb:a2:9c:3a:da:a8:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:4D:C9:82:57:32:EF:6B:EC:C4:B8:97:E8:DC:11:C7:84:3F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0031f94-a21d-323b-9aa9-d72d69b02fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:70:c9:08:10:5c:e9:c0:9b:cd:d0:af:0d:a0:d4:7b:a1:
         a9:d1:cf:9e:7b:ac:78:37:61:13:89:91:b3:b8:2e:63:a0:26:
         72:51:b8:32:78:20:cc:fe:40:63:03:43:8b:92:1a:8a:5c:84:
         3b:cf:eb:bc:37:68:66:c0:26:60:34:42:a1:5a:f3:5c:13:f4:
         36:2e:9b:81:eb:e3:53:98:32:c2:6e:86:f5:da:92:95:f5:2e:
         ec:e5:b4:6d:eb:3c:dc:2f:c5:17:e5:4a:38:0d:7d:4e:34:0a:
         a0:1f:a5:1d:e9:da:0a:90:91:ac:51:6b:d6:e7:8b:f2:6f:20:
         cb:b4:ef:17:30:46:69:d4:75:6e:c9:76:23:df:f8:a9:32:7b:
         f5:2c:7e:19:08:06:f9:99:c4:dc:40:99:9c:53:2d:b2:40:1b:
         3b:00:2b:ec:59:15:d7:a5:96:13:24:03:79:2f:90:8d:bf:bd:
         3d:d6:0e:c0:31:64:9d:19:3d:f5:57:f5:5f:37:6d:cd:ba:0b:
         d5:69:97:d0:09:a9:3d:26:8c:26:ab:d2:6e:4e:4c:70:bb:d0:
         08:85:da:76:7a:c7:8b:09:fb:6b:59:58:d9:11:79:c6:df:a5:
         e0:a3:f8:5d:93:5d:df:00:9b:97:52:21:b3:dd:ff:12:cf:18:
         26:b4:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:45 2025 by rpki-client