Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa
File:                     029c442e-e959-34cb-a8ae-055f58dbc2d5.roa (raw, json)
Hash identifier:          ttv/ng9KUb66ewZ6NGsyhiB5TtAeCfi1FhJBFxHrp2M=
Subject key identifier:   A9:77:F5:99:67:AD:36:34:AB:3F:42:B1:70:67:56:EA:F2:94:B5:83
Certificate issuer:       /CN=50dd3001-8039-47e8-a642-92a97c54da3b
Certificate serial:       010D0C9F432858495C24368953EDB942F551DF00
Authority key identifier: 1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     400771
IP address blocks:        2620:b0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:36:89:53:ed:b9:42:f5:51:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50dd3001-8039-47e8-a642-92a97c54da3b
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=ee36122e-012c-4be6-bbc3-8bc75df0ff71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:12:fb:14:fb:a1:2d:a8:7c:70:21:1f:4e:
                    4d:3e:7e:76:f2:33:24:cf:74:8b:aa:49:dc:17:7a:
                    29:6d:a7:0a:0e:f2:a5:32:95:d1:d4:12:26:b1:39:
                    bc:b0:7d:07:92:30:28:1e:d7:c3:f9:eb:b4:f8:5e:
                    f3:9c:34:fa:bd:87:6b:1e:62:74:79:df:51:b2:b0:
                    72:22:a6:79:f9:d5:b9:22:1e:67:1f:7e:06:57:38:
                    ac:96:e3:0c:6d:30:69:9e:f9:53:37:ce:34:50:8d:
                    d8:28:d5:8f:8a:7f:fd:70:9a:5e:a8:17:6d:95:e5:
                    11:51:f5:f6:c7:55:a1:2a:3b:64:b9:03:6e:75:47:
                    7f:84:ad:99:d7:d9:35:dc:82:06:b0:17:77:d6:2c:
                    aa:dd:48:4a:25:ea:e6:2b:3f:09:5a:29:9b:e3:a9:
                    bb:d5:35:a6:30:78:90:99:48:08:23:7e:da:43:34:
                    a0:8f:e1:da:d2:d8:1d:ad:17:a7:27:58:60:31:82:
                    5b:03:1a:58:1b:86:f9:fb:a3:83:04:e2:d4:ff:06:
                    b5:3b:5f:ea:82:f3:b1:1c:5d:b4:2f:a8:85:d2:2d:
                    ee:8e:e7:6b:76:67:92:5e:f9:c8:5c:24:17:d4:65:
                    45:42:dd:49:0e:6a:77:2b:67:bc:c8:15:d1:6c:b0:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:77:F5:99:67:AD:36:34:AB:3F:42:B1:70:67:56:EA:F2:94:B5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/029c442e-e959-34cb-a8ae-055f58dbc2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl

            X509v3 Authority Key Identifier:
                keyid:1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:41:67:da:c1:0b:8a:3e:78:05:ab:01:06:fd:12:c7:84:e6:
         fb:e6:74:2b:b8:c0:9c:42:46:ee:83:3d:87:3c:30:cd:85:04:
         6f:2b:0b:86:d8:65:2a:49:68:49:c2:a2:fa:78:b2:b9:51:67:
         d5:b3:91:49:db:52:58:dd:a4:a9:b3:9e:9b:86:ba:66:30:bd:
         85:a5:f7:2e:34:a2:23:e8:e1:a3:fa:eb:d2:8a:8f:5c:30:2d:
         8d:4e:7f:db:12:76:43:6f:ea:9e:e3:cc:69:87:13:3b:de:78:
         34:bb:7a:81:a9:f2:5d:35:10:e5:9b:18:3d:4e:1f:b2:46:49:
         dd:32:25:36:57:3b:00:98:82:9e:a1:c2:2c:a9:49:f8:d4:2a:
         a3:a9:b5:5f:ff:18:19:10:32:d7:a3:90:2d:65:e5:dd:4c:20:
         78:6a:d2:07:68:4f:d5:7a:83:24:00:66:38:c7:62:0a:d2:03:
         ec:3c:55:56:25:2c:91:48:54:1b:41:77:da:57:52:c4:e9:f4:
         4a:7e:40:48:58:5c:80:00:9a:f1:86:8c:66:75:05:3e:bf:f0:
         99:a8:94:62:21:9e:79:28:9a:58:a7:d9:bc:a2:2f:f4:ac:af:
         78:d7:67:eb:13:43:f6:06:84:a7:28:a9:c2:22:23:34:7e:cb:
         9d:0d:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:58:34 2025 by rpki-client