Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e58418a-fd61-31d6-9669-1e88a279954d.roa
File:                     0e58418a-fd61-31d6-9669-1e88a279954d.roa (raw, json)
Hash identifier:          vR2uW3WKjZBH4sxBXcQ4XHGrexgpPaX8VNBQBl02e18=
Subject key identifier:   3A:36:95:78:A0:97:39:87:9A:F5:DF:9B:41:24:20:8C:3F:1E:69:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15CB46B5B7EC88A921180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e58418a-fd61-31d6-9669-1e88a279954d.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396608
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5c:b4:6b:5b:7e:c8:8a:92:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=e2f55b33-d93c-4a05-9eb1-f6a20d31920e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:c6:66:d0:65:d4:17:25:e0:52:fe:6a:67:
                    20:c9:bc:e3:fd:2e:dc:5d:e8:aa:04:5e:7f:61:dd:
                    97:5c:98:c2:84:6b:0c:8c:a0:d8:b6:11:80:09:35:
                    0f:64:e1:32:19:40:aa:a4:40:71:cc:cb:bf:00:59:
                    f5:65:36:0c:84:55:dd:b4:c7:da:bd:d6:04:e7:40:
                    fb:73:d3:51:ca:44:b1:c8:0e:52:10:f7:2e:0b:ff:
                    ce:57:78:8d:26:e9:28:71:e0:28:30:7e:6f:d6:e6:
                    8b:8c:1c:be:ac:5b:f9:33:c1:b6:87:a7:48:1a:3c:
                    87:bf:3f:47:b4:7d:40:b0:25:b5:5b:96:8c:f2:89:
                    e2:e3:1e:a7:96:7f:ad:fe:8e:eb:d0:24:09:d3:b7:
                    65:97:1f:4d:e7:ed:87:ef:9e:63:47:d1:f2:16:7f:
                    af:e5:d7:04:99:2c:e9:5e:eb:ff:5a:d6:7d:0b:15:
                    b7:fe:c9:2e:ce:01:c0:35:d6:fa:d0:21:d0:24:d9:
                    a3:a4:bd:30:ce:3f:cd:e0:16:b3:01:c7:d5:de:38:
                    95:62:f4:18:ed:b3:bb:f8:ec:69:76:31:8c:f8:50:
                    be:a2:75:09:7c:c5:f9:c7:66:f5:cb:a4:9e:ec:cc:
                    6e:f3:7d:b8:9d:a4:de:24:29:95:1a:6d:e3:b8:1a:
                    e6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:36:95:78:A0:97:39:87:9A:F5:DF:9B:41:24:20:8C:3F:1E:69:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e58418a-fd61-31d6-9669-1e88a279954d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:6c:9b:08:a4:ff:a9:bd:e8:80:c6:63:5c:3b:d6:7b:c4:
         00:c4:9e:1f:86:a7:61:68:a0:ff:69:ec:2f:56:38:07:13:87:
         d3:50:60:78:65:80:cd:af:30:af:63:a6:f1:17:4e:96:b9:48:
         3f:09:b7:1d:e1:56:a5:c1:d5:5c:ab:c1:63:60:b3:51:4c:79:
         55:79:44:7f:c5:d0:4c:25:7d:49:77:8b:69:04:b3:e7:2e:f6:
         3d:76:63:04:2a:3c:56:39:c8:82:da:fc:cd:55:97:be:13:40:
         a0:37:09:71:a0:36:66:38:e2:e1:2d:9e:c1:63:0a:b6:f2:15:
         41:a7:18:ee:1f:df:03:10:8a:74:33:14:06:6a:85:5a:a3:b8:
         8c:50:ac:89:c7:17:7c:4b:82:98:14:94:e6:19:7f:8b:72:ad:
         a9:80:34:d1:e3:9c:e4:1a:7e:24:cb:d2:00:58:d7:1b:2f:35:
         6d:01:98:2c:fe:23:e8:36:46:3e:4e:cd:a6:26:13:3d:32:95:
         e9:d8:3b:0e:12:fa:18:c3:34:40:08:d7:3f:e9:5b:b2:5c:50:
         d7:ab:d9:7c:dc:91:07:c2:2b:7b:22:b5:ec:65:a0:4f:f4:49:
         91:4c:47:fe:90:4e:bc:c8:00:6e:10:8a:bb:37:1f:c3:90:25:
         04:89:5f:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsVy0a1t+yIqSEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
ZTJmNTViMzMtZDkzYy00YTA1LTllYjEtZjZhMjBkMzE5MjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWXGZtBl1Bcl4FL+amcgybzj/S7cXeiqBF5/
Yd2XXJjChGsMjKDYthGACTUPZOEyGUCqpEBxzMu/AFn1ZTYMhFXdtMfavdYE50D7
c9NRykSxyA5SEPcuC//OV3iNJukoceAoMH5v1uaLjBy+rFv5M8G2h6dIGjyHvz9H
tH1AsCW1W5aM8oni4x6nln+t/o7r0CQJ07dllx9N5+2H755jR9HyFn+v5dcEmSzp
Xuv/WtZ9CxW3/skuzgHANdb60CHQJNmjpL0wzj/N4BazAcfV3jiVYvQY7bO7+Oxp
djGM+FC+onUJfMX5x2b1y6Se7Mxu8324naTeJCmVGm3juBrm4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDo2lXiglzmHmvXfm0EkIIw/HmllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGU1ODQxOGEtZmQ2MS0z
MWQ2LTk2NjktMWU4OGEyNzk5NTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJwRbJsIpP+pveiAxmNcO9Z7xADEnh+Gp2FooP9p7C9WOAcTh9NQ
YHhlgM2vMK9jpvEXTpa5SD8Jtx3hVqXB1VyrwWNgs1FMeVV5RH/F0EwlfUl3i2kE
s+cu9j12YwQqPFY5yILa/M1Vl74TQKA3CXGgNmY44uEtnsFjCrbyFUGnGO4f3wMQ
inQzFAZqhVqjuIxQrInHF3xLgpgUlOYZf4tyramANNHjnOQafiTL0gBY1xsvNW0B
mCz+I+g2Rj5OzaYmEz0ylenYOw4S+hjDNEAI1z/pW7JcUNer2XzckQfCK3sitexl
oE/0SZFMR/6QTrzIAG4Qirs3H8OQJQSJX10=
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:25 2025 by rpki-client