Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
File:                     31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa (raw, json)
Hash identifier:          dDIUROAgpEZ46VwguuuVy5VU5RVXvytaE5OYfEDWNiM=
Subject key identifier:   F4:80:AB:18:17:84:00:B9:20:5A:3E:4B:00:D9:9D:0A:23:F2:E1:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7E94DF06672CFF6C9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396563
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7e:94:df:06:67:2c:ff:6c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=4913b0eb-e5d7-409f-bd8c-9d9ddec41ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:1d:36:f4:e6:3e:bc:76:a6:28:8d:6f:10:
                    c3:93:92:77:d2:d6:21:1e:13:71:5c:c3:a5:fa:f7:
                    dd:5d:6b:b6:16:d2:08:ad:50:02:7e:16:6d:71:4f:
                    89:16:a3:62:22:25:84:f8:b9:8b:fb:0a:b0:73:a5:
                    20:9b:9b:2d:86:fe:fb:e4:c6:d5:65:44:cd:44:b3:
                    64:ed:40:f6:3a:87:2b:57:30:58:9a:8d:d9:01:45:
                    bf:fd:b5:b0:e7:21:12:14:87:a5:47:a1:c3:2d:ac:
                    fb:a2:6f:ed:62:d1:21:3e:2a:fc:e1:00:ae:b6:ca:
                    2e:c9:76:9f:d5:af:9c:56:a0:b0:16:ad:f0:5e:8f:
                    75:96:b0:96:65:6b:30:d9:58:61:ef:78:33:9d:f8:
                    20:eb:85:2b:8f:4e:3c:51:04:64:d0:82:ea:71:92:
                    47:b0:d0:60:83:e9:b5:44:23:2b:ea:a1:d0:a8:e2:
                    58:1e:1d:dd:be:29:69:5f:7f:d4:72:2d:96:5f:4b:
                    71:34:c6:9c:06:38:d0:4d:a0:8d:83:a1:4f:cd:1f:
                    be:40:ce:79:dd:05:73:04:c4:c8:1f:90:05:dc:b9:
                    41:3d:cb:96:42:e6:53:0b:8f:d3:67:5a:18:64:a7:
                    43:2d:20:63:c5:db:d1:42:05:d1:3c:8a:60:75:fd:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:AB:18:17:84:00:B9:20:5A:3E:4B:00:D9:9D:0A:23:F2:E1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31ab87a9-7dd1-3a56-8daf-9a43c5e9a891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:fc:7e:4d:5f:e4:02:3a:c0:f2:55:09:d9:e3:22:84:c6:
         8e:2b:b2:87:a3:95:1b:d0:62:de:64:bd:a6:d3:a3:30:5d:de:
         ba:18:45:b1:a1:ba:e8:79:1a:96:3a:b1:57:13:a8:e1:2b:f1:
         33:fd:d1:23:1b:54:85:be:03:e8:ec:09:b5:84:3e:a5:25:bc:
         ff:76:d1:f1:35:ad:0c:f0:f7:a3:a6:c6:78:d6:88:88:89:b6:
         d1:49:06:44:56:a4:0a:98:28:67:29:8c:0f:63:bd:09:9a:c1:
         66:87:01:b7:b4:db:5a:f5:d7:80:0b:fc:9c:50:b1:41:cb:2d:
         53:ed:fd:d2:38:00:3f:2f:c2:86:d5:0f:d1:54:7e:a8:fa:08:
         2e:69:4c:fd:6f:2f:a7:ef:ba:bc:0e:72:83:9c:b2:8e:8a:5d:
         c6:47:d0:d2:ab:36:96:98:65:30:ea:3c:0d:1b:98:1e:5b:b3:
         53:82:4c:d8:99:9c:82:9c:56:67:a5:31:8d:ec:a8:c9:f5:33:
         44:a6:90:ed:bd:c8:88:22:a2:ff:60:d4:30:ab:75:87:13:73:
         82:70:42:e7:d0:de:72:cd:f6:10:cd:97:d6:a6:c5:d3:5a:1a:
         00:e0:66:50:07:fc:54:5a:17:6b:5d:aa:ba:84:56:06:4f:c0:
         42:a6:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:47:03 2025 by rpki-client