Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62268437-8038-3736-9a81-18c5694dd092.roa
File:                     62268437-8038-3736-9a81-18c5694dd092.roa (raw, json)
Hash identifier:          UIeAQXJ76fRTLsq4aQMh86VtDiHYaRJzOZ7936YPiYA=
Subject key identifier:   51:2F:C9:1B:B5:84:3D:3F:56:9F:5E:30:39:32:1D:02:E2:28:3F:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6B2F3787CC6178357800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62268437-8038-3736-9a81-18c5694dd092.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396586
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6b:2f:37:87:cc:61:78:35:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=dfab0327-235b-4a2b-8628-0038295e76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:b6:63:0b:54:9e:37:ba:f8:b6:95:b8:48:
                    fd:7a:d9:26:a5:78:10:3d:43:8a:2c:7d:ee:29:4e:
                    d0:a4:82:50:3f:11:f0:b8:b1:da:18:9a:45:cc:fb:
                    2f:8f:56:a4:06:8f:3d:a3:9b:ab:d5:ad:b5:63:e6:
                    20:45:b5:4b:99:6b:0f:6d:76:0f:1d:42:23:0e:b7:
                    ac:5d:84:e7:23:32:aa:76:b9:c1:19:b7:b7:4e:da:
                    82:5c:c3:e3:b6:54:c5:b8:03:4c:33:d6:fa:fd:de:
                    33:e4:00:37:8a:58:64:7f:2c:15:f3:9b:8b:ce:35:
                    32:57:b0:73:b8:11:e1:06:4f:fe:99:08:84:b8:02:
                    5a:e6:e9:e2:0b:08:cf:b6:ce:c4:fe:b7:30:e4:66:
                    fd:eb:92:d7:9b:f6:23:8f:95:8e:d1:b9:a2:17:3f:
                    b9:2a:3f:49:9e:da:5d:fe:f0:7d:4a:31:7d:65:87:
                    34:c8:49:1e:64:49:2a:92:76:a3:f3:8f:6d:d2:6f:
                    79:b3:dd:8e:13:10:15:98:2f:a4:8e:ca:d6:a5:4f:
                    f1:d7:5e:69:51:94:b8:4c:3a:fd:5e:bc:12:c3:ac:
                    b7:2d:10:ac:03:a7:85:50:8f:29:e3:55:8e:28:f2:
                    e9:64:db:37:46:43:26:cd:95:9e:aa:b3:76:f7:90:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:C9:1B:B5:84:3D:3F:56:9F:5E:30:39:32:1D:02:E2:28:3F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62268437-8038-3736-9a81-18c5694dd092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:db:cc:73:d1:c8:8a:5c:2d:6e:fa:77:24:5f:24:14:bb:5e:
         85:29:ad:81:27:9a:98:1e:fc:6c:a2:bd:b0:0b:1e:e7:5f:54:
         ce:77:b5:3a:e5:20:a2:70:1f:fc:48:a4:f4:25:f1:1e:13:75:
         07:a3:dd:ad:9b:6e:ca:5f:0a:9a:cb:7d:4d:97:24:88:18:5d:
         b8:f1:4c:2f:5f:f6:e7:18:c7:4a:5a:8f:f2:66:1e:73:c3:ee:
         91:4a:e4:23:36:93:c2:96:57:0f:e0:75:8e:20:c7:e0:ca:82:
         54:a4:42:83:d6:6e:41:18:f3:4d:9a:66:81:f6:12:7b:59:8c:
         b2:1e:f0:cc:42:90:82:13:88:f1:2f:4e:9f:58:69:c8:a9:e6:
         6d:9f:18:6c:14:0c:fd:0f:c2:f9:27:0e:b2:44:a6:28:2d:38:
         6e:17:c8:52:7d:00:e7:39:d2:1c:96:70:2e:86:98:b3:fd:74:
         f8:a9:ca:83:5b:ca:fc:61:78:c5:43:63:24:b3:82:5a:b3:50:
         2a:36:1a:cd:95:75:bc:b6:d6:6c:d7:4b:d4:19:d1:3e:cc:b9:
         ac:31:4c:39:15:d7:94:d9:d5:ca:cb:4a:1d:40:05:27:3b:5d:
         54:4c:80:51:d4:a5:e5:ab:fa:07:4b:7e:be:ad:cf:f4:ac:42:
         19:5c:77:9c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnr6msvN4fMYXg1eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
ZGZhYjAzMjctMjM1Yi00YTJiLTg2MjgtMDAzODI5NWU3NmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLi2YwtUnje6+LaVuEj9etkmpXgQPUOKLH3u
KU7QpIJQPxHwuLHaGJpFzPsvj1akBo89o5ur1a21Y+YgRbVLmWsPbXYPHUIjDres
XYTnIzKqdrnBGbe3TtqCXMPjtlTFuANMM9b6/d4z5AA3ilhkfywV85uLzjUyV7Bz
uBHhBk/+mQiEuAJa5uniCwjPts7E/rcw5Gb965LXm/Yjj5WO0bmiFz+5Kj9Jntpd
/vB9SjF9ZYc0yEkeZEkqknaj849t0m95s92OExAVmC+kjsrWpU/x115pUZS4TDr9
XrwSw6y3LRCsA6eFUI8p41WOKPLpZNs3RkMmzZWeqrN295ASMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFEvyRu1hD0/Vp9eMDkyHQLiKD9DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjIyNjg0MzctODAzOC0z
NzM2LTlhODEtMThjNTY5NGRkMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAH28xz0ciKXC1u+nckXyQUu16FKa2BJ5qYHvxs
or2wCx7nX1TOd7U65SCicB/8SKT0JfEeE3UHo92tm27KXwqay31NlySIGF248Uwv
X/bnGMdKWo/yZh5zw+6RSuQjNpPCllcP4HWOIMfgyoJUpEKD1m5BGPNNmmaB9hJ7
WYyyHvDMQpCCE4jxL06fWGnIqeZtnxhsFAz9D8L5Jw6yRKYoLThuF8hSfQDnOdIc
lnAuhpiz/XT4qcqDW8r8YXjFQ2Mks4Jas1AqNhrNlXW8ttZs10vUGdE+zLmsMUw5
FdeU2dXKy0odQAUnO11UTIBR1KXlq/oHS36+rc/0rEIZXHec
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:25:04 2025 by rpki-client