Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/548f9d0a-1eca-3943-ade6-e8bbdf077d0d.roa
File:                     548f9d0a-1eca-3943-ade6-e8bbdf077d0d.roa (raw, json)
Hash identifier:          yXT+6N3bOFKZ2f+sbk7t2bcPqO7TuunKFqwoy4GygAA=
Subject key identifier:   10:A3:45:D7:90:96:DC:B9:CB:0E:6F:F4:8C:2A:AD:35:2A:21:5F:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7DF1A74848C1D0990458
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/548f9d0a-1eca-3943-ade6-e8bbdf077d0d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     21313
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7d:f1:a7:48:48:c1:d0:99:04:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0773d980-9657-4e37-a973-ff46ce4ea556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:b9:e9:88:7d:4b:e8:e6:70:06:eb:91:e9:
                    bf:e6:19:96:26:d6:d3:ed:cd:5e:c6:40:c4:8b:00:
                    98:cf:68:12:c0:16:31:1a:c9:5e:33:5c:b1:9b:a6:
                    58:87:f5:b5:a8:80:76:22:ba:bc:26:47:7c:2e:ac:
                    04:62:c9:d9:7b:d1:8d:05:c4:e8:b9:02:0c:80:7f:
                    f6:0e:04:73:54:c3:ee:fd:c5:09:d0:c3:07:8b:bd:
                    37:7f:6b:e4:94:1c:68:be:6c:a8:f5:bf:7e:25:ef:
                    f6:54:c6:fd:27:54:fc:2a:de:13:58:31:32:80:ca:
                    04:12:75:03:80:43:3e:6a:e7:8e:3f:04:96:f9:63:
                    2b:2e:3c:3e:d7:07:b6:22:b3:40:ae:b7:eb:8a:fd:
                    38:7a:35:6e:df:36:0a:dc:21:d7:d0:0a:37:63:3a:
                    8e:f1:ae:15:3a:59:7b:a3:92:9e:20:bf:04:f0:d6:
                    99:e7:f2:40:6f:cb:00:af:e7:b9:7e:60:08:eb:dc:
                    c5:d4:d4:c0:47:75:a2:39:35:37:e7:cc:70:a0:26:
                    db:bf:d1:13:43:ae:8a:23:c9:1b:7b:43:b0:09:ce:
                    c1:4e:1b:91:a7:78:a2:8e:7c:56:a6:9e:09:ef:2b:
                    fc:85:aa:bc:ba:b4:30:52:ad:1b:ce:0d:c3:a6:b1:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:45:D7:90:96:DC:B9:CB:0E:6F:F4:8C:2A:AD:35:2A:21:5F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/548f9d0a-1eca-3943-ade6-e8bbdf077d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:1e:39:43:10:4c:d9:e3:f0:14:61:1c:f4:a4:eb:c3:a7:
         35:60:b9:c7:aa:8f:4e:af:b6:a6:70:fd:47:27:91:10:fb:dd:
         38:a3:6c:a1:98:cd:c7:10:54:a2:4b:36:28:76:76:51:b0:c8:
         50:9d:e8:9f:a6:4b:1c:29:f9:d5:ce:21:ef:24:c3:a7:80:c4:
         99:b5:f3:56:9d:b2:39:af:ae:ec:41:a5:57:f0:b5:c7:cb:a3:
         e6:a4:32:f7:0f:da:af:2c:b2:17:64:cd:e6:8a:8b:61:fe:8f:
         6d:71:c2:12:09:0c:b3:1a:1f:b6:65:31:c7:25:3d:41:b1:0e:
         ad:f6:35:d3:2d:d7:b6:72:52:08:fb:08:fa:47:fe:cc:4d:55:
         cf:a4:aa:8b:46:27:ea:da:4a:2a:a1:bc:d3:72:ff:28:01:85:
         a0:29:c0:50:79:2b:97:74:bf:bd:9e:e8:91:65:cd:71:c6:78:
         36:d3:9d:21:b9:f9:1e:4d:d3:36:15:87:6b:9f:ac:8c:66:37:
         f8:69:a4:c5:7b:98:5a:10:6d:02:00:29:75:28:f7:e3:25:f4:
         a7:ea:ea:ba:65:08:11:6f:84:6e:b2:b1:40:df:8e:68:43:7b:
         af:36:e6:e8:a3:0d:70:6c:38:9f:cd:c5:e2:f8:63:ed:4f:e9:
         85:8a:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:41 2025 by rpki-client