Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa
File:                     5d97d731-35fd-3e28-8224-78588f31f0da.roa (raw, json)
Hash identifier:          hUIog7d6Mo5d6DR3/FtP2RZfzuxl03b7rmkZhouxF+Q=
Subject key identifier:   88:31:00:E1:FA:EB:75:04:9F:D7:0A:ED:AC:9D:33:EF:28:A8:19:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA68227B134A9EE74E51A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396587
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:82:27:b1:34:a9:ee:74:e5:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=9b51ac7e-391d-44b5-a527-4ba9406658b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:7c:75:bf:2c:d3:5d:5e:05:e5:8a:16:c6:
                    01:87:1b:24:fe:68:ef:fc:53:b8:d1:5b:7c:0f:58:
                    9d:c4:08:a6:6d:02:3f:4e:06:20:57:90:ea:73:8f:
                    a4:d9:03:78:b3:e5:c0:e9:c3:2e:76:2c:06:96:6e:
                    6d:68:7e:fd:97:c1:a3:07:bd:97:98:cd:1a:e1:f5:
                    97:0a:3f:c4:63:76:58:06:a0:9f:0a:a6:d8:a9:09:
                    57:7f:66:06:53:ae:da:6d:8d:77:71:b1:16:2a:07:
                    90:82:eb:85:eb:75:60:51:ff:c7:b3:cd:b4:70:44:
                    70:a1:e8:9e:f8:30:8f:c1:6c:42:bb:c5:8c:5a:c6:
                    35:17:67:ba:8e:9e:ef:c9:60:d7:2d:07:7e:61:6a:
                    99:7e:46:c7:27:c6:79:ef:bc:5e:d9:d9:9c:eb:84:
                    fa:56:d8:2a:de:3e:9e:8d:2f:63:b7:b6:1c:6d:f3:
                    e1:aa:0c:40:d5:24:8a:42:90:55:06:11:bb:d4:bb:
                    51:94:36:01:9f:73:2d:f0:0e:d0:ec:45:4a:08:cc:
                    d8:bb:9e:1f:be:41:a1:ea:ad:1c:0d:f6:87:48:79:
                    da:ff:78:81:ea:d0:fe:bd:ae:18:18:1d:f3:a9:af:
                    be:58:db:8d:ac:a9:6a:7c:b0:0b:97:12:65:f5:42:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:31:00:E1:FA:EB:75:04:9F:D7:0A:ED:AC:9D:33:EF:28:A8:19:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:af:69:a5:57:1a:49:ff:ce:f7:2a:60:3c:69:8b:86:24:b5:
         e5:e2:e5:30:85:8c:89:ef:85:96:3f:b7:30:ea:cf:2c:6d:1c:
         f0:e6:5b:52:52:e3:81:55:ea:d1:56:e5:c4:52:19:b8:fd:33:
         64:a1:02:3a:7d:f5:32:11:50:13:b8:f5:ec:70:90:eb:66:b0:
         6e:37:db:89:f5:51:64:12:ef:2f:1a:8b:54:6c:a4:fe:f7:27:
         ec:b2:f5:68:11:8f:96:c9:2c:24:62:10:f8:dd:7f:d9:22:75:
         6f:9c:9d:81:7a:ce:f7:31:5d:26:19:7a:5d:0a:2d:2f:f7:d0:
         c9:ea:18:f2:55:b5:93:8a:fc:fe:35:90:c9:17:c7:a2:b8:79:
         c9:c9:96:93:57:b3:0b:df:0c:a3:bf:00:f1:90:78:a7:8c:53:
         ee:2d:4d:b8:e9:05:4b:02:58:58:d6:2a:e0:a5:ca:32:fa:10:
         4c:cb:a2:c5:72:6d:da:1a:18:f9:cb:fd:15:d3:1a:9e:37:98:
         f7:ba:fd:54:af:d9:b3:d2:be:c9:7f:87:58:73:95:1e:1e:10:
         f0:1e:c2:22:3d:6d:3c:44:bb:59:51:65:5b:98:61:86:16:c9:
         90:7f:9c:66:b7:ef:91:a5:ee:f3:cb:e2:61:ed:8b:db:80:62:
         f5:c3:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:35 2025 by rpki-client