Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
File:                     5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa (raw, json)
Hash identifier:          q00ABeq0WF2DgRi8G8xDMcvvJ1dO05Tp53hXKJoTD2Q=
Subject key identifier:   33:F1:5E:9E:FC:3B:03:A2:A6:0C:D2:FA:6C:2D:1A:C0:53:93:7A:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA675FD5179B3829E936640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396599
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:75:fd:51:79:b3:82:9e:93:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=176b267a-2e86-4104-86aa-7afd381ea7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:5f:c8:6a:b7:40:a5:2e:f1:4f:57:50:7d:
                    67:3f:62:46:52:c7:7e:55:0a:94:7b:4e:c2:cb:35:
                    8a:85:a3:e9:5f:52:36:88:d5:63:f0:49:51:1d:82:
                    05:93:6e:f1:12:4e:59:7a:da:4e:34:a0:f0:c0:d4:
                    bc:1a:98:c5:ca:9d:81:db:63:d2:9e:5d:86:11:07:
                    33:22:5e:73:09:7b:56:71:2a:65:e2:c6:f4:d4:58:
                    89:4b:7c:e9:ec:67:0e:f9:ac:e5:2c:7f:8e:6a:fd:
                    c7:b9:d1:37:15:2a:35:8f:92:20:51:0f:77:89:04:
                    92:20:78:16:c1:a2:75:d8:96:41:e2:2f:32:52:a5:
                    15:dc:6f:1a:78:58:99:3d:9c:d8:b4:49:0c:d3:38:
                    64:3f:38:9b:aa:c4:e3:71:39:01:1d:5c:21:fe:93:
                    a5:67:e9:38:12:e8:e2:7b:b7:6b:2a:3e:19:00:57:
                    05:a8:ba:e8:bb:20:09:35:63:28:09:55:86:4c:f0:
                    4e:15:74:a0:89:7d:04:ab:11:78:92:1a:c0:12:c8:
                    41:e2:b9:46:ea:87:77:0a:03:95:bd:e8:cb:f5:77:
                    6d:e9:20:b3:6d:16:64:63:d3:0b:c2:79:58:2c:6c:
                    6e:30:65:ae:d7:19:71:63:5d:d2:a9:40:a5:17:45:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:5E:9E:FC:3B:03:A2:A6:0C:D2:FA:6C:2D:1A:C0:53:93:7A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:14:dd:bf:95:b7:48:f0:91:25:88:34:b1:8d:43:f8:28:
         61:b9:66:ab:29:5d:6c:b0:73:7e:61:c8:7c:53:b1:f7:9d:7d:
         03:ac:10:e3:ea:85:e7:ee:64:6c:d8:90:7f:9f:a6:26:f0:48:
         cf:34:16:f5:b3:2e:07:af:ca:e1:86:e7:0d:8f:0b:0c:a0:76:
         3e:ba:09:fe:55:3a:ca:08:9e:fe:7d:22:41:67:3a:d2:80:b3:
         6e:a5:5e:4b:8d:62:55:20:fe:aa:c8:67:77:4b:76:c7:8e:09:
         ea:21:a9:b7:89:9c:bf:23:16:17:69:33:fc:c0:12:ce:b8:8f:
         38:69:72:e5:d9:2f:3b:96:41:59:08:b7:1d:c4:46:61:f7:9f:
         cf:0a:4f:1c:7f:68:52:0e:0f:00:65:a5:78:b1:b9:7d:ef:b9:
         a5:37:61:23:42:21:93:84:3d:5e:6c:35:f7:6a:a5:d2:2c:13:
         2e:19:84:90:f0:06:2a:f3:fd:ec:4c:5c:ac:49:5d:c0:ff:eb:
         f6:25:80:a7:00:01:03:9b:19:62:c5:cd:41:bd:5e:47:83:9d:
         ef:54:ae:5a:7c:c1:71:f5:2f:94:82:03:68:9f:66:34:6b:ca:
         12:71:26:87:75:84:14:66:b9:4e:57:7d:07:5c:11:71:bb:3d:
         9e:7c:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:16 2025 by rpki-client