Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa
File:                     aac28f52-c6fb-37bd-bedb-98bb7072157c.roa (raw, json)
Hash identifier:          1mqh7lDGu3hWlO5xzKT62TAZpw1TFodKp+AbMbXQIsM=
Subject key identifier:   10:70:01:FF:0E:00:E2:C4:86:2E:69:BD:40:46:09:C0:E8:2B:36:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6783E1BC5C07A281919A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396596
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:78:3e:1b:c5:c0:7a:28:19:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=a59fcc2d-7540-46fe-91a2-8dc55b10f8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:6c:d4:05:e6:9a:d9:76:6f:37:7f:c6:49:
                    d7:30:a3:57:fd:d5:ea:92:71:0e:22:4d:3f:ca:0d:
                    4d:cd:20:93:ef:e7:f3:49:ed:19:a9:94:72:01:fc:
                    88:a5:32:8e:af:17:25:fe:16:10:f1:1f:b7:51:c9:
                    f3:67:5e:19:42:32:d9:ef:98:d6:3f:ab:a2:a1:6c:
                    61:3a:df:d4:ff:d2:3a:4c:2e:cf:24:c9:6b:7f:7e:
                    b7:63:85:6e:0c:7f:60:66:1b:b1:4d:58:cb:c3:c6:
                    35:99:58:e1:64:5e:a8:2d:9b:5b:b4:6a:0c:2d:81:
                    b7:c2:67:67:9e:f5:84:ea:b5:e1:0c:f3:87:dd:47:
                    f1:7f:5d:10:49:2a:dd:e9:47:c6:9e:17:57:37:57:
                    e3:69:db:e7:8f:85:7b:41:72:26:9e:42:eb:5c:fe:
                    8a:87:a5:b2:b5:c6:7e:e5:a1:cb:ed:85:98:d6:c4:
                    17:b9:a2:a3:43:37:24:0b:5d:31:f4:9c:c1:7c:cf:
                    a6:9c:74:6c:df:71:11:ba:5d:75:25:ee:93:85:ca:
                    c7:fe:a3:ce:34:91:af:8a:41:92:b8:9c:9d:e0:9c:
                    0b:7f:75:d1:f3:cb:c1:f7:25:67:b9:f5:ad:d0:d3:
                    80:86:2d:60:12:f5:4c:0e:89:06:94:f0:98:31:4d:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:01:FF:0E:00:E2:C4:86:2E:69:BD:40:46:09:C0:E8:2B:36:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aac28f52-c6fb-37bd-bedb-98bb7072157c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:57:e9:35:14:2d:66:ee:60:2e:9d:9a:cf:d2:06:3a:44:
         0e:12:91:f6:a7:b5:2d:ca:19:81:28:db:2c:0c:1e:04:95:26:
         76:cb:62:d8:3f:f8:5f:e7:c0:14:27:a2:1d:87:b8:96:a1:51:
         91:b9:21:2d:22:ca:85:d4:0f:ab:47:ea:fd:64:95:18:ce:12:
         7e:28:87:10:65:39:3a:38:97:f5:89:3d:94:f5:c8:dc:57:14:
         97:1d:cf:7e:13:94:bd:cb:fd:c6:30:6a:95:db:78:3d:d1:0a:
         60:fb:a9:18:1f:7a:99:b0:79:b2:97:ba:34:93:a2:91:fd:25:
         28:bb:5b:4b:b3:2c:22:ad:2a:50:37:ca:5f:3e:6f:a0:55:c8:
         d3:fa:ff:d8:7f:7d:93:79:4a:47:3a:a7:95:82:e4:fd:58:1e:
         c2:bb:de:ee:3c:a8:23:cc:94:c1:94:2c:f5:9a:be:5f:c4:31:
         24:5a:4c:a4:13:c3:d1:7d:ce:bc:67:ec:57:ec:2f:69:46:af:
         5f:37:16:66:b5:36:e5:4a:80:b7:a5:1f:08:a9:e5:b3:9f:8b:
         a1:31:06:2b:99:0c:a0:67:1f:8a:d1:0c:55:8a:f1:0b:70:54:
         9b:e5:20:b4:47:f2:5a:0b:af:10:94:e8:ee:45:55:f1:77:29:
         f6:91:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:54 2025 by rpki-client