Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
File:                     68c68e79-1c47-3078-9917-47c5d37abb24.roa (raw, json)
Hash identifier:          jbCCleMH9MoR9xeewp+5//ULN6jRTGDjTupX/jm7C8E=
Subject key identifier:   6A:F9:9C:E9:7C:AD:8F:F9:5F:AE:71:B5:36:12:44:C8:36:2D:FE:4E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849A1CE012604B815150FF63400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa
Signing time:             Thu 24 Apr 2025 11:54:03 +0000
ROA not before:           Thu 24 Apr 2025 11:54:03 +0000
ROA not after:            Wed 23 Jul 2025 11:54:03 +0000
asID:                     19905
IP address blocks:        2604:2e89:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:01:26:04:b8:15:15:0f:f6:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 24 11:54:03 2025 GMT
            Not After : Jul 23 11:54:03 2025 GMT
        Subject: CN=02289026-dae0-4c9a-a719-8745e01a9122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:51:6d:6f:c5:b8:3d:b8:af:8f:51:82:6c:48:
                    5a:35:24:81:bc:ae:7d:7f:ae:16:a1:84:fa:89:4b:
                    e3:cb:04:a8:d7:eb:7c:18:fb:8c:cc:33:cd:8a:81:
                    e5:a6:da:d8:6f:4f:04:09:42:5e:8e:95:da:f3:60:
                    f4:9c:3d:85:b2:4d:fa:94:c9:de:a6:b7:82:17:26:
                    64:fb:db:8f:a0:13:71:f6:98:e4:f4:ee:21:ad:aa:
                    36:f2:1a:44:32:b6:4d:10:7b:cb:25:6c:97:6e:f9:
                    ce:a1:98:af:e8:b1:41:4b:b5:0e:4e:a5:ce:b9:74:
                    bf:15:b1:e3:15:d5:c4:f2:f3:1d:cf:39:4f:dd:be:
                    13:51:cd:2a:e9:a6:6d:e6:85:56:c1:e4:27:c9:80:
                    e3:fd:2c:1a:cd:25:85:fd:72:65:25:b9:e4:c3:2b:
                    3e:a3:25:76:ef:ae:42:dc:a2:13:06:93:f5:1d:3c:
                    8a:fc:fa:cf:6c:f2:8f:58:00:18:0d:a3:e8:e8:4f:
                    0f:c3:84:eb:39:96:50:e8:96:83:83:d5:fa:d1:30:
                    ef:df:ef:f8:ea:f0:b1:5c:a6:43:65:a2:b5:60:c7:
                    c1:40:8a:6f:bf:96:fe:29:e5:6a:65:91:9e:39:84:
                    1f:7e:35:ec:6d:04:73:a8:a1:c6:ca:75:a3:90:fd:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:9C:E9:7C:AD:8F:F9:5F:AE:71:B5:36:12:44:C8:36:2D:FE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:a0:10:bb:5d:df:d1:72:a8:5b:a1:e9:87:6f:4b:b9:9b:
         a3:d4:72:b0:d8:a6:16:95:7c:bf:ae:f5:97:32:c4:96:a8:9b:
         85:94:7a:40:ae:a7:75:1a:9c:5a:72:d6:10:4f:6c:01:b0:9f:
         dc:a4:77:96:9b:32:1a:4b:53:95:40:e1:20:4a:d7:1f:56:90:
         a9:5b:84:8a:2e:14:17:9b:77:95:99:7f:3a:2e:e7:de:d1:43:
         96:9b:9a:62:f0:0e:40:bd:13:1c:0d:03:93:db:a7:c8:3c:c7:
         29:dd:66:45:49:69:41:a7:9f:3a:31:85:3c:f5:4a:60:7f:cf:
         e2:16:88:49:a5:23:61:9c:0d:68:5a:5b:54:5f:cb:c9:22:6a:
         45:39:73:f3:db:11:df:8b:38:8c:2d:80:6a:d2:11:9f:fc:68:
         0b:bb:c5:b3:81:ee:bc:c5:24:f0:55:80:1a:9f:11:3d:c2:04:
         fa:8d:2d:a1:c0:00:f9:6c:be:56:7e:b8:1b:0a:d9:70:b7:26:
         c5:c0:59:b3:37:3b:6a:62:4c:13:d5:1f:b7:d3:5a:a3:81:7a:
         82:c5:14:8f:1c:86:b2:27:e6:f2:e3:91:94:8d:4a:e4:d5:7f:
         07:7e:2e:e0:a5:29:73:f2:ab:78:c7:03:d1:0d:8c:2e:40:fa:
         14:9d:bb:14
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmhzgEmBLgVFQ/2NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyNDExNTQwM1oXDTI1MDcyMzExNTQwM1owLzEtMCsGA1UEAxMk
MDIyODkwMjYtZGFlMC00YzlhLWE3MTktODc0NWUwMWE5MTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lFtb8W4Pbivj1GCbEhaNSSBvK59f64WoYT6
iUvjywSo1+t8GPuMzDPNioHlptrYb08ECUJejpXa82D0nD2Fsk36lMnepreCFyZk
+9uPoBNx9pjk9O4hrao28hpEMrZNEHvLJWyXbvnOoZiv6LFBS7UOTqXOuXS/FbHj
FdXE8vMdzzlP3b4TUc0q6aZt5oVWweQnyYDj/SwazSWF/XJlJbnkwys+oyV2765C
3KITBpP1HTyK/PrPbPKPWAAYDaPo6E8Pw4TrOZZQ6JaDg9X60TDv3+/46vCxXKZD
ZaK1YMfBQIpvv5b+KeVqZZGeOYQffjXsbQRzqKHGynWjkP2z3QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGr5nOl8rY/5X65xtTYSRMg2Lf5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhjNjhlNzktMWM0Ny0z
MDc4LTk5MTctNDdjNWQzN2FiYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUuCgELtd39FyqFuh6YdvS7mbo9RysNimFpV8v671lzLElqibhZR6
QK6ndRqcWnLWEE9sAbCf3KR3lpsyGktTlUDhIErXH1aQqVuEii4UF5t3lZl/Oi7n
3tFDlpuaYvAOQL0THA0Dk9unyDzHKd1mRUlpQaefOjGFPPVKYH/P4haISaUjYZwN
aFpbVF/LySJqRTlz89sR34s4jC2AatIRn/xoC7vFs4HuvMUk8FWAGp8RPcIE+o0t
ocAA+Wy+Vn64GwrZcLcmxcBZszc7amJME9Uft9Nao4F6gsUUjxyGsifm8uORlI1K
5NV/B34u4KUpc/KreMcD0Q2MLkD6FJ27FA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:37 2025 by rpki-client