Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa
File:                     fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa (raw, json)
Hash identifier:          wQhzlR+cHfUc3NoV4WCzHa3Pbs5MKVy7WBtoImGaOeQ=
Subject key identifier:   AC:AA:81:51:2B:79:1C:21:22:52:49:05:DF:1E:35:00:C5:FA:D7:E6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858499BF53B593E61BC82D574D480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa
Signing time:             Tue 22 Apr 2025 09:38:14 +0000
ROA not before:           Tue 22 Apr 2025 09:38:14 +0000
ROA not after:            Mon 21 Jul 2025 09:38:14 +0000
asID:                     19905
IP address blocks:        2604:2e88:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:3b:59:3e:61:bc:82:d5:74:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 22 09:38:14 2025 GMT
            Not After : Jul 21 09:38:14 2025 GMT
        Subject: CN=1d666354-080f-47f2-aa88-71cfb6c58179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:1e:8b:ec:72:63:77:c9:d8:fa:0b:3b:b3:
                    c2:7b:cf:cc:77:4e:5c:fc:96:01:24:8a:dc:c7:98:
                    9c:f9:f4:80:1c:ac:a9:eb:d1:36:47:dd:4a:9d:40:
                    11:23:6a:2b:96:f7:e3:17:67:4e:ea:eb:6b:5f:d3:
                    32:59:0a:4f:bd:c5:90:b1:f6:ae:e6:5b:a8:f1:0a:
                    2a:3c:a8:fc:2b:c2:0f:3d:12:3c:df:c1:d5:59:77:
                    eb:17:be:90:0a:98:a3:47:d1:65:4f:f6:71:e3:51:
                    d9:3b:dc:04:82:e1:75:c8:12:ff:63:f4:f3:96:c8:
                    57:81:30:d1:f4:46:e8:6b:c3:1e:59:c9:ff:9e:ce:
                    de:79:51:93:62:61:8e:5b:73:4d:bd:1f:ce:b2:b8:
                    5e:ca:0f:09:ea:dd:21:4b:e0:64:f7:80:5f:de:29:
                    1d:1e:0a:de:f4:6e:29:d4:c7:01:0c:be:be:e7:cb:
                    14:19:2a:00:02:20:42:2d:ab:6b:d5:27:c2:d1:7b:
                    3e:b4:b3:c3:dd:78:c1:6b:69:10:77:4d:97:92:37:
                    d3:08:c2:8e:34:49:56:8b:fd:06:2b:22:e4:ca:e4:
                    5d:ba:df:9c:c3:91:6f:ee:f6:2d:a9:24:ed:64:60:
                    f4:c1:66:f8:0a:77:b6:b5:0b:da:52:ac:ce:9a:0a:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:81:51:2B:79:1C:21:22:52:49:05:DF:1E:35:00:C5:FA:D7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fe8e9adf-b293-3f08-ae41-148e5c6eea90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:ed:a6:2d:e0:eb:8f:9c:78:25:7c:61:bf:3d:6a:6e:52:
         5a:32:d5:d3:43:c1:d5:d6:c6:31:e3:f9:7f:4c:99:b0:7d:c0:
         eb:d8:42:73:aa:ff:4d:02:30:9d:de:a4:56:15:e4:f2:75:bb:
         14:77:ff:95:35:52:26:a1:40:89:69:ff:bc:fa:26:2f:63:1d:
         6c:e2:c0:e2:6d:10:91:56:ad:a0:5c:cb:59:be:41:61:11:05:
         3e:f7:16:95:82:b4:fc:3e:68:02:f2:89:10:e7:83:2e:7e:34:
         44:b9:f9:36:06:54:29:9c:f1:28:08:31:08:7f:3b:1f:7a:1e:
         84:a3:f5:2c:8c:76:a5:26:17:12:1c:2f:c3:e6:b2:b2:18:4f:
         f1:aa:90:43:72:50:cf:45:37:58:41:0c:7d:14:14:bf:bf:98:
         0b:50:3e:c8:b5:f3:ee:05:af:d8:6f:5b:4a:f8:7c:c3:2a:ca:
         dd:83:9f:53:63:a1:7c:23:4d:ef:a1:89:7f:27:df:f4:f4:64:
         1d:c9:fe:2f:3d:83:08:99:fd:07:7b:0a:11:1b:3b:76:4a:77:
         e3:08:5f:59:65:c1:e7:89:7e:06:60:a2:38:b9:b4:2e:91:93:
         33:fa:ee:d6:04:3c:fe:b7:73:14:c8:7a:66:43:14:24:23:a7:
         1c:2a:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:17 2025 by rpki-client