Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
File:                     7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa (raw, json)
Hash identifier:          ny4o8gBPldkb+OQdRMPYrK7Gh5/PDLeNkIaUEtJa/JU=
Subject key identifier:   F2:4A:44:43:DA:82:DF:AA:E7:93:01:C8:F4:80:1E:1F:55:10:1E:A4
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F43285849D85FA96CEF73CAC596839680
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     398852
IP address blocks:        2605:fec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a9:6c:ef:73:ca:c5:96:83:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=41951f63-9690-4751-bce1-862e94f8bc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:7d:88:d0:f6:b6:4f:a5:91:44:55:72:59:
                    8a:12:33:90:1e:b4:23:e7:5d:26:bc:a1:a5:1e:75:
                    a1:e8:de:48:ac:09:80:d1:d5:77:13:77:83:1d:fc:
                    f9:6b:82:5f:e3:9a:fb:3e:f7:12:c8:1e:af:0a:07:
                    66:82:0a:f2:b1:12:f7:4f:fd:85:f1:a1:ff:5b:26:
                    58:61:07:db:cc:c8:18:57:66:6d:44:26:b6:cc:99:
                    29:3c:6b:1b:d7:a1:f6:04:07:cc:16:21:a7:2b:26:
                    6d:db:0a:7f:17:73:66:bb:7c:74:ae:e5:35:7b:0f:
                    24:cc:17:52:f7:81:2e:d2:8a:76:6c:61:6b:c9:29:
                    9d:67:d3:a6:9d:44:3b:ce:47:23:70:94:3d:a4:87:
                    e9:8b:31:c3:6d:c1:ae:b3:ae:ac:b0:68:6d:dd:f3:
                    89:c3:2b:51:fa:f6:17:db:fc:e0:ca:48:ff:13:d5:
                    4c:98:7f:03:75:b3:bf:97:d8:f8:28:86:e7:82:ba:
                    d3:e4:7b:2d:c1:2e:35:4a:e2:20:11:66:d2:59:b0:
                    5f:64:bb:24:d1:61:d8:26:57:10:5a:0c:49:aa:53:
                    3b:d4:29:31:bd:f3:c3:e7:bf:0f:ed:bf:89:41:c3:
                    3d:13:55:7e:25:a7:27:b6:ce:6a:e0:c0:6a:5d:a5:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4A:44:43:DA:82:DF:AA:E7:93:01:C8:F4:80:1E:1F:55:10:1E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:46:96:a0:5c:ca:72:d4:7c:f8:f2:e7:cc:1c:4e:a0:76:
         43:7a:7e:33:b5:cf:96:22:c2:2e:f8:0a:ac:a2:f2:39:bc:42:
         f7:ad:4d:58:a6:00:d7:7d:46:e1:6c:e1:e2:f3:48:b1:07:b1:
         f5:b7:49:fe:c1:9d:ea:11:df:b1:c0:10:f7:9f:0b:8c:cc:52:
         5e:93:29:f2:d2:ea:d4:f6:d0:6c:11:d4:ab:77:20:3a:d4:96:
         05:0c:0d:32:ed:db:b6:b6:3d:79:5e:6e:08:2d:7d:01:24:7a:
         4f:e7:91:86:97:11:45:fd:1a:08:0e:fd:50:d9:3b:02:37:7f:
         4b:37:5f:96:e7:90:17:5e:e5:d8:78:0e:de:64:0d:43:4c:69:
         4e:ca:27:7e:5f:1d:05:8a:96:14:67:ac:ab:4e:02:e7:86:e8:
         47:cf:56:4b:1f:1d:fe:1b:20:6c:37:fb:11:7d:30:09:ba:a3:
         b9:ed:82:6c:46:59:b9:fc:cf:68:b8:b9:27:29:fe:04:c2:b2:
         13:8a:0c:db:b8:a0:53:7c:38:e8:df:fd:1e:56:89:57:bf:ae:
         27:26:34:be:be:0a:b0:42:51:54:7e:11:ee:03:be:f1:db:af:
         bd:ff:9d:12:c1:02:2a:05:ea:92:87:2d:9f:c6:61:fa:ae:bd:
         16:0a:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:30 2025 by rpki-client