Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
File:                     b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa (raw, json)
Hash identifier:          l28SxiKv/S+iECxEIp7xtfuEt1soIfP+DDXkOw6hdwA=
Subject key identifier:   09:49:88:FD:C6:41:F3:D6:F7:F3:21:EB:4D:1F:F2:AE:53:55:82:7E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858499BF5292A3AAD2D1C9855C900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa
Signing time:             Tue 22 Apr 2025 09:38:05 +0000
ROA not before:           Tue 22 Apr 2025 09:38:05 +0000
ROA not after:            Mon 21 Jul 2025 09:38:05 +0000
asID:                     19905
IP address blocks:        2604:2e88:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:29:2a:3a:ad:2d:1c:98:55:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 22 09:38:05 2025 GMT
            Not After : Jul 21 09:38:05 2025 GMT
        Subject: CN=384bdd45-5db6-478a-8454-e5692ae536ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:5c:ab:fe:1e:5d:d1:ad:60:e8:c5:1f:36:
                    ce:37:e7:fa:f8:07:4e:3c:d5:7c:47:7f:f8:96:0a:
                    e3:62:8f:eb:69:6e:3d:65:18:47:d1:3f:42:d5:40:
                    30:c3:0d:3a:84:c4:13:67:47:23:dc:b1:5e:be:38:
                    2b:ec:6c:0c:03:4f:4a:f6:a2:1f:9b:79:16:fa:73:
                    55:ef:2c:78:b9:da:71:d8:63:b5:2b:ca:0a:2a:4d:
                    5f:5d:af:3d:d8:e6:cd:ea:65:cf:6b:f5:f1:a1:c6:
                    b6:9e:99:8e:b0:fd:39:f3:55:c5:20:0f:90:32:db:
                    77:29:8a:7b:92:30:66:21:ef:65:2d:46:39:69:a2:
                    6b:0f:b8:d8:d6:69:28:1e:8c:be:e7:28:19:f6:32:
                    6d:97:09:26:4f:bc:93:f8:b4:4a:d3:0d:3c:95:76:
                    97:4d:d4:eb:47:92:bc:8c:76:60:fb:92:6c:ba:1f:
                    39:0e:a7:f6:10:6b:e9:f4:1a:d8:a2:de:05:c7:f0:
                    94:b0:5b:6d:c2:0f:a8:63:3e:fd:f4:4a:dd:32:5d:
                    1c:78:45:e8:a9:98:34:eb:70:c4:24:0b:eb:b3:d2:
                    92:28:e9:d4:00:04:d1:ee:c5:09:14:c2:05:55:d0:
                    ef:0a:fa:ed:90:44:ee:0d:20:07:7f:bf:78:72:a1:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:88:FD:C6:41:F3:D6:F7:F3:21:EB:4D:1F:F2:AE:53:55:82:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b9c89d9d-147f-3f3c-96b5-543fa82511d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:49:94:83:41:38:25:4d:23:69:d5:b2:89:7d:4f:ac:6b:
         f0:b3:8d:4e:72:12:b7:8e:a8:f9:34:c3:19:c4:3e:0d:cc:12:
         02:32:ae:83:ba:5b:ba:27:e2:8c:c7:64:82:9e:55:04:38:ad:
         f4:54:0a:b1:b1:b9:a3:42:66:22:bb:e4:87:03:d4:2b:cc:67:
         70:54:0c:68:cd:c3:24:b2:37:12:50:db:07:be:b4:5a:6f:ee:
         ef:79:02:0a:9c:d4:39:b0:b4:ed:24:1f:5d:08:9d:33:ed:9f:
         00:cd:39:b9:0a:80:50:40:49:8e:0f:25:bb:a5:d7:ce:4e:da:
         e6:c4:6e:3f:84:34:d5:ab:9b:7f:34:e3:46:d4:bb:b4:5a:82:
         5f:50:19:45:ac:23:2f:61:95:3c:a8:dc:59:54:d1:ed:56:01:
         b1:50:dc:00:8d:81:54:6d:1e:5c:d6:8f:8d:37:65:a4:50:d4:
         79:43:c4:49:3c:12:68:6d:35:b7:3c:1b:f4:36:36:ea:f6:57:
         90:c5:42:e8:c2:26:f1:c8:6e:02:17:09:0f:b7:f9:0b:14:6f:
         f8:be:4d:41:d0:fd:60:73:c8:16:88:f0:b9:b4:9c:df:25:07:
         8e:5e:a9:50:ea:a9:43:4b:ff:f0:7a:d4:a7:6b:b2:65:7f:00:
         43:ba:bb:32
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmb9SkqOq0tHJhVyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyMjA5MzgwNVoXDTI1MDcyMTA5MzgwNVowLzEtMCsGA1UEAxMk
Mzg0YmRkNDUtNWRiNi00NzhhLTg0NTQtZTU2OTJhZTUzNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+pcq/4eXdGtYOjFHzbON+f6+AdOPNV8R3/4
lgrjYo/raW49ZRhH0T9C1UAwww06hMQTZ0cj3LFevjgr7GwMA09K9qIfm3kW+nNV
7yx4udpx2GO1K8oKKk1fXa892ObN6mXPa/Xxoca2npmOsP0581XFIA+QMtt3KYp7
kjBmIe9lLUY5aaJrD7jY1mkoHoy+5ygZ9jJtlwkmT7yT+LRK0w08lXaXTdTrR5K8
jHZg+5Jsuh85Dqf2EGvp9BrYot4Fx/CUsFttwg+oYz799ErdMl0ceEXoqZg063DE
JAvrs9KSKOnUAATR7sUJFMIFVdDvCvrtkETuDSAHf794cqHMbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAlJiP3GQfPW9/Mh600f8q5TVYJ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjljODlkOWQtMTQ3Zi0z
ZjNjLTk2YjUtNTQzZmE4MjUxMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiMgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAf9BJlINBOCVNI2nVsol9T6xr8LONTnISt46o+TTDGcQ+DcwSAjKu
g7pbuifijMdkgp5VBDit9FQKsbG5o0JmIrvkhwPUK8xncFQMaM3DJLI3ElDbB760
Wm/u73kCCpzUObC07SQfXQidM+2fAM05uQqAUEBJjg8lu6XXzk7a5sRuP4Q01aub
fzTjRtS7tFqCX1AZRawjL2GVPKjcWVTR7VYBsVDcAI2BVG0eXNaPjTdlpFDUeUPE
STwSaG01tzwb9DY26vZXkMVC6MIm8chuAhcJD7f5CxRv+L5NQdD9YHPIFojwubSc
3yUHjl6pUOqpQ0v/8HrUp2uyZX8AQ7q7Mg==
-----END CERTIFICATE-----
Generated at Wed May 7 01:44:52 2025 by rpki-client