Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea501cee-d212-3590-a941-74f23a96a3a1.roa
File:                     ea501cee-d212-3590-a941-74f23a96a3a1.roa (raw, json)
Hash identifier:          Sy+YE/w6IsbuwVvs0yKNhx4FuW56HzQFifbVlHcEsQY=
Subject key identifier:   2D:61:23:26:19:E9:58:02:1B:38:BD:C9:0B:64:CE:75:23:FE:27:78
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849C11D27B22F596C969F1DF920
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea501cee-d212-3590-a941-74f23a96a3a1.roa
Signing time:             Mon 05 May 2025 17:03:35 +0000
ROA not before:           Mon 05 May 2025 17:03:35 +0000
ROA not after:            Sun 03 Aug 2025 17:03:35 +0000
asID:                     19905
IP address blocks:        2604:2e88:b800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c1:1d:27:b2:2f:59:6c:96:9f:1d:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May  5 17:03:35 2025 GMT
            Not After : Aug  3 17:03:35 2025 GMT
        Subject: CN=244357e2-7c06-45cb-84fd-74a6d93f5b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:31:52:a5:46:39:a6:00:7d:a2:11:3f:12:
                    fe:02:43:0a:da:4c:be:a3:44:01:90:6d:f7:4e:0c:
                    b9:3c:e0:ea:46:5a:e7:b3:72:90:ad:be:8b:dd:a7:
                    04:24:06:3a:dd:3f:37:66:cb:68:3d:83:a9:ee:59:
                    ae:d4:6b:95:88:ce:b0:f4:80:e2:21:5c:7f:9e:10:
                    49:77:8e:71:32:30:c2:a6:75:c9:79:83:b5:6d:58:
                    f2:40:af:bc:bf:83:ef:f1:a1:29:1a:28:ea:f9:81:
                    7a:b1:21:3c:83:9d:68:e8:e3:25:6e:4a:39:13:17:
                    39:0a:3a:76:aa:25:20:d4:87:47:9c:a0:ea:ff:2b:
                    6b:bc:d4:8d:e8:c6:00:f6:09:fb:2f:c2:5a:55:50:
                    18:90:39:4c:d7:64:2f:0f:30:f4:d9:56:bc:94:b3:
                    d8:fa:79:bf:98:90:94:6a:d4:93:99:66:4e:28:de:
                    74:90:bb:12:85:f1:91:67:00:cf:46:a7:70:6f:81:
                    ef:8a:d8:a9:40:36:dc:72:66:0d:75:b0:8d:02:85:
                    a2:92:6d:ce:ed:06:39:e3:2b:ee:5b:5b:6d:b8:a5:
                    e4:c5:d7:5b:87:d6:42:8d:db:75:fe:20:a2:c7:0d:
                    1d:0f:14:06:d7:15:62:58:4a:a2:2c:1d:11:d9:aa:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:23:26:19:E9:58:02:1B:38:BD:C9:0B:64:CE:75:23:FE:27:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea501cee-d212-3590-a941-74f23a96a3a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:2d:23:e8:c2:a4:f2:c4:eb:ce:e8:b4:2e:aa:f0:64:12:
         fe:c5:d6:b0:f5:a2:07:fa:3c:bb:ce:78:6f:3f:38:6a:2e:3d:
         38:4a:86:2c:e5:07:43:7a:b8:46:81:5e:0d:fb:ac:af:15:c7:
         59:39:fa:d5:e8:c9:21:b4:5a:ce:6f:2a:47:56:be:0e:37:e9:
         3f:5f:c1:88:0f:8b:bf:ce:45:56:4d:d7:f3:00:09:27:0c:4a:
         a0:b1:c2:e3:c4:f9:90:cf:fa:21:47:ae:c7:a3:58:80:d9:40:
         cf:ac:84:d5:1b:4a:8e:d9:69:03:94:d7:ff:b2:1b:d6:99:ff:
         c0:4c:46:4b:46:bf:d6:78:37:1d:d6:e0:e1:6e:78:07:96:7e:
         60:df:b1:42:36:0e:c5:c4:d2:57:d7:4f:ee:c9:b4:b8:c7:77:
         db:49:fc:86:e1:c0:28:42:d7:f1:84:22:85:14:cc:9d:25:60:
         ac:d6:fb:0f:45:58:9c:2f:af:02:4a:bf:29:5c:85:b3:05:d5:
         f0:07:9e:8f:db:76:0e:7e:8b:df:88:16:43:ef:39:e7:71:b8:
         17:3c:56:4a:8c:cf:b3:09:55:dc:18:82:14:9f:b8:03:e5:e2:
         0d:e4:90:8f:5c:c4:1d:12:86:d0:0b:17:30:55:1c:d8:40:ef:
         c2:64:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:00:11 2025 by rpki-client