Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa
File:                     026a1815-8148-3893-a7e3-ba7197fae04e.roa (raw, json)
Hash identifier:          FSDV4SqthO1lTPHTeP/dyAaQZI3HZgeDOHQn9z63ELM=
Subject key identifier:   44:07:86:FA:E2:08:13:29:B4:6A:2F:9E:66:8E:FB:5E:3D:D3:3F:12
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584950F9591E459433F08186C140
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        2602:fdeb:15::/48 maxlen: 48
                          2602:fdeb:16::/48 maxlen: 48
                          2602:fdeb:17::/48 maxlen: 48
                          2602:fdeb:18::/48 maxlen: 48
                          2602:fdeb:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:59:1e:45:94:33:f0:81:86:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=95de3b20-baef-4d3c-9a23-9a611e053052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:fb:a0:69:cd:07:00:5d:78:c3:a3:01:70:
                    b0:9a:17:5c:71:e0:c3:63:f2:25:f0:2d:37:e9:10:
                    b0:8c:82:d6:67:69:ed:68:92:bf:8b:25:78:30:e3:
                    20:ce:95:4d:4f:4a:03:5e:09:56:ed:8d:58:28:59:
                    76:89:77:c4:d6:f2:6b:2b:db:4f:c6:63:27:df:6c:
                    c1:0e:47:d1:ea:df:39:bf:05:4c:ed:04:67:5b:de:
                    63:45:58:28:a9:42:89:e7:d5:89:0a:41:2d:0d:97:
                    e2:5e:c4:d3:f1:f2:63:8a:b1:67:9d:e8:4c:29:2b:
                    75:00:08:30:6c:67:cf:ca:43:07:b2:79:5d:9c:2f:
                    4e:fc:ac:d6:6e:66:48:3e:1e:75:67:b9:7e:30:7c:
                    bf:0f:e3:b6:bb:fb:78:50:53:4b:44:bf:2a:12:50:
                    49:22:29:3d:c9:cb:3d:84:dc:e5:be:a5:ab:3a:cd:
                    7a:f5:b5:ba:85:16:32:4e:e8:67:bc:4e:b0:8c:01:
                    bd:da:2a:d8:da:0a:a6:57:c9:08:58:51:f7:46:c1:
                    d1:32:a6:56:8a:a8:b2:71:5c:8d:36:87:d7:c8:c8:
                    6a:de:6c:4e:96:e1:01:28:19:e8:79:3f:31:9a:37:
                    6f:f2:d6:40:48:68:3a:af:19:dd:8a:7a:8c:8e:bd:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:07:86:FA:E2:08:13:29:B4:6A:2F:9E:66:8E:FB:5E:3D:D3:3F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/026a1815-8148-3893-a7e3-ba7197fae04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:15::-2602:fdeb:19:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:05:c6:89:4d:d7:6f:6a:e5:06:94:49:d6:b1:80:8b:88:
         c2:fa:e5:89:4b:cf:fc:2c:e0:36:c9:34:e7:d7:51:94:f5:23:
         c5:34:f4:3c:b3:42:aa:b4:0c:23:d7:c2:68:14:ce:c5:08:99:
         43:37:2d:88:72:2e:d8:74:5f:95:d2:ac:40:ad:93:63:23:59:
         12:92:23:1c:6f:12:38:19:60:da:1f:f0:2e:6c:da:54:d0:3d:
         38:4b:62:df:53:1f:0c:bb:7b:0e:28:d3:e2:a5:32:d7:c3:1e:
         ae:fb:ee:ad:65:88:3e:67:79:8a:ac:83:41:51:6a:72:4e:97:
         4e:a3:27:a4:9e:0d:ae:4d:d6:69:80:8e:0c:55:3d:ca:5f:eb:
         93:97:c0:78:30:bd:ed:b5:4e:34:9b:55:75:c2:14:36:a5:70:
         86:fe:8b:54:8a:79:8e:7e:4d:a3:c4:09:ac:db:7e:88:f8:12:
         d9:8d:2e:b0:35:9b:75:30:b9:d8:df:3b:9c:2e:0a:b7:c7:29:
         27:4d:c2:ee:6f:9a:11:e1:58:08:b2:e6:18:0d:cb:b1:5e:d6:
         96:7e:3f:90:72:68:0b:d2:7b:dc:23:d7:89:d5:47:de:f4:d6:
         8f:dd:63:d5:e9:96:6e:f7:ed:2e:43:a0:7e:05:f5:76:12:f3:
         43:ec:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:39 2025 by rpki-client