Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
File:                     7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa (raw, json)
Hash identifier:          h7BxomThrjoVU9s7zzztNFEinPr5RHPfjhUdhQbaFk4=
Subject key identifier:   A2:2F:82:3E:99:B3:CB:C1:A1:ED:4B:D8:2F:8B:00:95:FA:7E:38:E7
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F43285848F926B02410347FBFC1384800
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     398852
IP address blocks:        2605:fec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b0:24:10:34:7f:bf:c1:38:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b2a8e1a0-1f40-4517-96f0-52ca09dc676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ed:fe:07:ab:c2:21:dd:06:11:b1:4a:45:a2:
                    5f:b4:20:6a:f7:fb:e9:e3:35:5e:a8:cf:78:4d:cf:
                    8b:c5:d4:e3:9f:b5:16:7c:b9:80:a4:c1:a9:da:a1:
                    fd:c2:41:da:42:03:1c:19:02:c3:09:05:1f:93:29:
                    92:23:18:31:67:96:a5:38:d9:1b:50:bb:90:7a:a2:
                    ba:22:1d:4d:12:8f:84:70:c8:8d:5e:fe:10:55:9d:
                    bb:e5:80:9a:7f:3d:2c:7d:bc:3a:c4:89:68:2b:57:
                    57:88:ca:f2:b7:ed:7a:65:3d:96:87:ad:d5:77:f6:
                    45:bb:2f:1d:93:3a:db:1e:a2:03:4e:11:17:9b:da:
                    fc:80:e9:84:cf:65:3d:0b:ef:05:3f:3a:df:b0:b1:
                    36:72:b8:03:36:b2:d4:d6:63:33:67:5f:f6:36:6c:
                    ba:9c:f1:28:28:e6:cb:1e:37:80:71:df:3e:c4:2d:
                    2a:19:56:65:87:ff:38:ad:e5:6d:77:ab:4e:18:ab:
                    71:1d:f8:b7:5a:28:45:b8:99:cc:b0:0d:2b:2b:ea:
                    33:4e:7d:5c:55:2c:a3:9c:ff:03:e9:ad:6e:35:0f:
                    76:42:b5:cb:5b:ad:85:2a:3e:3b:2f:00:a9:77:a6:
                    3a:45:22:78:a8:77:af:2f:cb:8d:e7:41:7d:27:f2:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2F:82:3E:99:B3:CB:C1:A1:ED:4B:D8:2F:8B:00:95:FA:7E:38:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:bb:3f:fd:0f:45:66:94:46:2d:99:a2:19:96:ec:ec:a5:
         cf:52:fb:1c:3b:b8:70:70:ab:b8:f3:27:96:fc:c9:cd:da:3c:
         12:ee:6d:86:a5:50:13:e9:86:fe:30:20:20:76:c8:a3:ba:d2:
         4f:d1:d8:f0:78:05:2c:ad:b3:cf:e5:f8:d2:91:f4:0a:43:85:
         b5:84:56:b1:f5:88:10:a1:b6:5d:df:b5:a3:b2:2e:4c:cd:cd:
         b0:cb:f8:18:23:53:a1:1f:72:0a:ba:0b:e2:1a:8b:83:6e:f5:
         13:f6:ec:6c:19:66:0c:19:49:5f:13:d4:53:a5:03:9c:c2:e7:
         34:69:3c:0a:27:1c:7b:6c:3a:8d:c0:71:c6:0f:39:51:cd:27:
         75:79:f2:51:f7:c3:74:23:f7:c3:0d:3a:30:e2:3b:ad:65:16:
         0e:b1:56:f5:be:b0:a0:d6:01:1f:1b:ad:c0:52:eb:a2:14:ed:
         4d:57:ec:5f:6f:7b:b9:fe:67:89:29:18:43:3e:57:68:a8:6e:
         c9:ca:56:e0:b1:ab:db:31:42:9f:1b:10:7a:58:64:69:d0:4f:
         38:35:78:cf:e9:44:65:b4:eb:39:05:ff:42:2d:85:9f:e3:4a:
         f7:29:a9:7d:ad:4d:f0:a0:a9:3b:5a:1f:0e:37:b8:c0:13:40:
         1f:a5:23:e2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj5JrAkEDR/v8E4SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRjYjM5ZTktOThiZS00NmJhLWFiYjctOTFjNGVkYWZi
ZTIyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjJhOGUxYTAtMWY0MC00NTE3LTk2ZjAtNTJjYTA5ZGM2NzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie3+B6vCId0GEbFKRaJftCBq9/vp4zVeqM94
Tc+LxdTjn7UWfLmApMGp2qH9wkHaQgMcGQLDCQUfkymSIxgxZ5alONkbULuQeqK6
Ih1NEo+EcMiNXv4QVZ275YCafz0sfbw6xIloK1dXiMryt+16ZT2Wh63Vd/ZFuy8d
kzrbHqIDThEXm9r8gOmEz2U9C+8FPzrfsLE2crgDNrLU1mMzZ1/2Nmy6nPEoKObL
HjeAcd8+xC0qGVZlh/84reVtd6tOGKtxHfi3WihFuJnMsA0rK+ozTn1cVSyjnP8D
6a1uNQ92QrXLW62FKj47LwCpd6Y6RSJ4qHevL8uN50F9J/IyLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKIvgj6Zs8vBoe1L2C+LAJX6fjjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNGNi
MzllOS05OGJlLTQ2YmEtYWJiNy05MWM0ZWRhZmJlMjIvN2VlOTI5MjctMDI2MC0z
MTg5LWFjNWMtYThmODRlZTBhNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjRjYjM5ZTktOThiZS00NmJhLWFi
YjctOTFjNGVkYWZiZTIyL2Y0Y2IzOWU5LTk4YmUtNDZiYS1hYmI3LTkxYzRlZGFm
YmUyMi5jcmwwHwYDVR0jBBgwFoAU/0kzY0P6MEBMDsGKcoJYOIUjZvcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mNGNiMzllOS05OGJlLTQ2YmEtYWJiNy05MWM0
ZWRhZmJlMjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX+wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAdJLs//Q9FZpRGLZmiGZbs7KXPUvscO7hwcKu48yeW/MnN2jwS7m2G
pVAT6Yb+MCAgdsijutJP0djweAUsrbPP5fjSkfQKQ4W1hFax9YgQobZd37Wjsi5M
zc2wy/gYI1OhH3IKugviGouDbvUT9uxsGWYMGUlfE9RTpQOcwuc0aTwKJxx7bDqN
wHHGDzlRzSd1efJR98N0I/fDDTow4jutZRYOsVb1vrCg1gEfG63AUuuiFO1NV+xf
b3u5/meJKRhDPldoqG7JylbgsavbMUKfGxB6WGRp0E84NXjP6URltOs5Bf9CLYWf
40r3Kal9rU3woKk7Wh8ON7jAE0AfpSPi
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:04 2025 by rpki-client