Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/296260e8-5fcd-3dba-870b-958c39d6411a.roa
File:                     296260e8-5fcd-3dba-870b-958c39d6411a.roa (raw, json)
Hash identifier:          27wfsXPwF+hv9yH4pS+uUsS7IEFTj5Pqh4j3uV5mG5g=
Subject key identifier:   39:50:B4:B2:7B:53:5D:59:F5:72:08:28:FE:28:E5:2E:6A:EA:8F:2A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D199FB8CBE4915B530F880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/296260e8-5fcd-3dba-870b-958c39d6411a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c0c:30c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:99:fb:8c:be:49:15:b5:30:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=aaaa782e-3dfc-4d82-92a8-b3be13c405b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:b2:da:d9:a5:c8:43:3f:44:60:de:8d:ce:
                    06:72:00:a0:ba:fe:aa:54:f0:d7:d6:a8:29:a0:07:
                    61:24:88:4f:a3:39:24:41:1b:b8:f1:3f:47:96:96:
                    30:42:96:d0:47:f1:88:3f:16:cf:f9:72:6e:cc:fb:
                    e7:96:6b:a7:35:e8:61:cf:c4:4e:43:0b:47:2b:83:
                    60:07:c1:a9:5b:5b:a9:f8:c5:f1:70:3d:c3:14:ae:
                    53:cb:0c:64:b1:c9:37:56:9e:2f:78:86:d0:f1:40:
                    c7:cb:82:cb:aa:f8:c8:6f:0c:f0:d4:a6:02:73:23:
                    1f:70:5a:76:98:76:0d:d6:98:04:55:7f:94:0e:a6:
                    6f:91:09:83:d4:10:3b:a3:11:3a:e8:cd:2f:4f:f6:
                    1a:10:8b:0e:ca:26:7f:e7:32:88:4c:ae:71:4d:d0:
                    0d:06:be:43:49:88:37:2b:9b:6f:00:bd:68:e5:79:
                    b9:e0:13:7f:5a:0a:23:fc:9c:af:f6:d6:f8:be:70:
                    84:9f:a4:09:fb:3b:7a:13:e2:ef:e2:52:09:49:c4:
                    26:3f:01:de:7e:34:b9:ec:e0:05:90:fe:21:d9:5a:
                    8f:33:c2:8c:73:49:2c:3a:0b:79:eb:e3:56:8e:10:
                    c0:61:8b:de:f0:f4:79:cd:fb:90:29:71:20:25:76:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:50:B4:B2:7B:53:5D:59:F5:72:08:28:FE:28:E5:2E:6A:EA:8F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/296260e8-5fcd-3dba-870b-958c39d6411a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:30c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:59:c6:26:7b:b7:77:eb:91:1f:0a:b4:74:8f:ce:af:51:
         bc:2c:15:ff:38:e6:73:c1:e3:89:0a:69:4b:40:1c:d4:b8:99:
         0a:b3:58:60:09:a0:57:f5:d4:4b:7e:95:86:be:96:30:47:78:
         03:59:63:59:16:a4:2c:f2:74:6f:8a:a7:1b:79:d4:59:53:18:
         3f:83:11:05:96:e7:f8:5f:4a:66:48:8f:38:cd:8f:69:17:af:
         bd:cc:c6:8a:1d:e8:fd:4b:f9:87:fe:35:1f:ea:ca:c5:52:ee:
         cf:e8:1d:6c:d8:a8:f1:8e:86:f0:87:6f:58:06:d4:13:30:95:
         dc:35:c6:a8:fc:08:3a:cc:69:4d:5a:cb:80:f9:87:d0:57:e9:
         14:73:b5:ff:de:fa:20:76:d0:4d:9e:f3:b7:82:2c:e3:b0:cb:
         6b:23:ab:c1:b0:7d:15:1d:69:39:c1:17:21:61:bd:e4:a5:83:
         8c:b5:3a:12:2b:4c:49:12:d6:90:8f:49:39:ac:60:a0:4d:b6:
         c3:d5:c4:be:8e:9c:f7:06:db:90:85:fa:3e:f1:cc:a1:99:bb:
         f2:09:a1:e2:91:9d:14:2b:36:ea:93:8b:0e:fa:8f:ed:c7:c5:
         85:67:4d:72:9a:88:eb:8b:9b:1c:a5:f9:74:62:b5:8e:3f:f8:
         f6:ee:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:40 2025 by rpki-client