Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c62423-d488-31cf-8a4d-55399889e1e9.roa
File:                     65c62423-d488-31cf-8a4d-55399889e1e9.roa (raw, json)
Hash identifier:          B+AuJ17IOu4AnZ6Q8ox1jnyvrYlE+ukxYdEGh/uN/WQ=
Subject key identifier:   85:AF:D8:58:5D:3F:A1:6C:CC:BE:28:33:2C:9E:CC:4F:6E:05:45:AF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F2FD1C96CD9FC6142E10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c62423-d488-31cf-8a4d-55399889e1e9.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c7f:91c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f2:fd:1c:96:cd:9f:c6:14:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=27ec4b85-a2fb-4916-af5f-7cf354c608ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:c8:be:cb:75:a3:c5:48:c8:84:ee:94:35:
                    5d:aa:85:89:33:93:39:7f:51:18:5f:1f:fa:95:58:
                    4b:3c:db:81:c3:32:a3:41:20:a8:51:fa:af:1a:13:
                    f2:1d:4f:2d:79:7e:db:78:ef:6c:3f:4c:61:18:7a:
                    07:98:dd:54:84:32:78:ad:23:86:a5:be:a8:f8:19:
                    c7:1e:9c:fd:81:2f:50:d6:cb:72:8b:2d:9f:d4:ee:
                    d6:1f:51:df:b1:7a:43:ed:fd:af:7d:f0:80:21:57:
                    c1:5c:ab:ae:7a:90:cf:e6:f1:32:ec:22:bb:01:4d:
                    d9:72:ca:b6:5b:3d:f2:54:c7:d1:ee:e5:38:66:73:
                    80:8a:e0:69:72:cb:67:a9:52:93:8b:70:ed:c6:43:
                    a7:d5:45:bb:13:84:6c:04:ed:cd:38:02:a8:9e:07:
                    27:d0:f5:d1:25:aa:ca:0f:84:d4:64:b5:eb:97:5a:
                    8c:bd:b8:3f:56:74:13:6d:e6:07:b0:69:31:c6:6f:
                    90:76:25:91:e7:6f:08:b6:2b:98:10:0e:5e:dc:f2:
                    c6:92:7f:c7:7a:48:3d:a0:ea:27:78:77:b0:1f:71:
                    bb:b6:45:0f:f7:62:94:8f:b6:7a:4d:72:bf:c4:41:
                    0d:3f:20:69:c8:4c:40:5f:70:82:4a:9c:b4:36:f6:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:D8:58:5D:3F:A1:6C:CC:BE:28:33:2C:9E:CC:4F:6E:05:45:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c62423-d488-31cf-8a4d-55399889e1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:91c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:06:a8:46:d4:d2:ab:bd:20:19:b3:e1:67:91:ff:95:77:a3:
         59:f3:f7:ef:2a:6b:1d:1b:2e:02:62:3d:a2:28:e9:11:9c:67:
         4e:20:2f:a0:aa:31:9c:ce:21:69:69:af:c6:19:91:6a:3b:91:
         39:20:c0:4c:bd:e4:96:b7:e1:1e:2b:00:a0:31:d9:3c:82:c6:
         1a:82:61:2d:be:b2:4c:1c:2d:0b:97:ac:87:2b:47:c0:d9:ff:
         aa:d9:18:a3:47:72:1f:27:35:66:48:39:60:c7:5d:38:4e:f7:
         f4:70:f2:d5:38:e6:75:0e:87:05:3a:2c:bc:24:00:84:12:38:
         ec:dc:11:38:72:cc:63:3a:b8:34:39:93:4d:0d:8a:91:33:34:
         f4:bd:8d:d6:ef:36:e6:a9:63:ae:2f:83:0d:f7:07:2f:9e:f7:
         16:0e:fd:b2:b9:ce:d5:c8:cd:1b:82:de:a8:79:20:d2:81:54:
         0f:0f:00:76:aa:df:fd:ab:c6:c0:6a:75:1b:6e:83:43:52:49:
         61:bf:6b:c6:f7:88:a2:17:86:58:97:9a:67:ae:b2:f4:9d:49:
         d7:cf:2e:aa:22:75:f4:86:de:11:68:3d:ae:0e:1c:b4:05:50:
         0b:b7:82:6f:a2:ef:87:61:6f:fa:02:d2:4c:78:2a:94:4e:be:
         60:b2:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:33 2025 by rpki-client