Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8543e76a-e060-3e65-ba1b-3a79a773bb4b.roa
File:                     8543e76a-e060-3e65-ba1b-3a79a773bb4b.roa (raw, json)
Hash identifier:          P29QVkQxvLZnhnBQHhjW6gdlVOh+qOZYu7AsnrKczbw=
Subject key identifier:   61:B9:EC:29:81:F3:60:9F:6F:50:FD:9C:EE:AC:C6:28:C8:CE:85:4E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D194FC2EAC8126F8CD11C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8543e76a-e060-3e65-ba1b-3a79a773bb4b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c23::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:94:fc:2e:ac:81:26:f8:cd:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d9630ee4-3a47-404b-b379-7e3247fb4793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:77:b2:c0:50:5f:cc:45:1c:d7:78:1c:f7:
                    e1:2d:5d:b7:58:46:58:82:f9:6d:16:ff:f0:c7:bc:
                    fb:01:ba:d8:f6:00:8c:08:68:e2:57:45:3a:e1:3d:
                    08:f8:21:d1:7a:31:15:a7:e8:95:63:81:20:8e:69:
                    b0:68:77:c1:f4:c5:10:12:43:56:ce:3a:1a:a0:f6:
                    f6:67:32:18:5f:e2:8e:00:a9:4a:76:60:c6:3f:41:
                    65:f9:23:e1:8c:24:5e:22:91:10:ad:80:b9:ed:e9:
                    f3:08:fc:9c:09:fb:22:e0:dc:39:b1:eb:bc:f6:9f:
                    72:0e:e2:ea:39:08:37:12:49:8c:6c:78:1d:1e:d0:
                    87:d1:a2:b6:05:de:cd:7f:68:4e:44:f0:56:5e:52:
                    73:df:30:ab:e5:e2:94:83:76:cc:0a:40:51:e8:5d:
                    c8:c4:8a:0f:e6:24:50:fe:71:8a:85:6f:da:5c:2b:
                    77:88:bf:15:9d:74:7e:0c:d2:75:a7:0d:94:73:23:
                    52:eb:6d:9a:64:06:30:33:dc:36:a0:de:0c:dd:82:
                    96:3c:6a:d3:10:cc:0c:f7:f2:b7:e2:20:67:50:4c:
                    d1:4e:33:ee:8b:9b:1b:93:bc:b5:30:48:f9:3b:e1:
                    2f:b6:d3:1d:75:3b:fb:5e:23:11:83:d4:36:fa:90:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:EC:29:81:F3:60:9F:6F:50:FD:9C:EE:AC:C6:28:C8:CE:85:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8543e76a-e060-3e65-ba1b-3a79a773bb4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c23::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:13:be:71:f9:6f:49:70:39:52:fb:04:21:69:85:38:c6:46:
         cd:8d:0c:f1:7b:62:95:b8:3e:3f:a2:69:c3:44:84:aa:d7:bf:
         2a:87:ab:6b:1d:46:4b:cc:c6:c2:5a:7c:7e:a7:71:59:f1:cb:
         96:db:4b:3e:f8:80:84:66:d2:b3:5a:b9:a6:4e:13:bf:4b:80:
         92:ea:35:3c:86:7d:ae:0d:75:dc:bd:5c:a4:e2:98:8a:f3:14:
         ba:bf:c8:c3:62:3b:ac:95:77:84:ab:e2:a6:02:de:5e:f9:60:
         a1:05:3b:91:c6:0c:2b:57:75:b4:4d:bd:99:f3:2c:cd:2e:d1:
         11:56:58:11:bd:74:99:8a:89:e9:06:63:7e:7e:25:42:ca:a6:
         ed:56:d2:8e:f0:27:2b:b5:c0:7f:bb:28:d9:ea:b1:5d:2a:60:
         e3:25:13:ee:56:8a:73:3f:03:a8:2a:7a:f1:96:68:f5:e4:47:
         12:79:b8:f9:7f:c8:65:01:2c:b9:11:60:c3:1a:17:f7:85:c9:
         54:f7:ca:6f:43:90:fc:16:c8:34:f5:8d:f3:c7:66:96:93:f2:
         8f:b9:92:f0:ad:ca:bc:7e:1d:14:23:c0:f8:fe:63:8d:78:f8:
         b1:c7:19:dc:b7:e8:6b:a3:ea:7b:7d:cf:ad:be:98:c4:6d:f0:
         c5:9c:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:55 2025 by rpki-client