Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa
File:                     8f20aa4d-d857-3f30-bab8-38fe6a107924.roa (raw, json)
Hash identifier:          Oy8BzphpLvrWRi++jaVoawEiJyr+HKMComF033g/06M=
Subject key identifier:   40:7E:E8:DA:37:42:D0:F7:C1:E0:50:EE:5A:1D:21:78:35:13:5D:F5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D217072AEF27281527FF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c08:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:17:07:2a:ef:27:28:15:27:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=9a68ac94-3b46-4676-80fd-6f4acfe9b111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:f0:b1:08:9c:69:c7:34:82:41:f3:ab:c7:
                    98:7c:2e:d9:f2:a6:4d:b9:8c:0f:18:48:ad:ba:3b:
                    60:54:61:ed:18:82:52:de:b3:c2:b4:63:5b:3f:87:
                    6a:1d:77:f0:4e:55:f7:8c:ef:8d:7b:47:e5:14:85:
                    e3:f9:99:ad:67:35:69:a5:de:00:01:70:29:d5:97:
                    15:05:1e:51:c3:3a:1f:f8:ce:26:7b:61:d6:10:2b:
                    d9:a6:59:46:60:9a:47:b6:43:d0:d8:c6:2d:d6:e8:
                    2e:bb:0d:41:56:9f:50:38:2d:d2:36:c3:36:e8:aa:
                    79:ea:ee:43:1a:11:c8:10:f0:06:6f:13:a2:98:5a:
                    6b:41:82:24:41:48:6b:ab:3e:39:85:6b:10:ed:3f:
                    27:48:84:7c:cf:e9:65:0f:67:93:a4:98:24:0b:c4:
                    cb:7a:8d:e9:1e:c0:0a:79:14:81:29:92:b8:0e:81:
                    9b:84:49:44:1d:aa:6e:83:53:36:d8:61:f4:24:07:
                    6c:03:0b:c1:80:40:1e:f3:ba:f2:5e:d6:4a:06:a8:
                    94:1c:06:1c:44:6c:95:37:7c:53:e4:d9:44:03:a3:
                    51:dd:f7:ae:56:17:e8:48:8b:0b:b1:67:5d:66:87:
                    60:18:82:82:ec:23:ed:ad:5e:aa:f3:63:d1:8f:45:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:E8:DA:37:42:D0:F7:C1:E0:50:EE:5A:1D:21:78:35:13:5D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:32:9b:a8:2f:f6:02:a3:d6:11:49:f7:c1:eb:40:ca:f1:
         ba:0d:8f:c6:af:58:71:f6:48:cc:60:42:31:37:eb:17:4b:0e:
         89:d6:a7:ad:63:74:e2:73:3c:d3:54:4c:29:0c:29:e3:4f:61:
         1b:91:20:df:fe:14:e7:6a:69:cd:df:44:c4:3c:1b:0e:a0:c4:
         a0:b7:07:c4:01:74:1c:e1:1c:07:13:3a:ed:d4:03:a3:cc:f3:
         9a:c3:8c:60:e9:0f:bf:21:eb:f6:c6:bd:6d:2c:98:99:30:dc:
         59:7b:99:c3:13:43:ad:67:81:c1:7f:96:9b:ba:ec:bf:80:f0:
         c1:44:dd:b0:22:85:62:34:40:ed:f8:66:61:a8:81:83:f3:24:
         43:66:a7:d6:df:70:66:f2:a3:31:a8:c9:36:39:6f:74:55:cb:
         b5:f4:d3:8d:83:ac:4d:66:ba:c9:46:70:33:fe:b0:89:43:b3:
         b3:15:1e:c1:77:3a:ff:63:26:2b:4d:ae:4d:18:1a:94:2a:e2:
         f8:b0:92:d1:b7:00:f8:55:7c:d4:d1:95:71:05:f2:74:2a:97:
         1b:22:ec:5d:2e:e8:22:23:14:9b:ca:47:8a:0b:d6:d0:c1:bd:
         aa:e2:2d:eb:0e:a6:b6:2c:7e:92:55:e0:a8:10:d9:df:71:83:
         53:b9:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:12:51 2025 by rpki-client