Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa
File:                     a4a4109c-8301-31ea-bef1-16b684dcb864.roa (raw, json)
Hash identifier:          aFZWfKWn97m6P7ZqTFPcgprCkQoKesfH4Id79W8YoD4=
Subject key identifier:   24:A0:04:13:E2:D4:09:94:19:7D:19:A7:21:D0:7E:FF:19:39:FC:42
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D218BB016D6919315ADD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c9a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:18:bb:01:6d:69:19:31:5a:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4c6a69f5-5135-41be-87ed-a26d19f48424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:09:85:7b:24:f9:38:6b:43:b2:32:2e:5b:
                    f5:84:5a:f7:e1:3d:c3:1e:e2:66:82:84:6e:70:75:
                    62:42:de:e6:6e:4c:7e:a5:56:81:f8:4d:b3:a1:a9:
                    a2:0b:79:a8:c8:94:5d:30:ea:99:27:f5:ea:0e:5f:
                    75:ea:f1:91:22:b0:07:1c:3b:bd:72:9e:3b:58:fe:
                    d1:54:3f:4e:0b:31:58:54:16:33:df:6f:c5:04:db:
                    d2:82:15:da:d5:5d:1e:6e:d2:6d:d5:b3:35:10:35:
                    00:0d:cf:21:23:be:f4:18:0b:83:c3:78:19:73:96:
                    6c:de:e1:10:cb:f1:b1:a5:1a:56:ce:c8:08:0d:31:
                    7a:5d:d3:31:14:51:0a:9a:b3:90:de:a5:7c:a1:70:
                    94:f6:30:60:5d:1a:00:9f:e0:6c:46:51:77:3a:4e:
                    08:36:5c:06:09:9d:3f:17:a2:ec:04:e4:b1:42:f3:
                    8d:08:49:06:62:6a:75:1d:16:c0:7c:f2:4b:6f:58:
                    73:69:e3:38:4d:3b:ac:90:95:63:09:f0:fc:93:5c:
                    d5:45:f4:35:c4:b1:b8:e4:b0:fd:15:bc:53:98:e7:
                    50:57:99:9e:3b:fc:e4:bc:1f:42:eb:0f:d8:bc:b4:
                    4e:08:96:3f:ad:22:14:e5:d4:1b:ac:6d:a6:cd:44:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:04:13:E2:D4:09:94:19:7D:19:A7:21:D0:7E:FF:19:39:FC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c9a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:77:f5:ca:23:bd:6f:59:ac:b9:0f:fa:36:c4:70:1b:4f:
         89:ab:6c:08:ee:3f:ed:65:31:25:a0:f5:bc:ff:91:17:cd:cd:
         e1:78:26:7b:a4:37:94:bd:ec:d1:24:86:22:ef:60:46:50:69:
         84:d2:c4:4e:ed:28:d5:f7:45:8b:6d:0d:29:5c:68:27:4b:1a:
         50:2d:83:bf:e2:0e:a9:2d:3b:29:01:58:3e:5d:42:83:d3:46:
         0e:44:63:bd:50:90:c9:d8:2d:21:8b:d9:ca:aa:36:a0:84:6f:
         e4:6c:bc:92:7d:83:be:5e:24:56:c2:f5:05:5d:84:0e:74:89:
         82:ca:da:7f:d0:db:eb:fe:16:e8:af:2d:21:2b:e8:1d:a4:29:
         97:a4:93:c8:24:09:ed:58:14:a2:dc:56:ef:cd:01:9b:35:ea:
         92:e1:f0:b5:ce:5f:1e:e0:9d:5b:68:d8:8b:b9:4a:ff:51:da:
         67:b8:1c:3c:c1:b0:f0:e2:71:a9:9f:dd:46:4e:e3:e0:2e:ea:
         32:ad:d4:51:bc:2c:b6:e7:4f:78:ec:76:02:7c:9e:c8:c9:2a:
         28:93:cb:9f:a4:77:50:0b:34:1e:00:0b:30:83:88:2c:fe:ee:
         2e:70:0c:8a:5c:b2:6f:98:3e:2b:6f:cd:a8:f3:4b:1a:04:24:
         63:d4:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:30 2025 by rpki-client