Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa
File:                     146663bf-ed27-3e00-8122-47273e9cf091.roa (raw, json)
Hash identifier:          lAphS06YbwSx8yfgMNfmbv0/EbedGxEvsYN2Ih7v+Tk=
Subject key identifier:   2F:C6:8E:58:60:F9:AA:3B:44:09:C9:E3:23:6C:88:5B:D2:57:79:AD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A10627F491A8D180B2AD80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c:20e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:06:27:f4:91:a8:d1:80:b2:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a65bf972-2725-48e6-a1dd-ecf37d9bb193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:4c:9f:cf:b2:a7:1e:54:df:5f:17:6a:b4:
                    40:99:9b:1b:67:45:2d:93:f4:8c:0d:1a:93:c2:00:
                    04:00:3c:4e:34:ab:b9:11:ea:29:3f:2e:b4:10:7a:
                    42:98:fa:2d:62:7a:f8:a6:08:ea:1f:98:26:b7:1c:
                    07:ef:ab:07:30:6e:46:cb:ea:d7:f7:58:82:2f:92:
                    c3:c6:ba:ad:10:79:17:09:7b:6c:2d:3c:5a:d4:b8:
                    a6:5e:34:56:2b:5d:ec:a5:ac:0e:1d:c6:ed:32:55:
                    c1:27:7c:c7:1f:58:ae:c3:46:c1:e3:c3:ae:39:fd:
                    20:b7:ed:1d:5a:58:25:58:bd:e5:0b:e2:50:b6:78:
                    eb:9d:25:22:56:3d:98:17:f0:13:5a:49:07:8d:10:
                    d0:e2:c3:e8:68:e7:67:05:2a:88:88:95:72:fb:ec:
                    62:66:25:65:e7:c3:0b:6d:42:f1:6c:c4:de:d2:fb:
                    ea:2b:6f:58:04:07:76:19:92:5e:96:53:15:48:a8:
                    3b:09:ce:fe:93:ce:ae:3e:f5:2e:d3:be:fd:fc:90:
                    cf:6c:ba:5a:e3:d7:83:87:60:c3:2e:b2:ee:fb:80:
                    d4:84:7d:91:97:e3:97:45:71:03:74:01:7c:f4:16:
                    31:9a:05:9b:1a:de:e6:f3:2f:fe:71:d0:b3:59:21:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:8E:58:60:F9:AA:3B:44:09:C9:E3:23:6C:88:5B:D2:57:79:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:20e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:1a:6d:39:bc:f7:f2:16:6d:11:d9:22:f5:f9:15:f6:c4:
         00:47:1f:73:af:ee:51:e9:cb:b2:f0:91:de:a6:6b:f8:b2:ed:
         0f:19:75:92:30:5a:bc:7d:04:14:41:4d:53:cc:1b:ef:e4:48:
         80:8f:1c:20:d1:28:fb:8a:25:d6:8c:02:07:70:3b:b4:d6:18:
         cd:f8:c4:f2:0f:00:a1:77:ca:25:71:96:3b:5c:a2:49:5c:04:
         7a:45:c1:6f:62:a0:ab:84:9d:b0:3f:04:c9:2c:a4:e3:ab:5a:
         03:b2:a9:a3:f0:1a:6b:76:de:a8:45:f2:7c:62:5d:74:ad:f2:
         36:65:df:29:61:42:d7:64:d7:ca:fc:eb:16:a5:25:f1:7c:fa:
         cc:b2:c5:a6:ab:1d:30:cc:4c:f7:76:e8:10:9d:d9:f4:75:01:
         48:3c:3f:d7:9a:10:43:9a:d5:13:0b:16:f5:47:ad:b4:70:70:
         1b:21:85:d4:71:f5:af:f4:7e:48:1e:30:52:fa:0a:cf:40:ff:
         be:0d:a7:14:a0:99:95:f8:05:b0:8a:ec:d6:8a:64:b3:37:7c:
         27:d2:64:06:c3:f2:5b:62:4b:95:87:d5:f4:56:aa:3e:62:1f:
         25:0c:c2:58:db:2b:6a:33:1d:df:5e:88:c1:f6:a4:57:e3:12:
         7c:4d:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:30 2024 by rpki-client on console-ams.rpki-client.org