Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa
File:                     8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa (raw, json)
Hash identifier:          lcfk29b7L0N2Sq8FT7WEUa5YZVdiQT1Rvl4j1N+gOWQ=
Subject key identifier:   8E:72:CC:98:42:21:27:4C:40:82:35:7A:95:8D:11:71:85:36:CC:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DFB5439E54787DE0AE880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        2600:6c60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:fb:54:39:e5:47:87:de:0a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5908940c-bb67-4546-abd6-e581c57f51c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:3d:78:92:6f:bd:cd:11:94:07:f0:90:30:
                    e6:b3:d4:6b:4c:8b:a5:fc:4a:c4:ca:50:5a:33:10:
                    10:37:c7:42:85:cc:65:4b:6b:2d:d6:49:d8:b4:3d:
                    84:73:12:21:cc:39:3b:8d:06:a0:ff:2b:1f:dc:89:
                    8c:b7:5c:cf:9f:4e:23:33:68:2f:26:00:92:d9:89:
                    e1:2c:ed:b0:19:b6:5e:f8:62:a5:41:f8:ae:25:55:
                    71:b0:8a:dc:c7:81:d4:fe:8f:9d:7c:e0:61:38:e1:
                    02:72:42:7e:41:63:58:42:bd:e2:b0:51:b4:e1:5f:
                    76:e2:d5:c6:15:42:77:dd:80:19:b8:b6:e3:53:e6:
                    e5:f0:34:d0:ac:8b:44:68:9a:76:e0:f1:50:89:72:
                    29:19:81:cb:55:ff:28:fd:4a:17:f6:da:7b:7e:6f:
                    62:6d:71:c6:39:b2:ea:21:49:72:f1:23:54:4b:8f:
                    b4:4d:08:c7:39:82:5a:13:56:41:7b:d6:dc:7f:5a:
                    5c:98:8e:71:35:71:35:fa:14:eb:6a:2e:d7:45:c3:
                    a9:4b:f2:9b:81:69:78:09:94:62:39:23:57:54:c2:
                    2a:93:ae:47:c9:5e:78:38:5b:32:23:4c:59:77:3a:
                    de:79:49:92:a1:19:fe:65:88:c8:24:6a:0f:f8:c9:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:CC:98:42:21:27:4C:40:82:35:7A:95:8D:11:71:85:36:CC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8a2ca29a-804e-38f8-bf4d-7ba50c7b0196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:7d:1a:80:52:18:31:d5:a0:41:30:26:2a:53:b0:26:44:
         32:ce:cf:8c:a6:f4:dd:e8:57:bb:1f:cf:8e:ee:f7:ef:d2:e2:
         41:79:74:66:d9:5d:3c:0b:e8:cf:56:06:c0:08:9d:b4:0a:69:
         fd:cb:d4:7f:f6:c2:f8:72:a1:68:b2:19:69:ad:1f:aa:52:0b:
         73:0b:c8:36:71:da:8d:17:9e:19:16:2f:08:0a:20:4a:02:11:
         ee:7b:59:13:e6:6f:20:36:fb:ce:79:5b:3e:d0:a0:5d:8f:63:
         ff:03:47:55:2f:39:16:c4:b6:03:3b:81:cc:56:86:2d:b4:b1:
         e6:01:10:df:51:5e:fc:f0:1d:fd:35:d3:81:06:c8:a9:c2:be:
         54:d4:ba:2b:f0:88:34:0e:4f:c1:25:fb:28:42:70:24:48:00:
         3f:33:69:12:12:7d:94:09:6d:16:cb:4f:ac:dd:19:1a:5d:01:
         ac:74:b5:52:c5:76:79:61:89:74:c2:99:a7:08:0d:5a:0d:a3:
         65:a4:b7:27:cf:78:a7:41:bd:a4:7b:87:e1:5b:5f:58:39:38:
         ce:f5:ad:34:15:d1:87:4a:20:b9:7e:10:8c:dd:cb:03:e0:0a:
         f5:6c:61:bd:2b:58:79:89:b8:e1:ad:4c:43:00:14:30:c4:c3:
         02:49:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:01 2024 by rpki-client on console-fra.rpki-client.org