Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa
File:                     8f20aa4d-d857-3f30-bab8-38fe6a107924.roa (raw, json)
Hash identifier:          ys2nbgV13EPJp0na1RT9DM47u4Rp88I6J9GBBExs+jA=
Subject key identifier:   02:2D:97:52:01:F2:27:A7:62:19:09:8E:45:78:74:9E:71:8F:AA:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628EC20DAEAECCAD0CCB9AF8
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        2600:6c08:64::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:c2:0d:ae:ae:cc:ad:0c:cb:9a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=40851fa6-5b04-45de-93a8-e264fb30438b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:f3:88:0f:84:7c:43:a9:1f:a9:bf:5b:e1:
                    af:4d:21:58:57:03:19:ff:aa:0e:fc:13:63:00:55:
                    9e:83:a2:fe:84:0f:8f:98:30:42:99:0f:56:b3:7e:
                    d2:88:dc:f9:5b:98:9e:0c:01:fc:a6:bd:8c:e6:07:
                    72:27:94:df:fa:07:60:92:6a:0e:38:32:60:40:e3:
                    36:a2:f3:20:80:58:00:29:b8:3c:64:67:52:c5:4a:
                    c1:84:e7:f7:62:72:1c:b1:33:1b:c0:2d:a9:68:bf:
                    7a:44:1f:e6:7a:1a:2f:d1:fd:91:bd:d9:d3:96:ce:
                    89:b4:e5:1a:19:0a:a9:13:45:8b:38:5f:09:78:c8:
                    ba:3a:f4:b0:df:0b:06:a6:c4:37:9f:18:d1:75:35:
                    22:f6:0d:26:98:9a:57:60:36:cb:ba:dc:8f:db:46:
                    35:95:37:14:9c:ab:e5:48:89:e9:b1:09:fa:bf:00:
                    17:bf:9d:bc:6c:30:b6:83:bf:80:c8:c2:be:a9:9c:
                    9f:86:9f:b7:50:31:80:aa:10:a0:68:2c:11:cd:d3:
                    7b:c2:2a:e4:0b:6f:52:81:74:ec:58:7b:fc:a4:c7:
                    31:d7:97:41:d4:af:0c:1c:3e:45:97:43:57:b9:92:
                    38:b6:7e:85:86:96:7b:e1:8d:c5:3e:25:f6:16:8f:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:97:52:01:F2:27:A7:62:19:09:8E:45:78:74:9E:71:8F:AA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f20aa4d-d857-3f30-bab8-38fe6a107924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:76:7b:91:75:c5:e8:87:b8:c7:5b:d2:91:65:2d:69:5e:94:
         4f:9e:d7:f6:b0:41:fe:aa:0b:71:bf:1e:d5:4f:b4:64:b0:fd:
         fa:62:54:51:db:45:7a:f8:ae:3f:4e:31:66:41:c9:dd:67:1c:
         4e:82:91:33:dd:fb:59:da:10:6d:6c:1c:fb:ba:73:73:76:40:
         42:0b:bb:2e:5e:6f:ff:4f:6e:c4:99:75:5f:2a:85:21:9a:b6:
         9e:e9:c9:3c:5f:96:2c:bd:58:d9:ae:b6:d7:f5:44:9a:7b:91:
         84:18:71:f3:c6:c9:1d:32:58:71:8c:ab:93:8b:59:39:64:4b:
         b3:4e:f7:07:27:aa:2d:2f:f4:9b:1c:28:79:6b:6c:ef:c9:32:
         01:1e:87:3a:77:3d:f0:44:47:f5:f2:f1:12:af:3b:4f:c4:27:
         83:13:02:c3:53:cc:d8:b4:b2:06:9e:f8:6d:fd:3f:b5:5d:a6:
         c1:e5:72:5b:08:e9:98:ab:2e:8e:86:8a:0b:0c:d4:22:f0:3c:
         6b:64:09:88:bc:a4:16:8d:0f:2d:0d:29:cb:4d:92:1f:59:ff:
         49:cc:4e:80:8e:6c:52:3e:2f:66:87:cc:51:b1:ae:04:0d:81:
         ed:a4:7a:f1:ce:e5:af:99:19:f8:15:12:5e:f9:76:a1:3b:84:
         70:95:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:01 2024 by rpki-client on console-fra.rpki-client.org