Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29f2157-8a33-340f-874d-e532350ce1cc.roa
File:                     a29f2157-8a33-340f-874d-e532350ce1cc.roa (raw, json)
Hash identifier:          A1Y89Du91F6H9hVPXKOEckjMx7Us5rWEiLlAdUpdzPc=
Subject key identifier:   A7:97:4B:3F:3E:5D:BE:22:3B:09:0D:5D:BF:A0:6D:E2:B8:E2:8F:37
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583E3AEB22953A099D35BBFCE120
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29f2157-8a33-340f-874d-e532350ce1cc.roa
Signing time:             Sun 12 Jun 2022 12:00:00 +0000
ROA not before:           Sun 12 Jun 2022 12:00:00 +0000
ROA not after:            Mon 05 Jun 2028 04:00:00 +0000
asID:                     20115
IP address blocks:        2600:6c0c:282::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3a:eb:22:95:3a:09:9d:35:bb:fc:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 12 12:00:00 2022 GMT
            Not After : Jun  5 04:00:00 2028 GMT
        Subject: CN=8581d646-504b-4985-94b8-bdfa3cafb076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:77:d6:f9:9f:fe:99:4e:1f:ee:a0:15:43:
                    40:f0:a5:c4:3b:c2:c5:a6:5e:59:b7:18:24:cc:8c:
                    a5:4b:ee:e5:39:dc:16:8e:22:85:2a:6f:41:06:1a:
                    df:c1:16:45:9f:65:2d:cd:6e:84:92:3a:33:77:98:
                    e8:60:ac:ec:d9:be:03:ef:0a:c7:43:19:11:b4:25:
                    d6:3d:33:ca:3e:5a:26:18:22:7b:e6:7d:36:5c:52:
                    bd:fe:af:ec:6f:75:2a:44:18:81:9f:4d:29:7d:48:
                    a1:a3:7e:92:a3:e9:94:4a:a2:89:44:71:2a:62:1c:
                    ef:22:ed:4c:19:7a:e8:bb:4d:ff:8b:e7:f5:ad:0a:
                    25:66:33:d7:c8:a0:18:d0:3e:45:fb:6b:51:7d:1e:
                    cc:af:b9:63:45:33:bb:29:a1:0f:fa:1d:93:48:af:
                    5f:64:b3:d7:7d:eb:c2:ee:50:56:ad:52:a8:42:13:
                    fc:66:e2:8f:d5:09:43:2e:be:bd:11:fa:ee:18:df:
                    1e:29:da:df:04:6c:19:2a:a2:43:34:0e:52:4d:4b:
                    54:4a:b1:d5:4f:a9:00:d8:84:85:6a:2d:d8:9e:e5:
                    26:07:48:04:9e:6b:76:e4:33:00:15:b3:74:51:e9:
                    f3:f0:83:43:6e:2a:af:b7:bd:d2:5e:26:6a:8f:af:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:4B:3F:3E:5D:BE:22:3B:09:0D:5D:BF:A0:6D:E2:B8:E2:8F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a29f2157-8a33-340f-874d-e532350ce1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:282::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:65:1f:e2:76:2f:63:95:58:80:66:79:63:4d:4e:f0:dd:
         85:28:41:c7:83:09:d8:7b:a9:24:9a:a7:af:de:64:a4:38:2b:
         af:20:97:5a:b1:49:87:92:c9:2a:d7:5e:28:b4:ed:ad:de:45:
         dc:49:2d:5a:e9:d6:0a:27:fd:3f:ba:9f:e0:26:ef:e5:e2:f9:
         70:f9:97:25:f2:87:97:39:84:e1:32:f5:a5:a3:da:bf:2e:22:
         7b:fb:5b:7b:4e:4e:e1:8f:5f:b2:2b:ae:d3:b1:de:1c:f4:37:
         6c:8e:3b:18:32:09:82:52:ef:7e:6e:eb:26:11:80:79:ec:33:
         fe:9b:ee:31:b6:44:aa:c1:5f:90:e5:8f:f2:94:5d:a8:85:ab:
         a0:75:7f:76:42:76:a1:c0:5c:59:f1:4c:4a:ca:38:22:3b:49:
         b8:22:3c:b0:82:5e:c3:41:5d:d8:74:64:a4:4f:5a:82:95:7d:
         63:08:54:c2:a8:b7:cb:b1:6f:30:9e:cb:ae:14:fd:54:0a:b9:
         81:38:cb:90:69:d9:25:2f:01:22:fe:b5:dd:4e:1b:e2:8a:3e:
         67:ae:cd:77:3a:d2:49:0c:46:26:d8:23:2d:ca:5d:bb:dc:06:
         6c:93:64:b0:3a:71:84:49:0e:6e:3e:00:67:cb:d5:76:8b:77:
         81:ed:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:42:54 2024 by rpki-client on console-fra.rpki-client.org