Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa
File:                     601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa (raw, json)
Hash identifier:          i1F7MCX3rEjLP8Nv0RMnMQ3/waNIkKqpujA5goMHrnc=
Subject key identifier:   0B:73:9A:11:71:BF:4A:85:4C:D1:41:42:CD:5D:A2:0A:2A:30:DF:CD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BAD81C29E877E498998D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        2600:1900:4110:fc0::/60 maxlen: 60
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d8:1c:29:e8:77:e4:98:99:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e8deaed5-5717-49cc-abdb-c4f123396ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:7a:6f:50:7b:f4:22:38:a6:22:d0:05:23:
                    6d:98:a8:cf:65:98:21:3c:d8:34:eb:b8:f6:9b:c6:
                    27:a0:57:d5:25:0b:83:17:b8:f3:91:cc:b9:f6:fc:
                    bf:00:00:e5:04:e1:1a:b1:a1:c9:86:65:74:fd:0f:
                    af:a5:be:d4:79:75:d7:77:2f:d6:f4:4c:4d:bb:04:
                    bb:5d:4c:3b:63:3c:f4:fc:fa:4f:12:50:b1:1f:f9:
                    c2:dc:68:f4:a3:6a:d0:fb:35:6a:d7:b5:b0:bb:9c:
                    5f:59:de:fb:1f:d2:4b:ac:49:94:df:93:cd:5d:0a:
                    32:db:db:38:11:b4:cf:6d:ce:d8:fa:e2:77:d9:75:
                    47:54:76:ec:9f:a9:c8:0e:a0:de:1f:3c:d0:b8:f1:
                    c1:8e:c9:85:5f:d9:d9:f1:8e:86:6b:39:5a:bf:ab:
                    a4:c8:1f:f2:48:0f:88:13:2e:cc:d8:94:fa:4e:13:
                    10:6e:ca:06:af:0e:90:91:f8:09:1f:c3:2b:68:0b:
                    b4:6e:7f:d0:1d:ff:0b:f4:6c:e4:70:98:81:81:3b:
                    e3:59:e6:36:e3:39:5a:f5:a3:96:f8:c1:1f:87:aa:
                    11:7e:90:6e:8a:fa:e1:06:78:cd:56:ea:fa:dd:5e:
                    f5:3f:30:ef:6e:6d:91:2b:4a:b9:2e:89:8e:e9:b5:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:9A:11:71:BF:4A:85:4C:D1:41:42:CD:5D:A2:0A:2A:30:DF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:fc0::/60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:ba:1d:47:34:0f:08:6a:24:9d:72:56:b3:56:d4:05:af:
         37:69:01:45:12:7b:7b:56:96:be:54:fa:fd:f2:d8:2d:91:81:
         bc:d2:63:f5:98:1c:47:36:05:f6:1a:36:03:7b:d8:4c:70:25:
         51:e9:5b:f7:2f:c5:e2:6a:2b:6b:9b:66:21:e5:cc:0f:59:3d:
         cb:00:a2:fd:f2:c2:5e:be:b4:03:37:5c:c9:5a:21:40:af:20:
         7e:e8:de:c1:0d:16:05:31:3b:b9:b7:95:00:2b:55:18:96:08:
         79:f7:1f:01:1c:2f:ab:d0:f1:24:0b:92:0c:7a:30:00:57:57:
         88:11:c4:64:02:3a:af:26:23:14:42:2c:1d:18:6f:89:46:25:
         88:84:f0:ce:5d:62:cf:4e:22:cf:1e:41:19:e2:62:da:c6:92:
         97:18:25:bf:b2:db:bd:9e:1c:f8:44:91:7c:e1:04:66:22:7c:
         e5:1d:12:cb:5f:23:51:a3:37:ef:70:19:1e:43:cb:7b:cf:f0:
         ca:20:3a:8f:8a:c0:ed:8a:a4:e0:0e:bd:10:c5:49:f3:17:60:
         bf:0c:ed:30:80:28:67:fa:3a:2d:f0:77:aa:42:c1:e7:2e:26:
         20:7b:7a:16:fa:06:3a:64:15:95:5d:4f:9f:96:c5:53:62:69:
         dd:b9:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:49:15 2025 by rpki-client