Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa
File:                     01df35f1-a2c4-36c9-873b-261876eceba6.roa (raw, json)
Hash identifier:          TMUWM30Pk0JQVzMb0enP5sJ1unA9sihBnAwb+OQRZBA=
Subject key identifier:   49:4C:8B:54:28:84:FE:86:A1:8E:67:9C:EC:10:4D:D6:24:0E:8C:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AA9C5DE085744DA4BCC60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c08:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:a9:c5:de:08:57:44:da:4b:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=55e97d12-5f5e-4ef3-bd02-d6a434e3078e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:31:d7:e1:1d:5b:ae:07:7c:68:0f:d2:22:
                    b6:4a:b3:fb:ee:7f:c8:a8:0c:b2:45:ee:e5:9f:20:
                    ad:d0:61:38:ed:e0:22:c9:af:68:f9:c9:a1:ab:d6:
                    ef:1d:1c:40:93:76:ab:cb:f3:ad:b0:de:23:28:f6:
                    ef:4f:2e:3e:c6:90:26:8f:4b:7b:ea:1e:1e:41:db:
                    4c:24:77:90:12:ce:62:2b:44:0b:56:cb:40:f6:ad:
                    84:14:ec:12:0d:a5:59:9b:4b:fa:66:66:5b:f6:30:
                    cc:60:78:ab:bd:5c:df:b2:8d:1e:25:21:8d:37:2f:
                    a1:f9:b9:76:9c:ee:89:b3:d3:d7:00:21:8f:9c:82:
                    bf:ab:16:a4:cb:52:53:cd:97:9b:b0:56:b1:7d:ce:
                    57:3c:e4:d6:e0:00:f8:55:65:c2:e5:b4:7b:b9:80:
                    3c:ca:d1:de:63:6f:46:79:5c:bb:aa:aa:40:eb:15:
                    db:43:18:f7:19:1d:95:93:52:57:96:15:6c:c3:9e:
                    19:84:53:16:0f:44:8f:30:5f:09:64:02:37:f7:95:
                    4a:62:2d:3c:18:9a:20:8f:8c:2f:1b:5e:84:ba:72:
                    df:8c:e0:39:97:15:c5:a3:7f:7a:92:13:25:dd:96:
                    a2:73:b9:e8:0b:33:75:42:77:bd:43:df:84:47:17:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:8B:54:28:84:FE:86:A1:8E:67:9C:EC:10:4D:D6:24:0E:8C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01df35f1-a2c4-36c9-873b-261876eceba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:59:a8:16:28:94:0d:74:64:4c:30:bc:45:9d:1c:13:68:
         ac:a2:75:99:3c:2e:ad:8f:48:27:a0:f3:40:cb:b6:89:73:46:
         56:59:45:98:06:a5:47:fe:1e:d4:c3:b7:e2:f1:9c:78:d1:b3:
         68:08:83:79:a5:09:69:99:13:b9:7b:7c:81:fd:89:ce:75:16:
         50:2b:d6:2e:67:19:ca:70:4a:b2:3a:05:8d:b0:97:c6:be:ce:
         e3:28:25:93:65:b1:f3:1c:17:9a:17:ec:2e:6b:91:0b:8e:62:
         59:2f:0b:3a:78:ac:45:af:e6:5d:e6:95:40:71:80:57:f6:eb:
         59:f0:bc:be:8f:30:3c:16:b9:e4:94:80:af:df:c4:17:6d:22:
         2d:02:0e:ba:9a:03:33:ed:d0:73:83:f8:ea:d6:fb:4e:97:28:
         27:1e:86:6d:8f:2f:79:00:aa:c3:27:11:30:e4:ad:da:b1:e8:
         88:2a:32:c6:67:a4:f7:73:f9:2e:e8:a0:5e:e9:f6:3b:98:a4:
         dc:db:3e:f2:97:78:b0:6d:42:b0:ad:a8:d4:2a:f7:5d:3a:4f:
         8e:27:ff:5d:bc:c4:12:5d:3b:91:8c:d9:9e:bd:0b:e7:78:67:
         1f:1d:a1:f8:66:16:3f:41:23:1e:a1:7c:c5:78:0e:23:e6:9b:
         cb:e7:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:38:38 2025 by rpki-client