Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04c26e02-1d4f-3aaf-a435-2039c4260ba1.roa
File:                     04c26e02-1d4f-3aaf-a435-2039c4260ba1.roa (raw, json)
Hash identifier:          nZ6eXsI/uzjF/wgK7OfPMRUWwAjE5c6HWzlHqGRCMI0=
Subject key identifier:   53:75:FB:EE:0D:E1:7C:2B:9C:B8:DC:C3:C1:CF:0C:BD:02:88:42:19
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B3C54B1F49A367B2BFA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04c26e02-1d4f-3aaf-a435-2039c4260ba1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:3c:54:b1:f4:9a:36:7b:2b:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4db90f70-8934-45bb-89a7-eaf73ea79d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:70:ba:a0:ee:fb:bd:72:cb:12:4d:93:45:
                    e4:e1:18:4c:66:f6:d3:6b:66:f6:4d:f3:3d:08:84:
                    0a:a3:ad:da:05:c5:ec:77:9a:02:ee:86:94:34:9d:
                    20:4e:f6:82:e4:fd:ec:bb:61:7d:f2:37:63:64:be:
                    9b:0d:b9:98:f4:0d:0c:88:35:95:70:58:f6:2e:14:
                    a7:cd:88:91:02:71:5a:fc:41:7c:a3:e2:97:4d:15:
                    b4:82:7c:21:a1:7f:14:4f:98:0e:f5:5e:06:b0:1e:
                    38:9a:c6:74:cc:67:68:8c:bf:96:a7:45:38:3c:ab:
                    e3:77:ca:a7:b8:bc:c3:47:b0:0c:4f:97:31:bf:63:
                    5f:60:17:50:c2:a2:92:23:1c:06:51:0d:63:ef:c1:
                    fa:d2:e8:ff:80:cd:37:05:fa:5f:90:cb:f2:5f:29:
                    66:4d:62:ff:0e:80:2f:16:38:fd:98:ef:e1:3d:2a:
                    0e:51:ef:16:a1:c4:93:2c:85:74:b2:ae:4b:4f:19:
                    d0:ba:03:3e:2d:4b:65:ca:7b:4d:f7:94:ff:0d:ea:
                    f5:0e:cf:9e:eb:00:ba:af:1c:03:c6:88:be:79:03:
                    5e:65:07:bc:37:b3:0e:83:44:38:82:8c:f7:d1:73:
                    77:03:8e:7c:3b:fb:04:f5:fc:60:aa:d9:e8:64:da:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:75:FB:EE:0D:E1:7C:2B:9C:B8:DC:C3:C1:CF:0C:BD:02:88:42:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/04c26e02-1d4f-3aaf-a435-2039c4260ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c84::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:c6:e7:a6:01:f4:66:36:f6:f7:00:6c:e0:aa:0b:98:9b:
         91:0e:f5:bf:2e:ba:9a:b7:b0:cf:34:1f:78:e0:78:5c:8a:43:
         db:2e:4c:83:72:4e:3a:cc:65:28:47:8f:1a:4c:dc:d1:f6:08:
         08:1f:c0:dc:45:0d:7c:3f:75:f4:ef:df:09:ca:6d:fc:b4:7f:
         3c:ce:c9:4c:ba:f5:1c:97:bd:8f:83:79:6d:30:48:e6:9a:da:
         c9:b9:34:83:ce:3f:63:8b:fc:db:fd:dc:eb:e9:80:42:89:88:
         a9:77:64:d6:f7:f6:ec:5a:b3:15:c5:a0:04:13:8e:79:c4:0d:
         d1:57:a1:97:e3:3c:73:d8:e5:c1:8a:4c:a1:b4:1a:fe:88:9b:
         43:69:db:1c:5c:38:27:01:8c:37:aa:be:b6:3e:06:c8:88:51:
         36:90:0d:7d:a0:bb:30:44:ea:c1:43:d6:4c:fe:39:fc:02:f3:
         04:0e:00:30:fb:22:72:92:fe:03:fe:40:e0:39:1d:be:b3:cd:
         bc:02:eb:a1:60:8c:27:11:af:8c:b5:6d:92:ee:4b:81:00:3a:
         04:49:c7:d7:ea:49:90:9d:6a:0a:74:52:96:68:2a:88:36:05:
         c1:93:6a:13:b9:4a:d9:0d:e4:45:96:a1:10:49:c3:b0:e0:5f:
         97:ee:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:06:25 2025 by rpki-client