Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66934418-b1c7-3dc6-999b-609c5fb68c14.roa
File:                     66934418-b1c7-3dc6-999b-609c5fb68c14.roa (raw, json)
Hash identifier:          mfYi3XUbnKmB7w4cg6/8n6Z+SHTeC1q37s/skv3qXuU=
Subject key identifier:   02:B0:FA:9E:F7:82:81:EA:4A:C8:25:D3:AD:8A:80:9C:42:EE:CD:3F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7F492DD2666459862E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66934418-b1c7-3dc6-999b-609c5fb68c14.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2602:10d:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7f:49:2d:d2:66:64:59:86:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=083261b8-a5fa-4767-bae5-b6fea23c3dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:75:60:86:b6:05:ee:d0:bb:78:16:79:1c:
                    d4:78:73:98:e9:b7:db:45:0b:a5:ca:92:d9:fb:1a:
                    9b:25:b3:db:66:6f:3f:47:86:13:7b:38:ac:ab:73:
                    23:86:78:12:f8:9f:86:82:99:0a:76:03:e6:bb:50:
                    29:d0:b9:6f:88:1e:94:a9:de:5b:bd:43:a8:b5:28:
                    3d:88:d5:99:0c:a4:66:bc:fe:ef:bf:dc:61:e3:6d:
                    18:ae:20:ba:4b:26:9a:3a:73:00:c7:b2:82:45:77:
                    fe:ac:13:28:d2:9b:94:39:92:af:69:9b:82:03:84:
                    6f:b6:88:b0:7e:3b:4e:1b:27:ef:4f:cf:1a:25:19:
                    fb:67:a3:e0:9a:3a:51:8d:22:03:f5:d4:4b:d5:55:
                    45:7d:7d:2b:c5:61:e1:49:a3:a1:cf:0a:2e:70:4c:
                    20:81:fb:e6:19:f2:6d:e1:e2:39:86:e8:13:97:f9:
                    c5:a3:b7:db:b2:20:3a:d6:e7:fe:0e:8a:8f:73:41:
                    85:36:99:0a:bd:6e:1e:e4:90:4e:fc:41:11:50:da:
                    60:05:61:80:a5:09:05:bc:23:7d:58:49:a0:9b:72:
                    e0:40:25:4e:c9:85:91:46:7c:37:2a:29:04:e8:15:
                    7f:64:e5:00:00:08:76:33:c9:ab:f5:49:fa:88:0c:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B0:FA:9E:F7:82:81:EA:4A:C8:25:D3:AD:8A:80:9C:42:EE:CD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/66934418-b1c7-3dc6-999b-609c5fb68c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:2f:74:0c:ca:9a:3b:97:dd:67:b4:f7:45:8d:83:91:72:a7:
         99:4f:ed:33:16:93:3c:28:5c:56:bf:33:be:99:8c:e5:6a:bd:
         a9:06:af:75:2d:b3:dc:e4:f2:cf:b4:ff:2e:d1:08:08:e1:3f:
         28:46:2d:92:cd:3b:9d:b4:13:81:f0:4a:bf:41:87:2a:d5:b4:
         49:80:5a:3e:fd:b9:b7:29:a1:29:7b:43:d2:4c:bf:5e:0c:45:
         4e:31:29:20:9a:c7:2b:77:f7:82:2c:9c:05:ff:c2:5f:e4:01:
         52:16:dd:dc:2c:27:60:7b:8c:91:f4:a8:c1:3a:72:66:77:b3:
         84:81:b6:db:d5:23:f3:7c:33:5d:8e:69:5e:fb:91:bd:00:ef:
         70:c6:4f:c4:92:91:4f:1b:61:e2:8f:c4:e8:23:cf:b7:7c:6e:
         23:8d:a4:44:d3:49:13:bb:6a:ab:23:82:5d:77:11:0c:34:7c:
         a3:f0:d9:08:03:f3:b8:60:03:41:29:ad:39:a1:77:dc:40:66:
         86:8a:cb:aa:12:5f:b8:a5:07:43:2d:5e:a1:a7:d0:a1:1f:cb:
         02:14:0d:c1:62:50:5d:18:25:b0:15:08:66:12:00:8c:1c:8c:
         9f:ce:75:0d:0e:19:e1:f9:d7:2d:bf:29:0d:65:3e:2d:77:f2:
         3b:7b:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:18:20 2025 by rpki-client