Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723cf13-30e4-3459-aa22-60356ad0a212.roa
File:                     7723cf13-30e4-3459-aa22-60356ad0a212.roa (raw, json)
Hash identifier:          mxkljG89+rgGVrW3T5R0IhRwhmbl9qj0+dyOX2Hmuic=
Subject key identifier:   61:B5:4E:62:A0:CF:43:F8:19:2B:70:FD:E8:75:3E:7C:4F:88:2F:DE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B422803C99ECDB9AAF0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723cf13-30e4-3459-aa22-60356ad0a212.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33588
IP address blocks:        2600:6c66::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:42:28:03:c9:9e:cd:b9:aa:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9913b1a4-6a15-471d-8d62-c1979d62b6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:bc:e6:37:4d:12:49:ea:e1:af:f9:33:8a:
                    01:ed:85:f9:7c:9c:b7:fc:68:0b:12:40:35:fc:f3:
                    e0:bf:d2:e2:ab:0b:00:a8:e4:b2:6c:5a:83:b6:fd:
                    3f:b0:55:32:de:f6:69:5f:eb:f1:23:19:ef:5f:0d:
                    b1:be:31:47:54:6c:c9:c2:37:8b:4d:34:a6:ec:60:
                    54:b9:76:50:d7:4d:a1:d4:7b:e6:50:05:1a:26:ac:
                    65:e3:e3:31:8a:b7:b4:be:39:ac:fa:d2:65:5d:cb:
                    5f:83:cb:f1:58:8a:fe:45:33:60:d0:ab:ac:09:da:
                    c0:6b:ed:22:8f:fa:38:64:23:7e:34:e4:cb:79:bd:
                    cf:55:7f:8b:48:31:1a:37:10:7e:11:49:21:ba:df:
                    3b:75:2d:a7:54:a9:32:00:dd:7e:69:9a:f3:5d:75:
                    68:0b:9f:5e:a9:86:3a:cd:8f:c3:4e:74:82:01:34:
                    b0:c8:4e:26:21:ab:9a:b7:7f:ab:cc:ec:08:9c:c0:
                    c8:7d:82:76:a0:5b:cc:07:da:7a:8e:5c:5e:57:bd:
                    a8:12:b3:b4:1a:1e:92:7e:4b:34:a2:5e:48:8d:72:
                    ed:e3:25:61:6f:99:24:3c:07:fd:d4:f3:32:de:ed:
                    f8:47:20:5c:33:90:7a:9b:e0:b1:e1:8f:33:41:53:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B5:4E:62:A0:CF:43:F8:19:2B:70:FD:E8:75:3E:7C:4F:88:2F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7723cf13-30e4-3459-aa22-60356ad0a212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c66::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:66:f0:99:ec:61:37:0c:bf:a0:07:00:c4:d0:6e:1b:77:cf:
         12:1d:56:8c:90:b3:1d:36:c7:21:fd:56:d4:79:b8:74:a6:53:
         d5:42:75:25:21:72:a4:17:41:75:68:f3:17:24:13:4c:5f:1a:
         e6:bf:57:78:a1:2e:a4:04:19:7a:db:e7:bc:c8:f6:07:18:d7:
         83:75:f0:2a:5b:4b:d4:5e:36:1e:f2:44:11:6d:5a:ec:8f:61:
         56:aa:e0:b4:2f:08:bd:e5:b4:04:5d:be:cd:0f:ca:c5:d4:dc:
         09:d6:2e:6f:92:b5:14:96:49:ac:68:82:28:b0:cf:79:4b:af:
         24:8d:78:bb:d0:1d:94:10:c6:3c:ab:1b:d1:24:62:c2:4c:82:
         e3:15:0a:d5:cb:7f:e4:58:cb:37:0c:8b:65:b2:c4:db:09:e5:
         8c:af:fd:73:cc:27:0e:38:09:1b:46:fa:e4:b0:f6:44:d9:f8:
         35:17:3e:c8:1e:d9:ea:77:8d:6a:20:81:ba:5f:d4:20:a6:5e:
         8d:fd:5a:b1:95:ce:a7:d9:80:34:8d:bd:8e:78:77:4d:7d:7f:
         1d:ec:8d:0c:e8:f4:a6:4f:5a:dc:ba:56:3e:12:41:9e:c2:25:
         c4:e3:9c:ef:c7:34:00:de:3d:b9:f0:f2:0c:be:35:01:bc:01:
         59:5c:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:49:11 2025 by rpki-client