Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b265abf3-54af-3b5a-a17a-d2a15814e96f.roa
File:                     b265abf3-54af-3b5a-a17a-d2a15814e96f.roa (raw, json)
Hash identifier:          iLv8RIHb81k+5HX29rxmWKrOi1rhuUIHOzbsF+DnJsk=
Subject key identifier:   82:9A:E4:58:9F:63:82:8F:B0:B3:D5:92:07:28:E6:D6:D6:55:EC:3D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0865A5365543651A3D69
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b265abf3-54af-3b5a-a17a-d2a15814e96f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2602:10d:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:08:65:a5:36:55:43:65:1a:3d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=444ea406-dbf8-46d3-b5e4-a7404f13a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:02:c5:32:d9:1f:39:a0:40:85:ac:47:21:
                    a0:4d:f4:2f:09:4a:64:4e:b0:30:94:f5:ec:c3:bd:
                    fb:53:9e:9a:4f:f2:aa:74:9b:35:de:23:58:e3:74:
                    36:78:49:0f:5c:be:6f:28:a0:08:38:63:73:21:0a:
                    a8:d7:d6:f2:b1:ef:a9:87:3f:61:16:19:7f:b8:32:
                    c9:b6:6d:8e:78:ab:07:a9:07:e5:69:ea:80:ec:fb:
                    0d:22:b2:a1:b7:dc:fb:8f:7d:37:6a:45:17:0d:3c:
                    3a:c7:e2:bc:52:ad:4d:1e:6f:e6:b6:16:59:ef:70:
                    a1:d1:91:2d:05:b3:43:7d:9c:4c:cb:8c:fe:a0:04:
                    12:95:05:ea:ea:6f:d2:04:70:57:30:f1:cd:76:ae:
                    60:e4:e9:90:22:88:ab:6c:f1:df:5e:eb:4b:55:bc:
                    c1:ca:48:ce:25:c0:ba:ed:a3:4c:d2:52:87:ed:ec:
                    b1:14:36:bb:58:bb:c3:1c:53:de:c4:da:46:f8:b9:
                    55:c0:6c:99:0f:52:69:66:8d:e3:7e:16:f2:fd:59:
                    90:b6:f0:cc:17:a9:2a:48:15:ea:5f:25:11:2b:ca:
                    fb:cf:4c:0d:fa:70:99:0b:0f:a8:3b:a0:81:0d:b5:
                    e8:0e:1b:c0:f6:10:70:c0:bf:81:6d:b1:19:f1:ad:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:E4:58:9F:63:82:8F:B0:B3:D5:92:07:28:E6:D6:D6:55:EC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b265abf3-54af-3b5a-a17a-d2a15814e96f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:90:49:b1:9c:2b:9d:08:95:09:b3:d2:95:17:7f:dd:c1:94:
         49:f3:c8:bd:29:fd:6f:7a:78:2f:c5:e4:13:c3:76:d4:3f:32:
         88:e1:ab:80:25:83:bb:71:e0:bc:6f:28:ab:bb:7b:57:19:1b:
         8d:93:33:be:78:f1:dc:35:78:6c:c4:14:8d:22:3b:bd:21:e7:
         0f:76:ec:5f:91:1b:fc:c6:ed:ef:ca:4b:62:5f:8f:ed:5b:24:
         5a:02:25:e2:6f:3a:46:0d:61:cd:ad:fc:55:cf:f3:64:1b:31:
         c5:4d:04:b2:16:04:2e:5d:95:84:09:56:bb:cb:d9:07:9a:d3:
         5c:74:b5:fc:07:b7:1a:75:e4:e1:91:02:b6:ea:05:24:88:c8:
         05:5b:c2:23:29:3f:f9:4c:91:2d:f1:66:ad:eb:99:97:c7:c0:
         a6:d6:a1:a5:8d:90:48:67:6b:6d:a6:c8:2d:60:48:3b:e2:46:
         83:9d:71:c8:4c:0c:db:90:03:dd:2a:46:ff:d9:fa:07:c0:9d:
         63:31:65:a3:02:42:a3:2b:02:43:85:08:cb:89:2e:77:15:65:
         9c:94:57:4c:09:35:6b:d6:1d:a2:73:a4:78:f9:15:bb:f9:c8:
         a4:e2:92:d8:8a:27:5e:ae:88:95:ee:69:60:e0:2b:b4:ee:54:
         6b:41:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:24:04 2025 by rpki-client