Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4e0f162-2cba-33ef-bcaa-750fd762a699.roa
File:                     b4e0f162-2cba-33ef-bcaa-750fd762a699.roa (raw, json)
Hash identifier:          Puo2wC6/8Nx9WQQbnPV6TSC2iIP83LMcZp3f2Yc2KBY=
Subject key identifier:   A8:CB:32:FF:16:12:F7:DE:C0:6E:B3:78:03:D3:07:E7:96:EF:20:E9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A7F644A0E58116964FD00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4e0f162-2cba-33ef-bcaa-750fd762a699.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2602:10d:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:7f:64:4a:0e:58:11:69:64:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5841b065-d18f-4566-9782-afcdfffc8a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:b2:22:21:93:fd:a1:95:8e:25:42:a4:05:
                    c4:c0:f8:94:cb:0f:66:f7:d7:d6:19:85:c5:fb:64:
                    b5:cf:ae:30:50:14:fb:cc:e1:37:a7:eb:9c:e9:c1:
                    f5:25:7c:e3:96:da:2c:cf:f5:e5:29:ca:c9:e9:34:
                    22:52:ff:19:94:ce:c6:e7:60:6b:31:f2:f1:c1:46:
                    77:c1:b4:03:2b:b2:15:53:4e:f4:0e:77:72:e4:9f:
                    27:a2:d4:61:d6:94:41:00:26:32:21:f8:15:aa:7d:
                    d2:1a:7e:98:36:72:dd:b8:4c:b9:1d:9f:d5:94:32:
                    34:d7:7c:dc:d1:e9:c9:8a:e5:a3:ec:00:9c:21:75:
                    f7:1d:3d:e8:fd:28:1f:35:40:83:10:e5:b0:24:20:
                    50:2e:f0:ba:3d:fb:77:ca:4b:39:69:5b:ee:8f:13:
                    41:8f:13:26:ef:5d:d5:91:5c:c5:7a:d1:09:f2:81:
                    0a:3f:57:80:eb:9b:aa:77:27:cf:c8:4b:44:da:91:
                    0c:2c:3a:f9:9e:be:42:75:ba:4b:e3:a9:7f:0a:44:
                    73:b7:f0:c0:06:59:c0:b6:ba:23:3f:31:60:bb:a7:
                    99:7d:99:86:fb:58:57:9c:7e:35:bc:2d:26:1b:a9:
                    5a:19:52:29:11:97:61:2f:b2:5c:dd:04:32:53:00:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CB:32:FF:16:12:F7:DE:C0:6E:B3:78:03:D3:07:E7:96:EF:20:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4e0f162-2cba-33ef-bcaa-750fd762a699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:76:46:f1:4e:bd:f2:8b:b6:9f:cc:7a:a5:fd:fc:62:a1:d6:
         bb:ba:80:e5:35:99:94:9f:71:89:b8:64:b5:ac:a3:0d:8e:e4:
         c3:5d:d8:50:95:c4:3b:91:d6:19:85:ce:3b:3b:0b:e7:c1:6a:
         58:32:a4:a2:44:35:be:6f:7e:03:3f:7a:70:75:ba:27:c5:04:
         2c:03:eb:d7:49:35:df:a2:64:ed:6a:69:8e:07:3f:3b:f5:64:
         a6:9f:e0:15:71:d0:22:be:bd:4a:9d:52:da:89:63:fd:b6:72:
         8c:2f:3e:d1:93:34:94:6c:14:e6:b9:ab:75:2b:64:27:9e:15:
         f9:f6:83:26:f5:41:ac:85:4e:11:ba:fa:6f:c2:a5:40:70:47:
         51:8f:a3:17:d6:0f:4a:ed:d0:1d:ac:79:a7:44:a6:cb:53:12:
         7b:08:8c:97:21:a6:16:ce:c0:d4:ff:d8:e9:10:df:7d:ef:52:
         b3:fb:40:84:6a:d9:3f:ba:4f:86:cd:d2:1e:2f:e6:7e:02:02:
         51:f0:cb:7e:e6:fa:3d:7d:49:b2:8b:e7:b0:3f:f9:3e:1d:b9:
         a5:66:f0:73:67:41:22:79:aa:6e:c4:59:a9:06:0e:48:5a:fe:
         b1:3f:ba:69:ce:63:2b:99:47:1a:0f:a6:20:9a:3e:e2:90:bc:
         6c:06:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:45:22 2025 by rpki-client