Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa
File:                     e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa (raw, json)
Hash identifier:          nGKrhhA+/3pLz9bEkah3lXRe1X/uRy12CowGk5ens2g=
Subject key identifier:   01:4D:DD:CA:D3:50:9A:48:87:7A:96:30:F8:2E:31:63:22:98:7C:DC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAD8799315E322FB84880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2602:107:5900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ad:87:99:31:5e:32:2f:b8:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fcae9e2e-39ce-4121-bf57-3d7b65db75fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:94:3e:39:d7:56:b8:e5:15:15:b0:c2:8c:
                    13:f1:a3:02:b9:d9:35:44:c3:29:84:c4:1f:51:8c:
                    a9:b1:da:06:8d:66:26:24:77:7e:21:11:f6:92:0d:
                    d9:99:0d:5b:a8:18:bb:72:db:45:c6:02:f1:00:34:
                    8f:c7:ce:ee:7e:94:d2:9b:f7:55:ac:da:14:7d:f5:
                    0c:3d:78:4a:ab:3d:db:29:0c:0d:fe:d5:26:c8:8a:
                    e2:72:b0:04:ab:f8:5b:c3:29:af:3b:e6:36:72:ee:
                    0a:9d:e3:84:35:88:58:06:6e:10:95:6e:4e:95:25:
                    fb:7f:17:95:f5:35:1c:05:8c:cb:78:0e:48:27:30:
                    d9:e4:05:7e:d4:41:d3:9d:22:eb:25:a4:14:1d:f4:
                    83:bc:a9:8c:e7:83:08:70:e8:1f:30:4f:77:cd:b4:
                    8a:8c:fa:75:d3:4a:95:70:9f:dc:88:a3:5c:e5:b5:
                    35:5e:90:a3:43:d6:98:a1:43:d7:71:c0:22:5f:bf:
                    84:b4:c9:23:bf:95:58:d7:cd:67:6c:c9:af:0c:6c:
                    9a:31:c7:b3:fb:cb:48:6f:69:17:bb:59:c4:3a:24:
                    cb:8a:9a:31:77:c7:48:07:c3:d5:b8:ce:77:51:83:
                    59:f5:c8:59:4a:e9:ac:39:b0:8f:02:c4:8c:39:28:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:DD:CA:D3:50:9A:48:87:7A:96:30:F8:2E:31:63:22:98:7C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e17e3fbb-7ec2-38eb-8ddb-7693b1c00222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:5900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:a9:f6:aa:ce:61:7d:c1:90:2f:24:98:7e:e3:5c:87:c1:
         c5:92:d5:6f:19:e0:eb:fb:86:0f:e1:9b:ff:2e:1f:70:6c:fe:
         a5:f7:2e:1f:03:d8:40:01:32:11:af:2e:a0:be:f9:2c:32:42:
         44:a5:76:c3:e9:4b:45:c1:fb:0a:7d:d8:18:f6:1a:ce:03:2e:
         bb:67:ce:f9:39:80:59:1d:93:e9:27:df:d1:6c:58:9b:72:6d:
         0c:af:5e:24:4c:2e:6e:a7:76:87:10:b7:4b:92:4e:87:a9:90:
         84:23:e1:ba:00:89:84:c1:09:ac:00:b4:73:10:b9:23:36:06:
         d5:b6:b2:38:59:92:42:d7:fd:6c:60:1e:e7:9a:6e:59:0d:51:
         1f:42:27:32:9d:32:56:47:a5:43:95:93:d1:d1:8b:29:1c:6d:
         b3:c5:91:e8:6c:f0:59:f0:1a:57:4a:9a:a4:e1:d5:29:0b:11:
         e1:db:69:32:19:41:1e:30:28:37:13:78:12:ca:58:95:ef:02:
         69:f4:d0:a1:49:fb:29:92:1c:a9:43:9d:ba:b4:9e:97:c1:0e:
         37:19:fe:eb:98:36:80:94:2f:b3:e9:68:12:13:18:03:14:1d:
         47:dd:28:87:98:6d:de:fa:2a:20:93:d2:ec:32:e5:87:5f:75:
         c9:d6:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:05 2025 by rpki-client