Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa
File:                     ef8898b1-f531-39ac-89de-009ebbd45491.roa (raw, json)
Hash identifier:          hNboRfgzkXBRz3nQYJcZ0uUWDJEbId9QDQAygaGL/B4=
Subject key identifier:   39:7B:E1:65:DA:AA:C2:A7:B3:CE:5E:38:22:69:6F:C3:DE:DE:AE:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AA9EA2E2F240369B3E314
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c08:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:a9:ea:2e:2f:24:03:69:b3:e3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=dd688dab-e7ce-4d5d-b235-0a0718f9d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:39:13:06:ec:e6:80:c8:e1:b3:de:a7:96:
                    af:51:d9:62:b2:e1:c8:27:f3:a3:3a:70:09:bc:f4:
                    d9:37:85:c8:29:a4:8f:d0:9e:5b:80:6f:6f:8b:02:
                    aa:3b:ac:87:df:ac:97:32:77:65:9a:7a:c9:8e:76:
                    c1:62:dd:97:83:6e:3c:9c:d5:c5:88:d2:23:10:70:
                    07:89:e4:e4:5f:f6:7d:5c:22:6b:5c:91:9d:6e:dd:
                    b3:bb:60:c9:72:d6:ad:30:97:cf:45:ba:f1:ee:b1:
                    5d:30:5f:85:c4:e0:d1:f4:16:7d:57:0e:c1:e1:cd:
                    66:a8:94:d0:d2:01:d1:68:40:ae:03:97:ff:fd:fe:
                    2b:b4:8c:01:ed:c1:21:a7:94:d3:d2:7e:df:00:42:
                    0e:d8:39:c4:0a:5a:b9:01:45:59:fd:68:6f:7f:df:
                    ab:46:e0:b3:eb:03:a8:86:04:92:b5:38:b9:92:d8:
                    8e:35:05:ff:8b:90:a2:44:af:40:1f:77:7b:fb:bc:
                    e0:83:98:bb:b4:32:75:17:91:bc:ba:5b:68:63:70:
                    bf:4d:44:de:75:b2:f3:5a:7b:cd:61:9f:3d:8e:85:
                    9c:c4:c8:3d:d6:7f:3e:c0:85:fc:f8:1a:1f:56:b9:
                    51:35:11:2f:69:4f:8a:4d:8d:18:c2:c1:5b:86:06:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7B:E1:65:DA:AA:C2:A7:B3:CE:5E:38:22:69:6F:C3:DE:DE:AE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:e7:21:8a:2c:ea:a6:61:df:2d:55:88:ef:6e:58:5d:86:
         ae:7a:19:cf:f8:9b:dd:9a:5d:31:06:0c:6f:17:62:7a:79:26:
         53:14:bc:6e:7a:80:a9:4e:1e:db:af:70:32:07:d5:42:1e:0d:
         7e:2e:7c:97:8b:b1:ad:af:c9:42:e6:0e:25:b1:c3:fa:f4:71:
         8e:02:1d:43:bb:65:7a:da:14:09:49:0d:ad:7c:a1:e8:a8:33:
         28:b7:ad:d1:66:de:f9:0c:7e:5e:97:9c:aa:57:cb:52:dd:3d:
         2d:61:4f:cd:31:14:97:1f:ea:e7:a6:8d:25:7b:30:91:73:af:
         ed:ad:98:a2:ae:d4:ee:6a:91:62:2f:c7:94:51:2a:a1:d5:6f:
         eb:b3:c2:6d:6f:ad:b9:21:d9:31:ed:29:f1:0e:e4:e5:76:35:
         d8:5d:cb:2a:ea:9c:a9:03:a5:e3:98:13:6f:71:af:af:d2:6f:
         ae:68:56:33:7a:cb:01:8f:da:74:c0:9d:72:d4:d8:96:b3:73:
         eb:f3:48:4d:18:f9:08:30:c9:c5:f4:a6:47:cc:e2:39:ef:18:
         84:80:da:89:d6:c1:68:b6:31:7b:ea:90:e6:a2:c9:e1:a0:40:
         af:e5:aa:bd:06:a7:2a:ee:e6:74:57:90:a0:41:fa:1c:40:38:
         eb:34:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:41:32 2025 by rpki-client