Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0df66b20-50fd-35b6-be06-1c72a4c41dd7.roa
File:                     0df66b20-50fd-35b6-be06-1c72a4c41dd7.roa (raw, json)
Hash identifier:          QG6PJgMoFFq3NSZOlzQZVuGHmbyWYFgr38tMAz7fHZY=
Subject key identifier:   11:41:06:F5:A9:AF:03:F0:71:1B:B6:1C:32:98:C6:68:B0:F1:19:5F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D735EBB685FD28FB9B7C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0df66b20-50fd-35b6-be06-1c72a4c41dd7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c08:539::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:73:5e:bb:68:5f:d2:8f:b9:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=60a02e6b-d338-4701-8a69-90716dbf3f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:55:88:1f:cf:4e:2d:33:d0:c3:bd:2e:7a:
                    b8:2c:d0:ac:16:fd:45:8f:61:5c:10:58:42:da:1c:
                    3f:f2:9a:1c:f2:fc:88:5d:9f:74:d1:6d:dc:0f:f9:
                    ec:24:6d:6a:d8:0b:d1:cb:9e:09:52:84:ad:66:90:
                    ed:e5:78:c9:28:c9:c9:58:b0:76:b2:75:4d:46:23:
                    a3:d3:47:c2:09:ec:6f:cb:45:33:77:06:75:04:9c:
                    24:1d:7c:55:f6:05:1e:3b:90:04:5c:5b:ca:0c:09:
                    c0:67:f5:26:78:5f:23:4d:9d:21:43:fa:97:4a:32:
                    60:bf:10:da:3f:1f:0b:b8:02:65:c8:0e:4c:b4:0b:
                    e6:00:bc:ea:fe:b8:23:02:1f:67:c3:a1:78:fa:09:
                    0e:56:9b:34:ba:9c:ce:ac:ca:69:d1:c2:0f:c1:10:
                    65:39:3d:ba:ac:f4:2e:8e:e7:ed:f5:68:b3:3c:fc:
                    e7:25:60:4d:72:06:8d:7a:24:99:9b:48:73:9c:68:
                    db:a7:0e:a3:03:a8:21:ec:61:f5:41:f9:49:53:39:
                    c6:9d:46:56:74:6c:aa:82:bf:13:f7:77:c4:da:75:
                    78:6d:f3:12:c2:02:ca:ba:de:a1:d2:99:cb:ee:39:
                    d4:28:61:32:b4:f8:e2:35:47:61:61:10:8f:f8:9a:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:41:06:F5:A9:AF:03:F0:71:1B:B6:1C:32:98:C6:68:B0:F1:19:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0df66b20-50fd-35b6-be06-1c72a4c41dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:539::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:62:e6:fa:d4:a2:cf:0d:a8:5f:8f:8f:35:b8:0d:40:1d:
         70:ed:55:e9:f0:b3:13:11:28:e9:46:58:14:c4:2f:ba:d0:f1:
         fd:ee:4b:f5:10:96:24:a5:53:56:25:92:73:56:09:61:b3:31:
         79:ed:3c:76:ec:8c:eb:96:c3:80:5d:82:bb:b5:ac:b4:24:3e:
         be:30:5a:2e:62:8f:88:a6:14:29:87:be:e1:bb:8c:fb:ee:68:
         05:17:dc:0e:0d:da:b8:5a:06:e0:8e:8d:ac:7c:4e:a8:37:0f:
         13:1f:b1:65:2e:fc:1b:bc:10:3b:a8:b0:f4:a1:f3:cf:52:a8:
         cb:23:68:3d:74:3c:41:3f:3d:44:d6:3a:55:9d:ea:f3:73:aa:
         0a:6f:42:b1:7a:eb:62:f0:74:5a:16:6a:84:8c:04:d4:28:00:
         97:41:09:3a:34:ed:df:d4:37:e8:5d:23:72:18:5c:1c:97:b7:
         5a:f6:2e:14:d1:e8:4e:91:50:f6:9d:ed:14:13:be:91:90:79:
         27:7d:89:1b:22:1d:02:77:29:ca:43:9a:5e:ab:1a:d4:b7:32:
         35:16:cb:8e:25:fa:f3:07:10:5a:95:77:a1:4d:f9:e7:4f:65:
         87:ce:91:10:d0:32:cd:f3:9e:76:63:52:ab:25:53:c1:a1:fa:
         9d:a3:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:04 2025 by rpki-client