Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa
File:                     146663bf-ed27-3e00-8122-47273e9cf091.roa (raw, json)
Hash identifier:          QWOmSBLQWIAA/+qQjOC7Pmf1KxrbLm5qwNnEY3EV5Ms=
Subject key identifier:   56:C4:3E:20:2B:00:62:E0:1A:99:17:CC:84:58:5E:37:14:3B:D6:D7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF3CA0FBB5034020A5E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c:20e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f3:ca:0f:bb:50:34:02:0a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=94f5ee6e-62f5-4788-bd44-24f04b3226b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:a9:3c:98:ac:1f:cc:8e:8a:d5:bf:21:68:
                    0e:6c:bf:b6:ae:fc:ff:69:e0:81:c1:83:77:15:1a:
                    c8:4b:ec:91:37:80:c9:77:c7:be:97:28:ab:36:9e:
                    35:b4:71:93:70:76:57:8e:54:a8:f7:a8:d2:dd:d7:
                    95:b1:25:59:49:96:37:ed:f4:b9:df:91:5a:6a:1e:
                    c7:7b:f9:3e:22:70:9d:dd:d1:f4:56:0d:8e:ad:f7:
                    5c:d0:8a:b6:a0:da:b2:7d:a0:72:ba:48:1a:c6:e2:
                    c2:05:48:3c:b7:76:fa:8a:04:75:5d:e1:21:59:0a:
                    46:85:bb:a4:f5:22:80:72:b6:a6:d5:de:27:86:6a:
                    2e:06:ae:e5:53:2b:79:86:f9:21:39:b3:c4:83:12:
                    41:b5:98:f6:26:a1:44:21:e1:a3:2d:d2:f4:1a:69:
                    ef:c9:d1:10:5d:69:e2:b4:01:c8:5e:08:c7:31:93:
                    56:6e:ea:b2:e9:85:31:7d:5d:37:36:9b:19:c6:25:
                    72:ef:9d:a6:a8:55:55:45:9d:d7:1d:2d:4b:0c:03:
                    51:0a:66:4a:7f:4e:e0:73:ad:a2:1a:18:41:a0:45:
                    9e:ef:52:38:56:6f:42:4f:ff:b9:5d:64:4c:55:9f:
                    37:43:4d:a3:81:20:2c:7e:8f:fb:e4:8f:61:d8:c9:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:3E:20:2B:00:62:E0:1A:99:17:CC:84:58:5E:37:14:3B:D6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/146663bf-ed27-3e00-8122-47273e9cf091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:20e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:08:91:e2:f2:66:19:5b:4f:1a:bc:1b:c3:83:07:df:53:f6:
         bf:0a:19:91:b5:6a:3d:35:03:ff:49:4b:10:3f:b2:b3:16:c3:
         b6:c6:12:73:46:7a:3c:b4:33:c7:9f:66:fc:99:c4:10:26:f1:
         05:5b:73:2a:5c:6d:4f:b6:28:a9:83:b5:d2:e6:74:58:3f:45:
         0b:66:ed:92:6f:5a:95:fe:72:5f:14:09:dd:76:5b:1b:39:d2:
         a0:1f:fa:2b:c2:c9:53:d9:ff:41:b3:21:2a:2d:9d:44:d6:16:
         36:ae:34:85:0a:07:a4:f5:4f:76:3c:da:95:f1:4c:ed:75:8d:
         38:50:27:12:2d:f6:2a:8b:18:1c:de:f8:42:af:20:18:59:8c:
         32:d2:e6:47:75:63:e9:4e:da:18:9c:c8:c8:90:b6:5a:48:1c:
         a4:b8:44:ad:43:f6:7d:1e:c4:68:b4:a0:74:81:0f:e4:4c:81:
         ca:38:1d:2d:45:fe:a4:16:6d:a9:6b:cd:35:d8:bb:50:b1:36:
         83:32:d7:b0:f8:3d:7b:82:07:8b:ce:70:a4:78:95:3e:dc:29:
         be:66:91:b0:5a:04:c3:44:92:53:2f:2c:4e:91:d6:3a:90:fe:
         f9:a5:45:e7:8e:97:e4:1a:0c:b1:3b:80:fd:32:a3:df:a4:88:
         e9:55:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:39 2026 by rpki-client