Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2785abfe-a2ab-398a-a0b8-71ccea20b640.roa
File:                     2785abfe-a2ab-398a-a0b8-71ccea20b640.roa (raw, json)
Hash identifier:          oFAYhyoZRgvJbUf4iW664Ad693j9wqDXy5riZd6Sgtk=
Subject key identifier:   A5:3B:4F:FF:F2:49:18:CB:E9:BF:2C:70:E7:63:05:C5:AD:60:08:EE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D3D6EE28E7766B2211880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2785abfe-a2ab-398a-a0b8-71ccea20b640.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c47:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:3d:6e:e2:8e:77:66:b2:21:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=795dee80-23c9-4846-b640-fed2d0a37e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:53:3a:62:8d:eb:88:9b:8e:c1:d2:9f:35:
                    f0:a5:42:52:ab:32:00:76:23:86:e8:1a:01:92:88:
                    18:10:78:bc:e4:30:98:e0:6d:79:cb:cf:c1:e1:2d:
                    fb:ff:3d:e6:2e:15:8c:b8:6f:46:07:fc:e1:09:dc:
                    0b:32:e3:bd:e2:b4:5b:13:17:97:c6:be:1a:28:5b:
                    23:d2:1a:d1:da:38:79:d8:a5:96:83:44:48:dd:d6:
                    27:b7:8b:70:04:ef:45:68:7c:ab:1a:f4:bc:f5:be:
                    b5:15:1f:e3:92:04:77:cb:ed:d4:51:5b:40:47:d2:
                    fb:1f:e8:a5:80:f7:66:87:d5:51:c4:85:fa:9f:12:
                    02:79:d5:2e:b1:60:18:f5:d7:a0:cb:bc:dc:87:52:
                    54:2b:56:c8:bb:1c:18:2c:57:7e:29:e9:65:43:ab:
                    19:5f:92:96:b2:5d:e9:24:3d:e6:c4:72:b1:81:65:
                    cb:a2:0d:09:2d:b0:0d:26:98:3b:92:d0:23:52:a6:
                    0c:1c:15:e5:d1:1c:df:24:6a:e9:89:42:2f:94:b7:
                    6f:5a:21:f1:c3:2c:b7:ca:85:1e:c2:f0:ec:9e:56:
                    e4:47:7f:ad:2d:62:bc:4b:2e:d5:64:54:fc:f8:cb:
                    a0:44:8a:29:d4:1e:1d:ff:db:4b:36:1c:56:4f:df:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:4F:FF:F2:49:18:CB:E9:BF:2C:70:E7:63:05:C5:AD:60:08:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2785abfe-a2ab-398a-a0b8-71ccea20b640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c47:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:7e:3c:f9:2c:c7:ed:61:a9:64:1a:73:0f:bb:b1:5a:e1:
         1b:77:a7:75:90:fe:e9:ba:02:24:0f:f7:da:f9:fe:02:4e:19:
         8b:fc:eb:8a:2e:4b:9e:d9:af:21:a6:9b:ec:86:61:e1:e1:b2:
         42:9c:1a:02:2b:72:a8:b4:b5:06:13:7a:cb:37:01:e8:4f:e7:
         3d:ba:93:5e:9b:44:24:4f:ed:4e:43:fa:b5:a6:1b:e2:2d:ba:
         a0:6d:3b:5f:45:1c:0e:cc:e0:7a:ae:aa:64:e0:ad:45:8d:c0:
         dd:fc:f8:31:09:02:c6:47:40:76:5e:c1:bc:54:f1:2d:4d:fc:
         49:f8:63:ff:69:d8:55:d7:83:e7:a6:94:9f:c4:a9:5f:ff:e3:
         97:56:94:1f:0d:14:4e:54:b7:10:9c:84:9f:39:06:6b:1e:cb:
         7c:bb:77:a9:d1:f0:b3:75:04:c4:83:59:4e:2b:0e:a3:f0:47:
         5c:77:86:12:ab:87:f1:45:e6:b7:70:a2:f5:9c:1a:85:c8:32:
         54:f9:b6:1a:36:60:aa:9f:ff:1c:d1:e1:bd:b3:a7:c4:82:8a:
         7d:d0:ac:fa:fa:71:11:c0:b4:3a:51:ff:65:a2:9a:b8:10:7b:
         8e:f0:6a:e2:4c:80:d1:0e:f1:e5:6c:95:25:17:0f:82:c7:ef:
         54:09:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:03 2025 by rpki-client