Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df6b7ef-8787-35df-963f-304e198b6024.roa
File:                     3df6b7ef-8787-35df-963f-304e198b6024.roa (raw, json)
Hash identifier:          H0fziMaaARJS4wrsPuvrgIOwhOSmXj9gkvs2tkLHVmI=
Subject key identifier:   B2:01:1B:94:49:A4:D7:89:CD:E8:56:7D:6F:AB:21:91:A9:4A:21:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F81ACBB346AFB3DF8A30
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df6b7ef-8787-35df-963f-304e198b6024.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        2600:6c41::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f8:1a:cb:b3:46:af:b3:df:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=a5aa080e-62b7-4195-b872-4d3be34d141f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:5d:e5:6e:b7:9c:2d:74:93:40:6d:91:7c:
                    b8:5e:0c:8a:a6:3a:56:54:92:5d:b2:39:6f:cf:0c:
                    04:5d:eb:2c:c1:5f:ec:d9:4f:7a:42:9b:ef:c7:d9:
                    34:a5:0c:04:d5:10:a4:db:6b:34:45:51:35:9f:92:
                    cd:1c:3a:aa:c5:b5:df:dc:c3:40:8d:fe:1c:e4:9c:
                    a1:5c:0f:f3:ef:f1:5a:4d:20:b7:60:65:5e:6e:ba:
                    e8:15:39:c7:4a:27:12:62:56:6e:57:a4:88:2e:1d:
                    08:c0:c7:10:c7:31:c2:4a:de:17:10:1e:e5:f6:58:
                    0a:b4:fc:1c:8e:c2:28:9d:60:f2:15:ce:20:ad:b4:
                    c6:fc:ee:1a:4e:5b:af:21:13:74:64:37:7b:38:43:
                    65:aa:97:05:8e:77:5d:1d:b1:1c:43:39:c1:25:03:
                    29:19:ba:f7:60:e1:78:75:ac:98:c6:28:23:ce:68:
                    b0:cb:f5:9f:05:3e:a6:4a:78:0b:70:f6:61:91:30:
                    49:1b:14:0a:14:72:b5:f4:5d:65:00:9c:ca:14:c2:
                    20:cf:36:7c:cd:fe:a5:a0:52:ef:c9:99:49:39:47:
                    8d:77:93:7d:9b:aa:30:68:a9:01:8e:6d:7f:ff:d3:
                    da:73:b5:9c:0f:82:44:10:07:9e:86:93:2e:65:77:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:1B:94:49:A4:D7:89:CD:E8:56:7D:6F:AB:21:91:A9:4A:21:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3df6b7ef-8787-35df-963f-304e198b6024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c41::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:10:45:4c:7d:2a:53:cd:78:d4:ec:01:2c:e4:42:b8:72:12:
         a1:21:d8:94:5c:9f:8c:14:df:86:33:c3:44:51:08:0b:fa:c9:
         a4:3b:25:6b:c5:5f:c0:37:95:60:d9:90:f1:1f:fe:22:ca:f3:
         2d:66:63:da:76:31:e3:4b:01:e2:7b:0f:9c:d3:d6:56:76:a6:
         12:3b:d6:e6:7b:4b:e6:93:c3:c7:3e:36:d1:b8:b2:36:24:ee:
         62:32:6b:5f:52:c1:e2:96:eb:71:be:d1:b2:ea:37:8f:73:ce:
         24:ba:4b:ea:d3:53:5d:5b:4b:37:60:7e:af:5c:ba:51:d8:7d:
         e0:82:f7:f2:ce:6e:ce:f5:49:ba:81:84:af:cf:26:3d:66:e4:
         44:57:e1:dd:6a:94:c7:91:49:29:0d:74:11:26:8d:53:8f:91:
         df:e7:99:19:fd:4f:d4:cd:82:20:4b:be:69:5d:f9:dc:0f:d7:
         83:e0:f4:d8:04:44:5b:11:b4:cc:e8:b0:6f:0a:b0:77:16:01:
         f0:39:6c:95:49:d6:36:39:0a:e9:6b:99:81:41:8a:28:9d:f2:
         1e:d2:cd:7c:d4:00:7e:6a:49:80:8b:2e:93:65:ce:bc:48:d0:
         77:36:5c:aa:70:e1:d3:a8:fd:6e:47:a2:7c:1b:63:f3:97:cd:
         ef:db:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:04:14 2026 by rpki-client