Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/428086af-75c5-3bf6-811f-fef9d9ec4c5e.roa
File:                     428086af-75c5-3bf6-811f-fef9d9ec4c5e.roa (raw, json)
Hash identifier:          S4WQpNyfR6GXN8yZoPqY6nDcA5DE5w303uMzJBfddsE=
Subject key identifier:   B3:E8:A3:B2:B5:03:18:75:73:2B:DF:5D:B9:34:59:77:28:29:15:C6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E577F42C461A235C939E83940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/428086af-75c5-3bf6-811f-fef9d9ec4c5e.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:42:c4:61:a2:35:c9:39:e8:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=41b74775-d413-47db-90ed-55609988251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:fd:34:be:22:89:17:e7:e9:bd:94:f0:60:
                    53:fd:eb:ad:3f:e1:c0:c5:35:c3:94:86:dd:d2:9a:
                    9b:be:f8:63:82:a3:77:0b:8b:da:35:34:60:6d:1e:
                    57:15:ea:eb:d7:89:c6:0a:e2:fe:48:b0:9f:59:ac:
                    6b:df:07:d2:fd:6c:d7:37:5d:c2:db:0d:20:f5:a1:
                    13:f6:61:33:9b:7c:46:7b:97:14:62:51:e1:6e:ea:
                    ed:3e:d6:ea:21:e5:77:c5:b9:67:b1:d2:15:44:73:
                    7d:5f:4c:78:dd:c1:12:5e:9b:52:6d:8f:48:48:fb:
                    e1:df:96:0b:d5:db:74:ab:16:d1:3c:f7:d0:48:3d:
                    78:4e:f3:41:c6:38:83:b3:d5:f8:ef:3c:e4:eb:32:
                    a0:96:79:71:60:de:49:3a:c9:4c:b7:af:93:24:bf:
                    77:3d:2c:d2:29:6c:cc:ed:07:19:5f:62:a8:bb:5f:
                    c8:3f:c8:aa:93:9f:da:f8:ae:9f:85:f3:bb:7c:94:
                    9b:37:ef:73:c7:ab:b0:3d:f1:9f:68:22:3a:a8:77:
                    54:48:9e:7e:f3:0d:46:40:5f:cd:60:a5:4f:0b:90:
                    ca:36:6d:8b:f1:3e:aa:d8:ad:2b:d8:19:7d:04:57:
                    c8:b0:02:d3:c0:23:78:bf:fb:5f:93:52:da:b1:0a:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:A3:B2:B5:03:18:75:73:2B:DF:5D:B9:34:59:77:28:29:15:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/428086af-75c5-3bf6-811f-fef9d9ec4c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:9a:7a:03:ab:38:7e:80:1a:f8:dd:8a:61:6d:f3:c4:ea:
         e9:b8:73:5b:04:84:2b:e9:ff:26:4f:8a:b3:05:82:4a:b5:6c:
         75:2d:60:9e:0d:1c:3d:01:7b:b7:60:3c:3a:bc:4f:ba:68:bb:
         3d:0d:f0:3c:78:68:13:f8:a4:ec:86:96:95:f7:80:7d:55:df:
         ef:bb:b8:93:75:d5:a5:04:d9:d9:92:d3:cc:fc:fb:47:de:55:
         d2:8e:72:f4:5a:43:8c:1f:41:dc:ca:80:0d:c1:ff:65:61:4e:
         1c:51:70:3d:97:f0:92:8c:e1:03:4b:db:c8:50:87:61:e6:de:
         d5:3a:76:e7:f1:72:ba:2a:bf:23:48:cb:1f:c0:fb:ea:52:73:
         2b:ca:19:6d:89:f0:85:14:36:b8:94:9d:29:0c:93:62:8c:28:
         9c:78:e7:82:0e:4e:e9:63:81:0b:d0:29:e3:3e:ca:d7:42:39:
         8e:93:b0:9f:87:4a:29:7b:9f:2f:0a:c0:90:d7:52:7e:68:15:
         6c:19:ac:2d:11:81:b3:ed:8a:05:6d:b5:98:45:7b:67:86:79:
         49:57:dd:f2:40:c0:8f:8c:54:af:62:cf:45:6c:e1:35:a5:a7:
         d4:62:44:db:68:4e:56:5b:0d:80:29:05:a2:57:20:9a:0b:79:
         00:20:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:09 2026 by rpki-client