Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b592756-fc64-30f5-b9d4-810de808a041.roa
File:                     4b592756-fc64-30f5-b9d4-810de808a041.roa (raw, json)
Hash identifier:          m1BFUzWVVrU8ZcNBa5xJJ0IMicMUYPu/Qi8yQOBcjf0=
Subject key identifier:   DE:57:CA:4A:0D:B3:03:1F:26:85:A9:FD:2C:48:56:54:D7:16:92:D0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D76C4CCD003CA4DE97940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b592756-fc64-30f5-b9d4-810de808a041.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c8a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:76:c4:cc:d0:03:ca:4d:e9:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7df7f1af-5982-4f03-b0cf-c55d09118ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:5a:80:0b:c8:b3:00:07:c0:61:5f:c2:f6:
                    78:23:47:75:fb:2e:30:84:2d:38:58:b8:08:fc:a2:
                    e3:3c:76:a5:ab:c4:cc:51:09:c9:36:63:bb:3f:28:
                    35:dc:fc:cb:6a:9c:f5:94:2f:ce:1c:97:14:c5:d2:
                    84:76:20:01:20:29:57:db:82:7e:bc:0c:48:d6:94:
                    63:20:ea:19:5b:87:45:50:4c:6f:c1:9a:92:b8:43:
                    9c:32:82:71:04:ec:e3:0f:c5:01:bd:bd:bf:a6:5c:
                    5a:5a:e1:55:81:71:82:60:8c:da:23:47:87:46:90:
                    67:4f:01:84:0b:1e:0a:66:b2:5c:01:2c:58:9d:6a:
                    27:b9:3b:f1:ac:08:3e:6b:c7:aa:91:73:2d:13:59:
                    f1:38:aa:ff:e5:63:ec:37:76:65:57:a7:14:57:56:
                    e7:ea:bf:9a:78:53:d3:27:d4:29:7f:28:9c:4f:3e:
                    78:5b:68:88:1b:0c:ce:a7:1f:42:df:e4:b2:05:68:
                    d5:f3:96:e3:d6:02:fe:05:5b:ef:c0:c2:56:cd:2c:
                    34:1b:a0:d6:28:c6:34:85:2e:ba:f9:c0:97:f7:86:
                    72:82:25:b5:f2:84:2f:22:fd:d8:40:a2:e7:65:e6:
                    6a:be:21:56:6f:9d:af:f2:bc:53:4c:9f:14:38:69:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:CA:4A:0D:B3:03:1F:26:85:A9:FD:2C:48:56:54:D7:16:92:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b592756-fc64-30f5-b9d4-810de808a041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c8a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:7a:8e:36:a5:20:be:9f:f2:4f:4f:12:57:50:18:1c:ad:
         c6:12:3b:b9:ad:81:66:cb:0b:a2:81:2c:62:2b:54:3e:d6:25:
         7b:45:1f:a4:f1:eb:81:6f:13:cc:ef:53:9d:48:a3:10:bb:7a:
         2f:6b:4e:f0:a1:85:85:0b:fa:a6:75:e3:9b:13:2d:1c:2c:a3:
         ce:fb:a5:94:d2:35:96:5b:b2:30:ae:c3:21:82:b7:f6:c1:e2:
         a3:77:01:25:94:00:b5:a6:f5:68:45:cb:47:b4:9b:35:56:b9:
         47:8e:dc:e4:e4:65:f4:7d:3a:57:c0:60:0b:64:5a:23:f0:45:
         a6:57:a6:e5:39:21:24:56:fb:d2:dc:6b:6a:26:02:08:78:d6:
         b8:52:8e:fc:90:10:80:ed:7a:b4:02:48:f7:58:15:83:52:ad:
         61:d7:0d:a3:4a:e1:ff:5c:ab:30:fb:e4:ea:ff:36:81:0c:17:
         bc:02:aa:fa:63:c8:27:a5:d4:3e:a1:3c:eb:63:01:b7:5e:b5:
         1e:81:31:50:8b:82:82:59:24:2d:4f:2e:03:26:4a:5a:01:03:
         72:4b:8f:98:54:54:62:29:5e:df:09:45:54:24:84:7e:7d:11:
         8c:d2:e9:83:5f:30:09:0a:46:a2:6c:fa:9f:50:d1:49:7d:e1:
         7d:d4:5e:97
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHXbEzNADyk3peUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
N2RmN2YxYWYtNTk4Mi00ZjAzLWIwY2YtYzU1ZDA5MTE4YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7tagAvIswAHwGFfwvZ4I0d1+y4whC04WLgI
/KLjPHalq8TMUQnJNmO7Pyg13PzLapz1lC/OHJcUxdKEdiABIClX24J+vAxI1pRj
IOoZW4dFUExvwZqSuEOcMoJxBOzjD8UBvb2/plxaWuFVgXGCYIzaI0eHRpBnTwGE
Cx4KZrJcASxYnWonuTvxrAg+a8eqkXMtE1nxOKr/5WPsN3ZlV6cUV1bn6r+aeFPT
J9QpfyicTz54W2iIGwzOpx9C3+SyBWjV85bj1gL+BVvvwMJWzSw0G6DWKMY0hS66
+cCX94ZygiW18oQvIv3YQKLnZeZqviFWb52v8rxTTJ8UOGnF3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN5XykoNswMfJoWp/SxIVlTXFpLQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGI1OTI3NTYtZmM2NC0z
MGY1LWI5ZDQtODEwZGU4MDhhMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsijBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCc9nqONqUgvp/yT08SV1AYHK3GEju5rYFmywuigSxiK1Q+1iV7RR+k
8euBbxPM71OdSKMQu3ova07woYWFC/qmdeObEy0cLKPO+6WU0jWWW7IwrsMhgrf2
weKjdwEllAC1pvVoRctHtJs1VrlHjtzk5GX0fTpXwGALZFoj8EWmV6blOSEkVvvS
3GtqJgIIeNa4Uo78kBCA7Xq0Akj3WBWDUq1h1w2jSuH/XKsw++Tq/zaBDBe8Aqr6
Y8gnpdQ+oTzrYwG3XrUegTFQi4KCWSQtTy4DJkpaAQNyS4+YVFRiKV7fCUVUJIR+
fRGM0umDXzAJCkaibPqfUNFJfeF91F6X
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:22 2025 by rpki-client