Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f88a3f8-e8bf-3026-abc8-c070f1450749.roa
File:                     4f88a3f8-e8bf-3026-abc8-c070f1450749.roa (raw, json)
Hash identifier:          vMdig6PekneX774xVJR1N5iy449rVEd7AlZHk0QlGls=
Subject key identifier:   B1:D9:42:5A:3F:93:C2:2C:B0:AE:6F:69:03:7E:AA:5B:BC:E7:DB:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D143DA8EA0ECBCD0B370CAA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f88a3f8-e8bf-3026-abc8-c070f1450749.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        2600:6c7f:93c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a8:ea:0e:cb:cd:0b:37:0c:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=40f53f5a-fc0c-41f3-9ab9-2ef28ccb028e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:cd:50:86:7d:4f:08:bd:b8:bf:48:86:f4:
                    db:76:e4:84:11:45:bf:b4:87:8a:69:86:1d:2a:5c:
                    2a:ad:32:19:7e:46:c3:ae:73:c3:38:d6:43:0d:71:
                    fe:0d:66:fb:21:52:ea:cc:9d:78:b3:ff:22:ee:d0:
                    2f:10:0c:5a:e9:7d:7d:9f:73:cc:53:a6:2f:19:1b:
                    03:49:77:0b:c3:a0:56:de:63:26:a3:54:55:2a:06:
                    58:71:cf:d5:fd:7e:7f:96:06:43:1f:01:c5:92:ef:
                    18:97:bc:72:0b:ba:cc:14:f0:29:e1:64:78:6d:9b:
                    bb:dd:5e:66:af:27:34:79:fe:65:39:8c:3e:cd:31:
                    28:21:f1:5e:30:74:9d:d2:00:1a:23:77:55:80:79:
                    90:59:d2:18:27:6a:90:41:18:09:f4:59:4f:b0:93:
                    56:7f:37:7d:d4:30:5a:4f:9f:25:e9:dd:60:f8:40:
                    55:ad:61:46:8f:ef:80:1c:4c:d7:f1:43:c1:6a:a1:
                    81:8c:ae:5d:ba:28:95:d3:66:dd:bf:29:ea:01:f5:
                    79:42:fa:67:6d:4b:90:24:56:06:f5:e6:bc:e6:9c:
                    2f:af:7f:51:ab:90:65:cc:6d:83:b8:fe:66:f6:a4:
                    8c:db:f8:0e:8c:7c:76:4d:e5:f9:d5:35:b4:4e:6d:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:42:5A:3F:93:C2:2C:B0:AE:6F:69:03:7E:AA:5B:BC:E7:DB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f88a3f8-e8bf-3026-abc8-c070f1450749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:93c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:69:5c:1e:50:79:57:d8:18:34:6b:2e:9d:ad:53:cd:7a:38:
         16:06:fb:ef:19:a3:2a:6e:a8:1c:a0:1c:d7:87:e4:e2:c5:74:
         67:7a:84:8a:ac:55:d8:db:cc:5b:a9:25:64:3f:b1:3f:1b:52:
         78:30:55:a0:1d:85:a7:ad:7b:81:97:f2:02:78:6c:96:77:0d:
         5e:e0:ef:21:cd:04:e8:d6:ff:17:34:cb:59:52:5f:9c:a8:7c:
         1c:dc:a4:e0:bb:d8:77:81:71:1d:8e:9a:77:dc:8f:ba:01:44:
         9a:8e:79:d9:2c:7f:43:d5:ca:10:53:e7:e1:56:52:0e:31:79:
         1d:2f:f9:ef:e1:d2:04:b1:18:99:46:d8:46:b0:73:9e:71:e2:
         ad:f1:0a:e6:4c:8a:f3:f8:f8:ab:6e:1b:6f:a5:a3:94:a5:25:
         a6:6e:a5:c6:fb:37:c6:33:93:1d:11:48:5b:f4:93:70:cb:c4:
         0a:36:9a:03:5f:29:13:71:e9:7b:a5:e3:47:c6:07:13:8a:d7:
         fc:fe:d4:c2:4b:bf:a4:88:50:9c:ac:e2:ea:c2:51:20:d8:f6:
         fa:d7:36:6b:94:e1:76:24:1e:22:45:5e:c9:d3:cd:47:32:25:
         73:ec:dc:00:fc:3d:73:ac:d8:2a:c8:c1:4a:e0:a1:05:6a:2f:
         a5:5c:f0:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPajqDsvNCzcMqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
NDBmNTNmNWEtZmMwYy00MWYzLTlhYjktMmVmMjhjY2IwMjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbNUIZ9Twi9uL9IhvTbduSEEUW/tIeKaYYd
KlwqrTIZfkbDrnPDONZDDXH+DWb7IVLqzJ14s/8i7tAvEAxa6X19n3PMU6YvGRsD
SXcLw6BW3mMmo1RVKgZYcc/V/X5/lgZDHwHFku8Yl7xyC7rMFPAp4WR4bZu73V5m
ryc0ef5lOYw+zTEoIfFeMHSd0gAaI3dVgHmQWdIYJ2qQQRgJ9FlPsJNWfzd91DBa
T58l6d1g+EBVrWFGj++AHEzX8UPBaqGBjK5duiiV02bdvynqAfV5QvpnbUuQJFYG
9ea85pwvr39Rq5BlzG2DuP5m9qSM2/gOjHx2TeX51TW0Tm1EbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHZQlo/k8IssK5vaQN+qlu859uaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGY4OGEzZjgtZThiZi0z
MDI2LWFiYzgtYzA3MGYxNDUwNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgBsf5PA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANhpXB5QeVfYGDRrLp2tU816OBYG++8ZoypuqBygHNeH5OLFdGd6
hIqsVdjbzFupJWQ/sT8bUngwVaAdhaete4GX8gJ4bJZ3DV7g7yHNBOjW/xc0y1lS
X5yofBzcpOC72HeBcR2Omnfcj7oBRJqOedksf0PVyhBT5+FWUg4xeR0v+e/h0gSx
GJlG2Eawc55x4q3xCuZMivP4+KtuG2+lo5SlJaZupcb7N8Yzkx0RSFv0k3DLxAo2
mgNfKRNx6Xul40fGBxOK1/z+1MJLv6SIUJys4urCUSDY9vrXNmuU4XYkHiJFXsnT
zUcyJXPs3AD8PXOs2CrIwUrgoQVqL6Vc8DE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:06 2026 by rpki-client