Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/523d336d-8e1f-3f5e-b07b-df31a47e8892.roa
File:                     523d336d-8e1f-3f5e-b07b-df31a47e8892.roa (raw, json)
Hash identifier:          dY1gZQAt87y+3CJ2Zi8TN7R87HH6S3JVGkQS0fF0+BQ=
Subject key identifier:   0B:90:51:BC:06:42:58:BD:65:7C:9B:CA:8F:F1:C1:FA:D7:D5:C5:E1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AD5A881F4B7A575365A0D5D30
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/523d336d-8e1f-3f5e-b07b-df31a47e8892.roa
Signing time:             Tue 12 Aug 2025 18:27:28 +0000
ROA not before:           Tue 12 Aug 2025 18:27:28 +0000
ROA not after:            Mon 10 Nov 2025 19:27:28 +0000
asID:                     20115
IP address blocks:        2600:6c2b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:a8:81:f4:b7:a5:75:36:5a:0d:5d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 12 18:27:28 2025 GMT
            Not After : Nov 10 19:27:28 2025 GMT
        Subject: CN=14b03c66-d73d-4055-b4f8-a8079240aec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:f2:97:15:f1:32:5e:32:31:46:49:9d:a6:
                    f7:2f:2c:09:52:f9:ea:23:08:bf:00:80:65:a7:45:
                    aa:db:37:df:ff:ab:cc:f1:f1:dc:74:91:95:ed:83:
                    e8:05:5b:6b:ec:34:8b:59:02:9d:c9:97:cf:e6:94:
                    47:9f:de:48:70:f8:1d:8b:28:77:49:31:69:ba:ea:
                    db:f7:e4:5c:f6:f3:29:80:ff:de:51:15:f3:b1:99:
                    bc:c7:fd:4c:18:8c:55:79:47:13:ef:79:3c:1b:7b:
                    c3:8b:e5:6c:b0:92:10:49:d6:fb:95:18:6a:95:a8:
                    2c:0b:2c:31:32:84:85:2f:17:50:e0:ea:42:fd:64:
                    99:71:61:74:8f:e2:66:e1:c3:4c:77:65:a5:90:d2:
                    6a:59:5b:6d:03:25:b6:ce:30:d6:05:20:75:ac:fd:
                    59:ad:eb:6d:26:6d:11:93:12:e4:21:c5:9d:38:7e:
                    e9:2d:03:43:09:ab:40:3b:dd:11:ed:6a:de:a8:f3:
                    e4:73:7c:54:d2:39:80:f8:72:ae:89:26:16:20:a5:
                    66:72:f2:9e:1c:e1:a9:30:51:ee:c0:d9:df:d0:2d:
                    16:48:a8:77:20:79:36:15:fc:92:49:30:aa:a4:5a:
                    1c:f3:72:a5:71:59:87:6a:ed:42:60:ea:94:2b:fa:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:51:BC:06:42:58:BD:65:7C:9B:CA:8F:F1:C1:FA:D7:D5:C5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/523d336d-8e1f-3f5e-b07b-df31a47e8892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c2b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:c9:ac:3d:3c:41:b0:93:79:86:04:d5:2e:79:8e:4c:7f:
         4e:d8:f3:bc:0d:41:ac:2d:fd:31:84:4d:81:f5:79:d0:5c:4a:
         f9:3b:79:65:98:c0:bd:66:31:66:be:1e:49:e2:84:b9:f4:bf:
         d0:bc:d7:29:7e:8c:df:8b:63:c7:54:a2:7b:02:e5:a4:ad:88:
         f1:d7:9b:14:b3:09:a7:3d:bc:8d:d8:f5:8a:87:5a:0f:18:01:
         0b:a0:80:06:2b:e1:fc:b8:5c:15:22:8a:8d:13:8a:81:d3:a0:
         db:d8:39:f8:79:6c:a8:41:cd:18:58:2a:04:28:1b:30:41:37:
         98:44:64:f8:cc:9d:dc:ae:6b:2a:b8:a8:c4:81:8b:fc:0c:99:
         9d:80:46:86:b7:63:99:3e:39:94:b8:88:1c:eb:d0:6f:c1:9b:
         cc:49:f0:9e:a1:89:af:cb:cd:6b:6c:37:6b:3f:b5:ef:d7:90:
         34:2d:e0:e6:a2:36:67:d0:1f:12:f8:bf:41:26:8f:cf:3b:28:
         e5:6c:28:ee:f9:a4:39:b1:f5:a9:82:ee:ff:f7:4a:f4:8d:54:
         9d:d1:d9:d6:10:e3:99:03:c9:60:7c:38:ee:e1:5e:71:f2:95:
         31:8d:4f:59:80:50:76:20:40:6a:00:57:ab:e2:cb:16:d6:ca:
         86:39:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:56 2025 by rpki-client