Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6495d3cb-81a9-39d7-9b90-9d3082bfab07.roa
File:                     6495d3cb-81a9-39d7-9b90-9d3082bfab07.roa (raw, json)
Hash identifier:          Ya96YkLCK+uyhrEGTa28iqMwcTDyHKjfuZCvF6kjBOA=
Subject key identifier:   43:11:BC:D0:9C:01:B2:27:BC:E3:BE:C0:2E:B7:05:31:E5:BD:5C:AC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E0EF8DCE43A3503A83400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6495d3cb-81a9-39d7-9b90-9d3082bfab07.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c0a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:0e:f8:dc:e4:3a:35:03:a8:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6877655d-5042-4fe5-b981-7067ddc64976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:f0:89:e4:03:3d:c4:7b:70:e5:bd:a3:d3:
                    7e:67:34:aa:b8:5b:e6:fd:7c:15:a5:11:de:8f:f3:
                    73:0f:ba:12:20:06:3c:d6:c0:fd:9e:73:89:1a:10:
                    c5:e9:00:62:f1:b2:e9:07:3d:ee:0f:18:a4:97:e1:
                    37:08:9f:eb:f9:1a:13:0a:96:ef:a7:be:5a:42:e7:
                    38:d4:8f:d0:d0:7a:8f:7c:f3:2d:77:97:08:90:06:
                    c9:43:a7:e5:d1:71:53:fa:79:2e:f6:12:2b:52:f3:
                    c1:dd:82:57:d5:86:c9:d2:f9:72:bf:d9:bc:df:cf:
                    b5:5e:11:bc:2b:43:5f:47:7f:07:7b:19:c8:9c:ce:
                    ad:44:8b:58:57:00:38:1f:3c:89:c3:e4:c3:76:97:
                    21:11:41:31:39:88:05:28:90:6e:45:03:c2:05:c7:
                    4d:50:38:50:97:c5:f3:38:d0:98:de:fe:1f:d6:5a:
                    fc:38:3d:cc:3d:ee:b8:40:50:2e:12:67:19:e5:3a:
                    68:9b:ee:7c:ba:41:83:59:28:b2:ae:8e:81:6a:f3:
                    4a:28:4b:ef:92:e5:f0:23:7f:77:8b:a0:1f:60:8f:
                    74:3a:02:99:82:57:0e:fe:9c:d2:21:ea:f4:98:a6:
                    6b:63:2d:43:73:c1:c4:d1:12:5f:cb:40:0c:6c:56:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:BC:D0:9C:01:B2:27:BC:E3:BE:C0:2E:B7:05:31:E5:BD:5C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6495d3cb-81a9-39d7-9b90-9d3082bfab07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:d1:eb:f9:9b:c4:b2:63:b9:df:5f:35:3a:4f:23:9f:40:fa:
         10:6b:67:87:7d:c2:ea:06:a8:12:19:07:40:1e:02:75:12:b4:
         7e:0b:93:e0:60:53:1d:73:1c:f1:25:a5:ee:39:93:ea:f3:ef:
         70:7c:f2:e1:28:bf:f6:0b:f2:61:80:a5:4d:99:17:a6:97:df:
         6d:9e:b5:1b:4c:b0:e2:fd:8a:96:94:fb:13:c0:d6:de:99:72:
         a3:36:15:2c:3a:49:6e:08:20:3b:de:b7:56:6c:7b:f5:22:89:
         b1:03:18:33:fc:a2:25:2e:1a:62:b1:b0:f7:83:27:03:c4:33:
         59:41:7f:22:dc:27:9d:45:ec:46:ca:95:a0:49:23:61:a4:f4:
         04:24:17:46:68:46:13:f8:bc:38:e4:b0:f1:e2:b4:6c:85:41:
         45:29:87:7c:99:3c:c0:a7:65:61:7a:e6:d1:b9:d6:72:7c:72:
         9b:9b:a8:a6:a8:31:77:1f:f5:13:5f:3d:be:36:a6:a7:19:2e:
         e8:3d:c7:95:e2:a4:c2:6d:f2:1e:c4:2c:c4:4b:c0:b9:23:aa:
         ba:b8:31:64:ef:4e:1d:7a:b2:63:5d:10:03:93:5a:b5:dc:80:
         61:06:55:e1:e0:20:d7:46:67:4f:6a:1a:a9:35:b2:d0:59:07:
         f1:6b:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:24 2025 by rpki-client