Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6533700c-f541-3c7f-99f6-52f8ff0b51fd.roa
File:                     6533700c-f541-3c7f-99f6-52f8ff0b51fd.roa (raw, json)
Hash identifier:          Y4tBEUAaDboanx52/GpCQiabsZw+KV3wPhx/Cbo7vtc=
Subject key identifier:   00:2A:D8:EA:33:A3:A7:17:12:09:08:94:2D:6B:71:48:19:EE:84:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D3D0CC510E9EDECC2E780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6533700c-f541-3c7f-99f6-52f8ff0b51fd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2602:10d:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:3d:0c:c5:10:e9:ed:ec:c2:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ac0ceddc-a462-4e16-a460-71e45376f401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:7f:33:d5:55:92:fe:73:20:21:51:b1:2f:
                    87:0e:22:0d:f5:e8:9d:d9:a7:42:6d:a7:4f:74:25:
                    1c:04:54:e3:1d:29:1a:f2:f9:34:ae:80:2d:c2:fb:
                    93:45:5e:57:33:92:70:da:64:9f:eb:e3:b5:89:e5:
                    96:68:3a:ab:d4:e7:54:85:9e:57:7c:b2:ea:90:be:
                    48:f8:f0:9d:4a:2b:d0:2a:3c:c6:83:69:71:32:4e:
                    62:a9:7c:01:72:b4:ed:31:f5:56:d2:a0:53:4c:34:
                    d1:74:fe:c3:86:e3:25:af:cf:84:42:09:cc:bb:0b:
                    63:54:87:0a:1e:63:bf:4e:a0:b4:af:cf:c6:ca:8c:
                    04:34:f8:00:fb:c4:fc:27:c4:4a:5c:2f:d1:ee:21:
                    74:2c:ab:17:05:d6:e8:80:fb:9d:2b:c5:b8:38:28:
                    f5:1b:42:5a:6d:6d:38:8e:5d:56:08:de:b4:3f:1a:
                    20:d1:47:ea:2a:7f:c1:47:13:03:ed:2f:b4:09:77:
                    73:9e:b2:86:a1:aa:43:43:5e:e8:41:b5:3b:14:ee:
                    b6:c3:a4:07:f0:c4:ec:4d:37:7b:4f:7b:a7:29:4f:
                    0e:7d:41:3a:09:79:9b:f8:d4:d9:ad:bf:23:aa:c0:
                    d5:ec:08:45:61:ce:5e:72:ff:e1:75:60:d6:33:a1:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:D8:EA:33:A3:A7:17:12:09:08:94:2D:6B:71:48:19:EE:84:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6533700c-f541-3c7f-99f6-52f8ff0b51fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10d:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:06:b2:05:2e:24:cf:26:66:e3:61:07:ed:ea:7c:96:44:
         7f:95:4c:73:b0:22:c1:43:d4:07:e6:f1:3c:51:81:e3:54:66:
         f9:99:59:9c:15:50:4f:68:fe:ae:42:05:fc:5d:03:c2:17:e0:
         d5:a4:be:e7:ac:39:3d:a4:f5:ec:0e:ba:91:ce:b0:e8:ec:99:
         e1:8d:a3:b8:a3:3a:a2:78:21:b0:32:49:96:4a:b1:ee:79:3d:
         bb:c5:80:aa:9b:f5:8b:b9:7f:af:75:26:a9:ed:b4:b1:27:8a:
         fd:a3:13:b9:d0:7a:6f:5f:77:de:05:f2:02:ec:62:25:d4:fb:
         00:27:7a:f2:c2:aa:d4:2a:f4:3d:f3:be:e9:fb:86:5f:9f:3e:
         7b:30:79:8e:d8:25:80:20:32:27:9d:eb:18:f5:36:7e:6f:ef:
         00:cb:e6:52:4c:31:8d:b5:6d:7a:da:05:72:8d:ff:0c:22:4e:
         78:f0:0a:94:25:4d:e2:eb:ae:86:eb:f2:95:0e:3e:fd:cd:2c:
         17:8b:ab:7b:bd:70:a7:87:95:e2:06:e3:d3:3a:96:d3:10:bc:
         e0:a6:ba:00:b5:97:e8:05:15:25:93:83:8d:ec:f2:7b:f7:93:
         b6:62:2c:d6:e0:09:eb:fe:7c:2b:12:f0:16:ae:1c:79:42:47:
         cd:6e:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:52 2025 by rpki-client