Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa
File:                     65c4d923-ed78-361d-8a81-7a20105c8893.roa (raw, json)
Hash identifier:          MBrtHcM4Q9xqTnO5nFtyl8uojmjUMDv3UvGIcF83n58=
Subject key identifier:   82:DE:C8:25:CB:8D:5E:69:D6:85:73:99:2E:30:85:B0:6A:43:AE:00
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB64936F85093586288278
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:64:93:6f:85:09:35:86:28:82:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=461a9749-3de4-407c-8a90-392c38267005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:34:2b:dc:0c:8a:0b:5f:52:08:6d:e8:69:
                    c8:9c:ca:3b:2a:6c:34:40:86:df:10:06:0f:dc:13:
                    f6:1d:af:ea:14:2d:97:f0:84:ae:e1:1a:34:93:84:
                    b6:39:78:db:d1:e0:14:25:69:e2:df:bf:18:f4:21:
                    5b:e5:fa:af:0b:38:a5:e5:9d:21:c4:3a:02:19:ba:
                    9d:44:f3:b9:65:8a:cc:d8:13:28:97:34:84:d4:66:
                    e1:d1:3f:39:92:aa:ff:0a:d2:5a:fb:a1:18:11:ac:
                    59:b8:ac:8c:cd:e9:5b:db:f8:c7:85:ba:9b:74:05:
                    6f:2d:4c:2d:36:2b:8b:3d:24:85:04:81:48:31:5f:
                    d5:61:47:38:c4:a4:76:72:83:e7:9d:28:19:ac:51:
                    83:5b:5a:0c:d3:d3:6e:26:27:d2:11:47:37:b5:43:
                    b8:38:79:c9:3b:6d:7d:6d:32:5b:e6:1f:9e:25:11:
                    e3:ef:96:7e:e7:2c:d9:a0:c3:1c:a5:f6:51:7f:f4:
                    a7:48:ac:c6:26:8b:7d:3f:b8:28:6b:55:96:d7:f9:
                    c7:93:3e:27:eb:f6:c4:3d:f0:68:91:83:e6:c3:6f:
                    36:d5:e8:1e:a5:d4:0e:f9:e3:52:89:cc:1a:69:8b:
                    19:ec:0c:a6:13:3a:22:17:15:c8:3b:ad:7c:b5:bb:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:C8:25:CB:8D:5E:69:D6:85:73:99:2E:30:85:B0:6A:43:AE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:6d:ec:9d:53:ab:11:1a:0f:fd:6a:69:1d:70:dc:e5:3f:d1:
         ef:cb:67:ba:96:35:99:55:2b:75:26:12:70:f7:49:75:14:9d:
         bf:84:5c:ea:a8:dc:cf:0e:6e:93:33:00:28:f0:b9:b5:e1:4d:
         d3:e3:81:7a:e0:10:b7:b6:1b:1a:f7:8e:a0:7a:31:ef:91:0b:
         4f:3c:60:c2:b6:1e:3d:d3:9c:32:51:ad:de:37:fd:b1:53:98:
         09:f6:62:ad:40:b5:63:0f:91:6d:07:47:ee:22:75:76:3b:ad:
         88:70:29:07:ae:dc:25:52:aa:69:94:76:3c:c5:70:d4:4c:3d:
         66:4f:4f:73:0a:58:83:35:58:5f:5f:f7:d8:4c:8b:cb:f9:0e:
         39:81:68:93:13:0a:f1:1c:30:06:aa:22:e7:af:3d:fe:1f:c2:
         b7:4b:6b:ce:9e:a8:ab:72:cc:0f:25:10:f9:b2:9f:53:51:4b:
         5a:d7:71:30:70:05:c3:bb:6d:39:86:4d:3a:1e:fd:c2:bd:50:
         68:d9:21:b1:ee:a3:79:7c:be:02:ca:08:d1:bd:9b:ac:cf:a0:
         5e:b4:33:75:98:43:86:25:99:64:5e:30:7b:2a:23:8e:35:a9:
         4a:af:f9:53:0c:aa:ec:3a:8d:c9:4a:c0:50:61:ee:d2:75:c1:
         3c:aa:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:40:01 2026 by rpki-client