Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa
File:                     65c4d923-ed78-361d-8a81-7a20105c8893.roa (raw, json)
Hash identifier:          ZiiMHmBcjysB9d5w4XL4zrxcgPMGbGHrjSx8cfN0uC8=
Subject key identifier:   37:53:89:8D:51:99:FD:1A:CE:12:AD:D4:6B:9D:AF:A7:90:94:E2:61
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE5E4170CB36761464520
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e5:e4:17:0c:b3:67:61:46:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8664a72e-9f40-4f18-a3cb-8ebd8fd5a35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:cd:cc:ba:8d:81:91:5a:04:ab:80:37:75:
                    dd:f5:63:0b:27:c3:3e:58:1a:ed:8d:2e:e0:7b:63:
                    f4:a8:a0:d4:42:bf:1a:bc:30:87:6b:d0:d6:58:56:
                    cd:cc:fa:f4:07:25:62:2d:f1:d9:b8:ec:92:03:a9:
                    01:f2:66:91:95:1c:5a:73:0d:e5:d5:fa:5e:95:9b:
                    ee:65:c4:1d:a9:e4:5f:24:78:44:fb:af:08:8b:6f:
                    01:87:58:71:a7:0f:5a:cc:06:43:d3:f0:d0:ea:f1:
                    5f:9a:d5:9d:ff:f6:b9:34:66:72:65:e9:93:45:c3:
                    ab:48:99:31:1c:bf:56:05:02:8c:84:72:d9:d7:6e:
                    9e:5d:63:3a:aa:a1:b9:83:97:c2:35:36:8f:96:94:
                    a2:c9:8a:1e:8e:3c:fc:d1:18:29:8e:47:d1:da:e6:
                    31:88:0f:3a:7d:50:17:c1:57:74:ee:9d:7e:04:d9:
                    ff:98:db:7f:2c:5d:8e:68:d2:39:e6:f9:c1:48:ab:
                    6d:14:9e:fd:81:db:56:7a:19:03:d9:32:85:e8:41:
                    a5:03:1a:5a:28:84:c5:7a:e9:5b:fb:51:a6:70:f7:
                    86:97:4c:c4:62:28:c5:62:48:a9:78:81:34:fe:f8:
                    35:7c:e9:ba:7c:75:5a:49:9b:f6:b6:ed:7e:4e:0d:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:89:8D:51:99:FD:1A:CE:12:AD:D4:6B:9D:AF:A7:90:94:E2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/65c4d923-ed78-361d-8a81-7a20105c8893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:05:ad:7a:71:20:d8:6a:17:b6:c2:cb:48:54:a3:cd:c0:
         93:46:72:83:f0:b6:de:70:df:e2:ef:0b:a7:a2:e3:7c:88:54:
         5a:6a:b5:06:03:27:13:d9:45:08:73:05:ec:b9:4c:3f:35:a0:
         6f:56:fe:ed:2a:cb:b7:1b:de:b4:84:23:34:99:db:f4:f4:9e:
         1d:fa:a7:da:31:1c:db:75:fc:8b:7e:01:50:84:67:c8:40:d3:
         99:76:4d:fd:a4:7b:be:db:a6:56:47:98:87:46:27:55:43:03:
         d3:43:f3:9d:84:7b:79:d8:e2:d9:e8:fe:fc:31:c0:70:5b:78:
         33:30:05:0a:66:22:1e:e0:e0:2e:a8:f9:5d:c3:3f:53:23:a1:
         d0:6b:82:8b:29:5d:47:62:06:d7:6b:60:a3:8e:e8:19:df:b7:
         a1:d5:df:9e:cc:0c:72:dd:0c:27:3d:65:da:9e:72:ac:c6:a9:
         74:5d:be:a6:f7:ea:69:80:66:da:73:5c:1b:b9:9d:e9:74:d6:
         e4:6a:90:56:25:9b:5b:8a:5e:02:cf:43:a9:01:4d:cb:87:6e:
         c6:0b:2b:9d:32:63:0a:36:c8:8a:88:0a:75:40:df:f2:c9:15:
         1c:7c:5e:6f:8f:f7:d1:ae:2f:74:74:39:9d:75:d7:41:17:4a:
         68:c5:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:35 2025 by rpki-client