Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/661ce62d-38a9-3487-8fe2-5d89e93fa5c2.roa
File:                     661ce62d-38a9-3487-8fe2-5d89e93fa5c2.roa (raw, json)
Hash identifier:          JmSwmBdkPgZTTZeKlNggIW4tXxH5bLRn2T0AsgfoqqQ=
Subject key identifier:   60:CF:64:5E:42:A6:86:88:AB:7A:E3:21:1C:CE:D1:10:00:00:2F:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CABF7A8AECBC1E341198C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/661ce62d-38a9-3487-8fe2-5d89e93fa5c2.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2602:10e:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:bf:7a:8a:ec:bc:1e:34:11:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=54f2f00f-c31f-4681-9745-6637e7543e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f6:93:50:bf:2a:6f:12:5f:72:b8:ce:85:7b:
                    f4:92:4b:86:c1:4e:f5:bf:ba:37:cc:02:09:b0:92:
                    bc:ac:bc:85:2c:45:0f:b5:8d:c8:e2:22:29:fa:a7:
                    73:47:33:81:dc:8d:3a:a6:c1:66:bf:c9:74:2d:3d:
                    43:99:72:0a:f7:1d:ef:75:e7:82:6e:ab:c3:44:0f:
                    e6:ca:08:6e:fa:0a:6c:c1:f5:87:da:f4:c8:4d:0a:
                    d1:7e:2c:cc:74:05:ae:61:11:fd:01:83:dc:80:7a:
                    fb:b3:d0:bf:12:fc:c4:0a:99:a5:e4:ef:64:d1:2e:
                    c7:53:6d:a8:eb:7c:04:26:3a:62:57:70:9f:ca:9b:
                    94:27:ee:32:7f:95:33:03:87:2d:d8:29:3f:a6:ae:
                    a3:43:08:a4:ca:fe:96:fc:1f:f0:9a:ce:bc:21:02:
                    84:0e:6d:55:3b:90:b7:ad:d7:2a:3a:c5:d0:40:30:
                    ce:d5:e6:60:fa:4b:a2:f0:fa:cd:50:05:e3:5c:dc:
                    86:94:5e:6d:49:23:3b:a4:1e:ab:d7:4b:1c:a6:b1:
                    10:d2:b0:b1:1e:d5:33:3a:06:20:af:89:67:ad:06:
                    2a:fb:c8:fb:94:dd:c0:cd:1f:79:b7:3e:53:2c:7c:
                    6f:24:e1:ff:92:53:67:af:c5:4c:cd:28:8a:4e:4f:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:64:5E:42:A6:86:88:AB:7A:E3:21:1C:CE:D1:10:00:00:2F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/661ce62d-38a9-3487-8fe2-5d89e93fa5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:10e:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7f:70:fc:2c:2d:8d:8c:0d:a3:b7:8f:73:ce:42:0b:1d:7c:
         60:f9:de:6d:d0:41:c1:16:2d:ef:ba:e8:50:e6:8b:c0:7c:e7:
         03:e9:98:03:7a:df:21:20:da:8e:5b:68:74:26:d7:cd:92:59:
         5b:1f:be:aa:87:0e:30:22:e2:41:14:48:00:4d:a2:42:a9:c6:
         17:57:58:06:b3:4c:38:4d:34:97:74:69:b0:54:5f:a3:a0:9f:
         5b:cb:ec:84:c4:3a:bd:44:14:cc:1d:49:99:50:61:78:13:97:
         1d:41:1b:39:89:bd:20:51:84:d9:33:98:b8:bc:84:5f:f3:a8:
         b9:5f:3c:86:ac:50:71:a0:07:23:10:e3:0a:97:f1:20:02:ad:
         c5:78:01:43:f2:d9:49:4e:2f:9e:81:61:9a:10:bf:d2:79:a5:
         40:1a:e7:ee:8f:e8:51:ee:92:42:73:b8:f7:e5:d5:82:37:a3:
         d6:7c:15:26:24:e2:8e:68:0d:69:08:07:96:62:aa:eb:12:f6:
         0a:ab:b2:95:d1:20:81:ae:aa:cf:6c:cf:fb:f1:cc:14:aa:1d:
         e2:eb:f1:6b:67:1e:7d:1c:51:73:69:44:bf:23:6e:a4:be:76:
         47:25:06:3d:e8:ab:9e:37:de:d0:4c:1c:80:6d:ec:75:66:32:
         4c:21:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:54 2026 by rpki-client