Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa
File:                     6766b9ab-ccb8-394f-9198-92a3e0641174.roa (raw, json)
Hash identifier:          h6veQJRfvYzVCNRG7HKH4NDcl1NzjCTzFfZbVrWCMlk=
Subject key identifier:   3F:76:A5:93:E3:D6:F7:FB:7E:BF:62:07:59:37:47:BF:D5:8B:E1:F8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D745702FC856976636B40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c0c:28f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:74:57:02:fc:85:69:76:63:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d1e08ab2-3f8d-42bd-be9f-2de435d656e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:0e:1a:57:c3:08:b9:37:8c:4f:37:75:24:
                    6a:1e:6b:39:32:bf:c1:ed:d3:fb:b1:90:73:8d:16:
                    f9:ef:f7:64:35:b6:ab:61:fc:25:47:50:0e:c9:2b:
                    2c:38:bb:3f:e4:e6:b1:57:08:bb:c1:bb:7e:f8:dd:
                    fd:3d:f3:3f:03:77:5d:cb:a9:b9:8e:dd:2c:44:32:
                    1a:d1:c5:cf:3c:8b:80:70:6d:8d:f7:57:17:57:c8:
                    99:f5:07:ad:95:1a:71:a2:e8:d3:b7:c3:ac:e2:5a:
                    d7:18:d1:0f:0f:0d:d4:2e:73:b7:3d:74:2f:7e:5a:
                    e1:c7:f0:8b:0b:12:a1:dd:23:88:31:92:2b:61:d7:
                    eb:58:de:75:96:d1:b1:3c:48:0b:c3:5e:40:b8:af:
                    43:f2:1e:2c:fb:52:f8:da:e6:a2:f5:54:56:8d:4d:
                    bf:18:6d:d9:d6:e0:4a:c7:34:57:a9:82:27:3c:6d:
                    48:66:8d:fe:54:da:ac:7d:02:8c:df:34:4a:8e:7c:
                    8c:76:62:e2:59:06:b7:8d:f4:4b:45:50:5e:ab:60:
                    f2:35:a1:f9:3c:eb:c7:92:b9:ce:e7:e6:94:e7:9c:
                    f0:31:0e:a7:42:78:3e:62:40:f5:07:27:cd:4d:22:
                    27:8e:0f:22:80:06:9d:a7:8f:7a:89:97:76:8e:0d:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:76:A5:93:E3:D6:F7:FB:7E:BF:62:07:59:37:47:BF:D5:8B:E1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6766b9ab-ccb8-394f-9198-92a3e0641174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:28f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:97:fb:78:4b:ff:1c:a4:24:cc:6b:ff:c9:75:5e:04:d4:7f:
         18:b3:fb:40:b6:06:50:9a:bd:45:4b:76:14:3b:bf:5c:73:11:
         16:f0:74:ef:2e:0b:60:6f:05:7e:c4:b0:1d:fc:6b:98:5c:cc:
         e9:a4:84:7e:b5:a7:af:ff:6c:af:6e:8f:06:ed:75:59:9b:98:
         2b:28:57:6a:f6:55:9f:e5:29:31:bd:e1:a2:b8:2b:6b:36:55:
         f6:ba:79:c0:6f:96:1f:e3:a3:53:5b:99:e3:f8:3e:6e:76:38:
         25:25:fe:65:86:e0:6f:8f:4c:fd:b2:dc:e8:da:8e:b8:7d:b5:
         93:52:54:5e:4a:42:5d:09:68:e7:ec:cb:51:d1:96:c6:04:fb:
         31:2e:79:0a:c1:4d:89:b5:b0:b8:0d:78:3a:0c:c0:50:63:7b:
         bb:19:48:45:6c:2c:83:1c:31:a6:24:c7:3c:99:ee:6d:67:3a:
         9a:be:aa:04:c3:d6:a6:50:a0:f4:e0:a9:70:82:33:7e:73:02:
         e3:8c:c5:39:f6:e3:27:24:c1:a7:c3:d1:4b:6b:e3:e0:1a:6f:
         5f:ad:02:72:03:3a:db:e6:be:22:0e:45:fe:f9:02:81:be:a6:
         28:9e:4a:41:db:83:3d:92:56:5b:b0:bf:14:1b:c0:ae:b1:a7:
         a7:eb:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:00 2025 by rpki-client