Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6cf82f69-36b2-39ad-9e85-65c1dc21e024.roa
File:                     6cf82f69-36b2-39ad-9e85-65c1dc21e024.roa (raw, json)
Hash identifier:          LhfxtiVg2ZNt8SfL2snDcyFZVfwLAFlsZ9buKFwUJTQ=
Subject key identifier:   C7:8F:5B:E0:85:6D:38:42:D1:73:8A:9A:87:29:72:E2:B6:B9:B7:5A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D74FE852EE3E32BAB5980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6cf82f69-36b2-39ad-9e85-65c1dc21e024.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:74:fe:85:2e:e3:e3:2b:ab:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=25b03094-ffa9-445a-b5df-d57f624e8b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:f3:ad:27:ef:63:01:6f:bb:e6:d5:e0:c8:
                    43:e6:a1:be:b6:d9:7a:e4:4b:b2:1f:7f:8b:47:57:
                    56:d9:57:d8:f1:d2:ab:5d:a1:e3:d0:53:2f:a7:d7:
                    22:be:7c:4c:84:cb:5a:ca:dc:c1:04:1d:fc:81:30:
                    ee:01:d6:ca:08:78:0b:2a:05:65:04:aa:04:a2:98:
                    59:fd:e2:da:57:bc:1c:a3:7f:4f:30:d7:95:34:bf:
                    c8:73:9f:9c:01:44:5a:37:ff:81:8b:ae:f2:1c:aa:
                    80:52:41:83:64:95:a0:63:49:9f:42:b8:d7:36:e5:
                    37:b3:a3:c7:ae:b3:86:d0:77:dd:2d:b5:ff:37:b8:
                    86:a7:87:f5:c2:17:bb:d9:bc:b1:f3:f3:c0:e7:f0:
                    63:9f:ad:6d:ac:2b:7b:ac:48:0a:4e:0e:4b:4c:3b:
                    7d:11:4f:df:8a:74:45:5f:2c:b3:ff:db:4c:ca:ea:
                    c2:4e:40:cc:9c:76:8c:c0:a9:5e:7a:fe:3f:47:f1:
                    59:95:75:c0:8d:0e:bc:5c:a3:a3:8d:14:2e:41:09:
                    9d:70:07:68:54:01:1c:4c:ee:de:2f:01:e6:ba:0c:
                    b5:1a:71:a3:f1:2c:83:58:68:b6:b1:15:2e:cc:24:
                    a5:38:37:17:5d:b4:51:63:23:ed:d8:1f:b1:1a:2f:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:5B:E0:85:6D:38:42:D1:73:8A:9A:87:29:72:E2:B6:B9:B7:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6cf82f69-36b2-39ad-9e85-65c1dc21e024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c88::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:47:13:5d:64:0f:64:39:3d:10:0f:5b:49:f5:01:ff:10:5e:
         d0:32:bd:0e:97:4f:03:7d:27:24:8d:a1:6b:3b:9b:08:3b:79:
         dd:df:22:1e:a3:0c:af:d5:72:d0:7a:d6:2d:4b:16:28:e4:9c:
         7e:1f:70:a1:4e:28:0e:91:46:ec:3a:30:6e:64:7f:83:e4:7d:
         a3:93:58:48:a0:3f:35:87:de:dc:d8:70:d8:c0:f1:63:b0:31:
         13:a8:aa:81:d5:67:32:4c:95:f7:cb:b6:16:ec:4b:9a:74:28:
         23:d4:81:3d:c2:31:6d:74:c8:2c:07:23:8c:29:30:cc:ea:ee:
         88:fd:63:61:16:52:4a:31:31:83:24:2a:f7:e1:84:6e:86:c3:
         9f:44:d9:f9:07:d1:34:22:7a:6b:4f:44:d6:06:d5:15:59:c3:
         f1:27:b8:81:94:f3:83:78:06:e2:98:ef:0d:cb:a9:ce:cc:90:
         dc:8d:e5:42:b8:cd:cc:20:0d:c5:a7:f5:4d:f6:1d:85:80:19:
         21:b7:82:55:9a:7c:8f:35:17:18:8b:71:94:e2:a0:fc:aa:90:
         ef:00:c6:80:08:f9:7b:3c:86:eb:5f:74:cd:a1:54:55:94:9e:
         2b:5f:58:68:d0:2e:a7:ea:c8:eb:c9:6b:29:f8:99:34:14:ac:
         55:ef:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:01 2025 by rpki-client