Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71f21c04-be18-3354-b7fc-6c13c7974595.roa
File:                     71f21c04-be18-3354-b7fc-6c13c7974595.roa (raw, json)
Hash identifier:          4rYtmR7Td9PHKR1HC00sfaBVTsi5UWnqGzPCOsggR9E=
Subject key identifier:   C7:6A:41:33:09:65:C9:6F:B8:44:0C:2F:0C:A1:92:68:35:2A:A3:A3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DEFD0AC485E418CB058C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71f21c04-be18-3354-b7fc-6c13c7974595.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c0c:241::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ef:d0:ac:48:5e:41:8c:b0:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f41d8b1a-04de-4ebb-ad39-216f2bc42091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:eb:f2:26:f4:93:55:18:86:df:f3:e3:14:e8:
                    a7:32:9c:0a:a7:3f:0b:f5:f3:ef:c5:1f:73:b1:24:
                    9a:b8:bb:9c:af:3e:8b:a7:03:3b:1e:64:8e:71:48:
                    ab:78:e8:96:25:3d:d4:85:1b:fb:31:84:0a:fa:b5:
                    28:4e:19:9d:8a:cb:15:51:83:65:c0:ea:31:e1:a7:
                    32:11:74:68:05:a0:d4:2a:a9:15:b0:99:81:3f:ec:
                    d8:18:e7:e6:ca:58:4a:b1:c7:b7:e2:8c:d9:8d:0e:
                    d0:75:80:da:a5:90:a5:36:1b:43:d1:c2:f9:01:a8:
                    b5:e4:9a:d4:c1:a3:93:f8:f1:dd:b7:8a:e2:9c:41:
                    50:0b:49:9c:2e:3f:b3:49:e9:55:f4:cb:51:ac:b5:
                    17:41:79:67:f3:7a:06:7c:87:f0:66:b5:48:d3:f3:
                    e9:dd:f3:fd:53:5f:29:22:41:47:5b:f4:15:8e:b4:
                    08:66:4c:84:7b:10:50:47:5d:21:f8:50:63:1a:24:
                    d7:23:81:9f:88:b9:9c:3b:8a:75:42:9c:cb:23:39:
                    80:76:e3:9a:f0:33:53:80:9d:e4:1c:1e:31:42:3c:
                    ad:d8:2a:34:40:78:71:94:3a:bd:70:d2:2f:f8:c5:
                    02:c1:43:ff:ba:54:d2:e0:72:a0:66:16:2f:cc:10:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:41:33:09:65:C9:6F:B8:44:0C:2F:0C:A1:92:68:35:2A:A3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71f21c04-be18-3354-b7fc-6c13c7974595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:241::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:81:f6:d4:32:88:11:8b:f5:fd:54:6c:d8:7d:29:e4:00:e4:
         36:c4:41:e8:cc:4e:31:4b:4f:28:2b:ed:1f:43:e3:a4:17:15:
         e5:c3:ef:45:42:6e:d4:89:ce:7b:22:6c:7e:59:d6:99:fe:32:
         3b:36:0a:7a:4c:a3:16:f6:13:80:8a:92:fb:fd:b7:4f:b9:b1:
         aa:ed:8a:fd:6b:bb:35:f0:81:36:df:ea:00:36:17:2c:f1:bd:
         05:95:68:f2:05:dc:97:f4:1b:09:2b:64:2c:77:a6:ed:ed:d7:
         82:03:b0:d5:79:c7:4b:5f:cf:79:d7:8a:c3:fb:72:16:0c:ee:
         76:48:9f:18:1f:87:95:f3:ba:2d:0c:d5:87:fe:43:44:e5:24:
         9f:0a:84:94:f2:1d:fc:6f:d3:7f:1e:4b:97:3a:7d:d3:22:9c:
         10:32:57:3b:e4:55:af:35:07:c4:b1:a6:7c:0a:ff:e8:2d:ac:
         a6:f4:3e:26:21:87:e9:49:cf:7f:01:78:51:46:69:9d:1f:4e:
         85:1e:d5:ed:e1:e3:01:a3:d4:68:d8:84:44:17:30:70:a7:b9:
         05:cc:4e:1e:1b:60:4d:0e:e8:7b:13:34:82:ae:dd:25:61:e5:
         a2:53:c1:92:06:c7:50:cf:55:95:1e:c6:cd:37:c3:aa:a6:6c:
         68:52:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:19:26 2026 by rpki-client