Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7fbf6ed9-44ec-31e1-ad6c-047ac3d1dc8b.roa
File:                     7fbf6ed9-44ec-31e1-ad6c-047ac3d1dc8b.roa (raw, json)
Hash identifier:          8AiKU06FkZi80pw4hpJlNDS2nUxJQHwfLE0t1o1zoGI=
Subject key identifier:   EF:FA:47:53:A8:9A:76:8C:39:04:5E:70:A2:28:CE:20:88:93:03:B5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D738995F559E645EE3880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7fbf6ed9-44ec-31e1-ad6c-047ac3d1dc8b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c0c:c0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:73:89:95:f5:59:e6:45:ee:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=473329bf-7346-4553-a989-715cc25e9ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:e5:94:e8:82:d2:8c:e5:23:a6:83:1b:fe:
                    2c:06:82:50:26:d1:4c:de:b4:7f:a2:b6:b2:26:e8:
                    44:4a:da:09:0c:a8:02:7d:76:09:9e:66:e7:ab:3e:
                    be:58:0b:4c:1f:e4:2d:d9:e2:de:a6:f9:cb:bc:4c:
                    f1:af:31:37:0e:c3:b6:b9:52:06:9c:a4:9c:bd:ed:
                    d4:44:6b:3d:12:9c:a5:b2:e3:a2:7d:ab:cd:3c:96:
                    3d:b0:d0:11:4d:45:3f:af:3e:29:69:a0:c3:c8:63:
                    45:87:34:8e:a1:b8:d5:b7:2f:c0:da:e0:92:d7:7d:
                    10:13:74:08:cf:80:63:8b:b4:27:c5:aa:1c:42:56:
                    76:df:33:dc:45:bf:7e:fe:33:0c:06:7e:76:dc:90:
                    8f:1e:03:eb:b2:ad:4b:26:a3:c1:29:83:df:d4:0e:
                    db:08:1d:31:bc:a8:33:23:a1:aa:b5:2b:25:d7:12:
                    c0:d5:8f:2d:18:78:e8:24:60:0b:9f:b4:7a:c3:19:
                    47:fa:76:ad:da:f3:4b:86:8f:a2:d3:f3:96:de:7f:
                    00:4e:1b:60:4b:95:de:d7:32:53:d6:dd:ac:55:18:
                    68:05:95:c2:d4:49:9a:02:ad:dc:28:1f:d9:47:09:
                    8c:1f:f1:ed:fc:42:ff:48:ea:2d:e0:16:bc:cb:33:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:47:53:A8:9A:76:8C:39:04:5E:70:A2:28:CE:20:88:93:03:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7fbf6ed9-44ec-31e1-ad6c-047ac3d1dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:c0b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:74:05:04:04:ec:3e:6f:cf:52:1f:c3:23:80:a7:c6:c0:3f:
         b9:ff:50:28:d3:cb:fd:bd:7e:94:bc:52:1f:ef:34:73:65:fd:
         c7:d9:53:a5:66:29:08:66:c0:b8:cf:35:0d:3b:4d:68:c0:b0:
         24:4d:76:b9:10:10:ec:1f:eb:5b:54:10:dc:c8:f6:dc:47:f3:
         92:36:e8:34:a7:24:78:94:a4:41:90:54:05:f5:44:08:90:fd:
         31:0d:a3:66:50:9a:7c:74:82:fd:fe:e7:14:de:9e:f6:a5:5b:
         41:80:63:36:b8:29:8e:bd:e0:a3:e7:79:f5:dd:90:47:21:85:
         9e:8c:e0:7b:e5:91:78:29:f5:11:28:ab:9e:eb:b7:ce:86:f6:
         63:70:62:0f:89:4f:fc:79:ee:86:86:94:08:85:1b:b6:28:70:
         99:6f:05:fa:08:2f:49:fc:49:db:d9:9b:e2:22:2e:2b:86:5f:
         17:2c:34:ce:22:df:48:6f:2b:94:14:c3:95:bb:f7:65:20:99:
         a9:d1:82:fa:f2:66:a6:ae:7e:62:4c:dd:56:eb:64:5f:84:e3:
         38:69:7c:23:50:85:ce:5b:05:7c:24:77:dd:88:0c:4a:4f:10:
         3f:82:a5:76:b0:dd:d9:a7:c9:d4:76:41:73:9d:fd:8a:f2:d8:
         5c:b5:92:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHXOJlfVZ5kXuOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NDczMzI5YmYtNzM0Ni00NTUzLWE5ODktNzE1Y2MyNWU5YWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshzllOiC0ozlI6aDG/4sBoJQJtFM3rR/oray
JuhEStoJDKgCfXYJnmbnqz6+WAtMH+Qt2eLepvnLvEzxrzE3DsO2uVIGnKScve3U
RGs9EpylsuOifavNPJY9sNARTUU/rz4paaDDyGNFhzSOobjVty/A2uCS130QE3QI
z4Bji7QnxaocQlZ23zPcRb9+/jMMBn523JCPHgPrsq1LJqPBKYPf1A7bCB0xvKgz
I6GqtSsl1xLA1Y8tGHjoJGALn7R6wxlH+nat2vNLho+i0/OW3n8AThtgS5Xe1zJT
1t2sVRhoBZXC1EmaAq3cKB/ZRwmMH/Ht/EL/SOot4Ba8yzPA1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO/6R1OomnaMOQRecKIoziCIkwO1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2ZiZjZlZDktNDRlYy0z
MWUxLWFkNmMtMDQ3YWMzZDFkYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBsDAwL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHN0BQQE7D5vz1IfwyOAp8bAP7n/UCjTy/29fpS8Uh/vNHNl/cfZ
U6VmKQhmwLjPNQ07TWjAsCRNdrkQEOwf61tUENzI9txH85I26DSnJHiUpEGQVAX1
RAiQ/TENo2ZQmnx0gv3+5xTenvalW0GAYza4KY694KPnefXdkEchhZ6M4HvlkXgp
9REoq57rt86G9mNwYg+JT/x57oaGlAiFG7YocJlvBfoIL0n8SdvZm+IiLiuGXxcs
NM4i30hvK5QUw5W792UgmanRgvryZqaufmJM3VbrZF+E4zhpfCNQhc5bBXwkd92I
DEpPED+CpXaw3dmnydR2QXOd/Yry2Fy1klc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:35:23 2025 by rpki-client