Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa
File:                     87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa (raw, json)
Hash identifier:          Ic3gU4jxM6Po2QcYgUwGZScb8L2M5FXXBtt0rUPtmOc=
Subject key identifier:   1B:13:97:5A:E6:34:67:4B:73:D6:B7:5B:A8:CE:7A:63:49:77:AA:F8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DE6DF9E97470F7A3B3F20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c55::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:e6:df:9e:97:47:0f:7a:3b:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f7131735-c12c-41b8-a9da-ca86eceaec99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:48:de:90:04:a3:38:b1:4f:39:b7:4f:08:
                    63:cb:27:d6:d4:18:2d:e2:16:e3:ea:73:df:8c:0e:
                    bc:bd:5a:18:f4:ae:6c:54:e0:f3:85:fa:81:6a:27:
                    f3:5c:2b:81:36:0b:9e:24:5d:bb:50:5f:cb:c4:c6:
                    73:85:47:ac:54:67:08:09:66:2e:8b:bc:cf:bf:c7:
                    35:d2:02:c4:98:d2:c8:8b:85:5e:a6:db:ae:2c:63:
                    9b:0c:51:fa:13:28:48:ca:5a:50:ff:2b:bc:36:48:
                    e1:9a:3f:95:6b:e4:e5:1d:2b:b0:b4:7a:cb:ac:4f:
                    84:00:70:d5:3e:49:a2:ac:c5:49:3e:b0:77:df:67:
                    79:ee:5d:c5:33:bd:78:16:da:92:64:48:72:8f:97:
                    7c:9e:f7:42:e4:6c:26:c8:bd:d8:b3:90:76:8b:09:
                    0b:49:06:f8:af:7b:1c:a6:cd:bd:8c:51:b7:ab:5e:
                    3f:c7:da:04:a8:ef:15:5b:9c:cc:e3:c1:54:1c:90:
                    55:01:a2:00:d4:24:8f:91:b8:e4:cf:3a:9f:f5:62:
                    50:f1:65:26:95:be:dc:0b:a3:ae:95:6d:1d:e5:75:
                    d8:58:45:d1:08:e0:0f:b3:d7:e4:d0:ac:13:80:2b:
                    20:e8:7a:bb:4b:17:68:3a:a2:c0:16:4c:32:06:77:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:97:5A:E6:34:67:4B:73:D6:B7:5B:A8:CE:7A:63:49:77:AA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e5f4af-beee-31b2-a84c-42ef3100a6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c55::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:30:60:8b:0d:a0:9e:79:41:88:28:36:84:12:a0:0d:72:81:
         28:f1:59:b6:a2:96:af:ce:e7:21:3d:a0:79:50:ec:57:19:b0:
         62:c6:62:65:e5:e3:e2:5b:59:ef:b1:e1:fe:00:c4:84:88:0f:
         84:da:78:86:71:a3:0f:e6:73:b5:72:e3:5e:34:54:46:69:10:
         35:03:19:cd:3b:03:34:fc:ba:95:eb:16:72:9e:e7:27:d3:eb:
         02:e1:4f:30:ae:1d:29:30:20:a4:cc:a8:6a:64:c4:7e:8e:37:
         75:48:6c:7c:fb:41:aa:29:d4:52:f6:f8:28:0e:77:12:8e:df:
         6f:51:86:19:d5:f0:7f:38:d2:c3:58:bf:6d:9f:39:2a:d8:4f:
         73:19:e6:85:74:f2:98:40:07:33:a6:c4:f8:20:e4:f5:ce:01:
         db:68:c0:76:a4:61:27:02:6f:dc:23:57:89:94:d6:8c:2f:13:
         c3:8a:e3:e5:d3:ff:6d:53:db:5e:7a:54:f1:41:b7:36:75:c4:
         4e:8e:67:46:d2:d8:86:b4:fe:e1:9d:c3:34:ed:c2:e0:e2:29:
         a5:d3:02:02:5c:ca:bf:8d:d1:2b:dd:a4:34:23:e5:97:40:94:
         14:b2:34:2d:d3:77:19:a3:d1:71:91:0a:51:5c:a1:74:02:e8:
         dd:21:45:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHebfnpdHD3o7PyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZjcxMzE3MzUtYzEyYy00MWI4LWE5ZGEtY2E4NmVjZWFlYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX9I3pAEozixTzm3TwhjyyfW1Bgt4hbj6nPf
jA68vVoY9K5sVODzhfqBaifzXCuBNgueJF27UF/LxMZzhUesVGcICWYui7zPv8c1
0gLEmNLIi4VeptuuLGObDFH6EyhIylpQ/yu8Nkjhmj+Va+TlHSuwtHrLrE+EAHDV
PkmirMVJPrB332d57l3FM714FtqSZEhyj5d8nvdC5GwmyL3Ys5B2iwkLSQb4r3sc
ps29jFG3q14/x9oEqO8VW5zM48FUHJBVAaIA1CSPkbjkzzqf9WJQ8WUmlb7cC6Ou
lW0d5XXYWEXRCOAPs9fk0KwTgCsg6Hq7SxdoOqLAFkwyBnfEoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBsTl1rmNGdLc9a3W6jOemNJd6r4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODdlNWY0YWYtYmVlZS0z
MWIyLWE4NGMtNDJlZjMxMDBhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsVTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCOMGCLDaCeeUGIKDaEEqANcoEo8Vm2opavzuchPaB5UOxXGbBixmJl
5ePiW1nvseH+AMSEiA+E2niGcaMP5nO1cuNeNFRGaRA1AxnNOwM0/LqV6xZynucn
0+sC4U8wrh0pMCCkzKhqZMR+jjd1SGx8+0GqKdRS9vgoDncSjt9vUYYZ1fB/ONLD
WL9tnzkq2E9zGeaFdPKYQAczpsT4IOT1zgHbaMB2pGEnAm/cI1eJlNaMLxPDiuPl
0/9tU9teelTxQbc2dcROjmdG0tiGtP7hncM07cLg4iml0wICXMq/jdEr3aQ0I+WX
QJQUsjQt03cZo9FxkQpRXKF0AujdIUWA
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:35:16 2025 by rpki-client