Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ee728c9-2305-31d8-92c3-b1e66aac3092.roa
File:                     8ee728c9-2305-31d8-92c3-b1e66aac3092.roa (raw, json)
Hash identifier:          4DNol3s4VkN5UQll0N6UZCQcsTguhyzaUiqRT1nnyxA=
Subject key identifier:   68:1E:6E:36:CB:04:F8:0A:04:9C:18:CA:D2:C1:32:94:A5:57:64:EF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF860486BC1D8C9906480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ee728c9-2305-31d8-92c3-b1e66aac3092.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c8e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f8:60:48:6b:c1:d8:c9:90:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ea38e9cc-9199-4319-a6e4-cf187ac89802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:60:d7:94:23:91:b7:2f:2d:3f:3f:58:3f:
                    36:7b:14:88:dd:d7:aa:23:d0:b7:e8:d8:6a:ab:ba:
                    43:2a:03:b3:1e:72:a5:38:18:0e:c2:45:c1:19:94:
                    29:cc:9d:56:97:97:76:cb:7a:87:af:48:74:8d:a9:
                    db:b7:dd:8f:88:17:0c:e4:34:3b:22:5c:8e:e6:39:
                    de:26:e0:3d:06:4d:96:79:02:1e:fd:71:dc:c0:b2:
                    c2:e4:e8:e2:fa:6e:0f:a3:39:49:7a:58:ae:be:06:
                    38:f6:96:5d:ee:0b:06:46:e8:67:28:06:e4:28:dd:
                    01:6b:77:25:13:90:57:26:c1:5c:f1:cb:97:99:2f:
                    b8:e6:6d:d0:6a:93:61:f5:b2:50:d3:6b:4a:ee:af:
                    67:78:eb:f2:46:12:49:0d:40:12:8b:ec:94:21:65:
                    85:11:8e:d9:71:d5:77:07:3c:8d:d9:d4:0c:3a:3d:
                    ee:68:ab:dd:f7:2f:15:c1:f1:0e:24:df:23:16:0c:
                    9d:2f:35:76:dd:3c:0a:61:e0:0b:3e:2e:0c:a4:3d:
                    0a:de:66:35:c2:20:3b:4b:dd:ba:cb:a1:32:42:1a:
                    7f:46:35:87:24:4a:98:ef:c4:f1:56:43:d0:78:a0:
                    85:85:65:7a:cb:63:65:7c:34:dc:50:69:f2:a7:a0:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:6E:36:CB:04:F8:0A:04:9C:18:CA:D2:C1:32:94:A5:57:64:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8ee728c9-2305-31d8-92c3-b1e66aac3092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c8e::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:bb:55:14:f1:91:aa:ad:a6:e7:ab:95:9d:ca:c8:d8:c4:
         fb:1d:c0:dd:a3:3c:bc:3c:42:8c:f5:22:7a:73:b9:11:82:70:
         ad:b4:26:99:46:e9:9e:f1:60:a4:8e:a8:fb:a4:72:00:f5:17:
         fb:3c:9e:bd:30:7a:d3:91:0c:dc:08:26:38:ee:c8:9d:31:88:
         80:83:c6:83:7b:38:71:82:55:73:f9:9c:af:19:8a:5b:87:ee:
         55:1d:56:dc:bf:51:78:36:20:2f:e7:14:3a:bd:e6:77:55:69:
         d7:01:c1:4f:d9:5c:c2:8f:9d:42:80:4a:37:2a:77:bc:de:68:
         c0:74:ee:31:28:af:a6:ed:dc:0e:13:ee:09:da:cf:d0:8e:84:
         37:5d:f9:25:cc:21:e4:73:54:83:ce:8f:55:b2:f9:33:64:04:
         57:29:d9:27:31:a3:89:d5:2f:92:b8:11:9a:5e:3b:ce:23:25:
         bc:09:bf:1c:1a:ef:68:37:bf:73:bc:d9:36:26:53:84:a1:b1:
         d4:e5:3a:0b:00:d0:62:0d:5e:4f:2d:0a:97:b0:7b:a5:91:85:
         95:6c:42:9c:72:db:5e:6b:4e:0f:99:9b:72:29:17:10:86:bb:
         cb:74:bf:a2:bb:c9:78:7a:6d:5f:fb:fa:c6:66:47:97:e4:43:
         ae:bc:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:48 2026 by rpki-client