Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91bbc3cf-a22e-355f-aff2-8440180e4a4f.roa
File:                     91bbc3cf-a22e-355f-aff2-8440180e4a4f.roa (raw, json)
Hash identifier:          q7CzuQDUpLrxShKZwpxVgjcukoBSsB9LKsZxMFNoyhI=
Subject key identifier:   2B:A8:84:42:D1:0E:54:B7:FC:84:5C:4B:43:E7:AF:78:28:C2:F6:18
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E14D4E1CDBF077C8B6A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91bbc3cf-a22e-355f-aff2-8440180e4a4f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c0c:309::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:14:d4:e1:cd:bf:07:7c:8b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=524af4c5-fbed-47e9-b7e6-ab83954def09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:b0:af:62:80:a9:b4:00:8a:a6:e7:85:36:
                    b9:d9:6e:96:32:1f:28:21:8b:a8:13:2d:dc:33:b6:
                    74:6e:40:ae:cd:fb:15:b7:10:67:0f:e8:99:9c:da:
                    ff:7b:ab:56:67:4a:fc:3c:c6:5c:24:1e:e1:ac:cb:
                    4a:9f:e4:77:db:ab:f6:e7:c3:b9:92:e9:6e:c0:0a:
                    0c:54:22:35:df:cb:e3:84:e3:cf:9d:db:37:f8:66:
                    f3:c6:c0:40:0b:75:f3:79:b3:f8:52:25:4c:5a:c1:
                    ed:07:4e:e8:9d:9a:34:41:07:82:39:84:5c:a6:73:
                    b6:be:de:6d:f7:8d:e4:6f:f2:a1:b5:b7:2f:c6:72:
                    d8:84:ee:a3:c9:84:75:01:0a:2f:2a:f6:47:bf:cf:
                    31:69:44:05:84:eb:4d:9f:52:41:fd:18:54:8a:f9:
                    fa:32:5a:47:67:af:19:86:11:5e:98:a4:a9:97:ad:
                    b2:5b:51:c2:6e:02:99:7d:5c:a2:3e:c0:82:70:e6:
                    11:fc:ae:bf:7d:a7:43:45:f2:d5:d3:0b:de:33:09:
                    7a:b7:1d:dd:21:18:48:ba:78:61:d3:21:bd:c2:04:
                    d3:77:ca:43:87:41:fa:5f:1c:f5:6f:12:9c:c7:5f:
                    af:be:43:69:f4:73:05:ff:f2:d8:05:d3:21:c3:95:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A8:84:42:D1:0E:54:B7:FC:84:5C:4B:43:E7:AF:78:28:C2:F6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91bbc3cf-a22e-355f-aff2-8440180e4a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:309::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:dc:a7:60:b1:db:1b:96:a5:61:14:02:bc:0b:33:f0:2d:
         dd:a3:be:29:a4:5c:a9:90:c0:f0:bb:fc:bd:fc:d1:53:e7:75:
         4e:05:01:49:f0:96:88:4d:8f:77:6a:cd:1d:b6:12:d4:8e:2f:
         d3:34:00:e5:81:db:28:d9:4d:9a:5d:e2:32:72:23:2a:11:22:
         66:ff:12:e9:dc:68:83:92:23:c3:76:80:5a:60:da:c9:e9:47:
         66:27:d7:8d:03:95:9b:83:ab:aa:20:b8:f0:e7:4e:fa:1a:13:
         52:d9:68:45:29:e0:68:82:b1:75:ba:6d:9d:f2:0c:38:5e:be:
         e5:3a:1e:43:f0:83:e9:e9:ac:de:9f:84:47:97:c4:e3:55:36:
         58:f5:7e:45:84:cd:2a:f1:43:83:1f:ac:75:00:35:41:bf:fc:
         98:ae:88:da:06:ed:39:81:26:47:f2:3f:eb:1d:a2:f6:87:dd:
         94:e7:e6:1e:d0:36:3e:8f:22:76:6a:03:e4:39:d3:49:c7:eb:
         ea:96:ee:79:a2:50:cf:d6:a5:2c:27:7b:45:76:18:0c:27:92:
         62:87:4d:16:80:c2:41:38:90:33:bf:d3:1b:fb:df:47:54:d0:
         30:e1:23:f1:0a:c3:b6:5d:cb:2e:e9:f8:c9:23:30:ae:00:cd:
         1b:61:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:46 2025 by rpki-client