Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a426bde4-dd84-3bf7-8bba-99ae57b1471d.roa
File:                     a426bde4-dd84-3bf7-8bba-99ae57b1471d.roa (raw, json)
Hash identifier:          cHaBJrY990dMxHlYslIRgr/PByHtTDFvkT8m8yXDypY=
Subject key identifier:   CE:E1:66:BD:2A:04:75:53:7C:37:23:24:8F:F6:32:27:19:EF:B1:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAEED248F19CDEFF969C20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a426bde4-dd84-3bf7-8bba-99ae57b1471d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ee:d2:48:f1:9c:de:ff:96:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=589b7666-2f3a-462c-b988-c9c7b1be563b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:64:fb:b4:e2:a7:0d:ab:d4:d6:e6:ea:26:
                    45:81:42:af:32:a0:e6:b7:86:74:a7:e1:7b:ec:bd:
                    9f:a5:d5:28:11:7a:d6:dc:04:81:b2:6e:21:e0:13:
                    12:7b:1e:7f:c0:3e:aa:e4:66:15:09:7d:d3:ca:06:
                    e5:95:89:dc:44:e1:4a:d4:a7:07:c1:89:e6:3f:de:
                    05:73:f3:13:ac:5a:86:81:c2:6e:b7:97:c1:02:ed:
                    7f:94:30:3e:94:1a:9f:4e:44:a5:5f:5f:1f:ad:95:
                    25:98:54:3a:6e:a6:6f:f7:ec:a0:4f:0d:be:24:62:
                    bc:96:2d:26:a4:d3:c1:97:16:7e:ec:a4:da:1a:e7:
                    87:62:40:f9:af:3e:2a:54:e8:a7:78:60:c0:65:8f:
                    47:40:9c:2d:df:8b:8c:53:c4:85:c6:b8:94:0d:b5:
                    58:85:6b:22:23:a7:33:e1:b2:e3:dd:19:fd:6a:0c:
                    31:ea:0b:63:ab:18:b1:6f:14:ec:df:c4:a4:08:b0:
                    a4:96:2c:46:b1:c6:44:87:74:c4:0c:85:10:02:5c:
                    75:ad:aa:9c:be:be:a4:c0:49:2d:63:67:30:68:39:
                    92:65:3b:37:04:5b:14:d8:30:a2:30:f8:a0:d0:2e:
                    74:ea:15:23:75:d6:f7:e0:8f:11:4f:e3:42:ee:96:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E1:66:BD:2A:04:75:53:7C:37:23:24:8F:F6:32:27:19:EF:B1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a426bde4-dd84-3bf7-8bba-99ae57b1471d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:9c:6c:6a:b0:a8:30:a9:2d:d1:20:1f:de:45:a1:f2:d7:
         e0:de:af:a5:b4:99:78:9d:3e:17:69:f7:16:29:9b:83:ff:34:
         42:1b:ff:fd:b1:87:49:47:9f:32:18:b3:4e:e7:82:b9:ed:cd:
         8c:13:95:b5:ed:ab:5f:d9:8a:97:f1:8f:1e:06:df:8d:19:4e:
         39:3c:48:5d:cb:81:4e:40:e6:75:3d:b9:b9:3f:e7:66:68:ad:
         43:6a:36:46:c3:67:91:53:c1:3d:30:8d:05:44:8c:6a:e8:84:
         ee:1d:fd:83:3d:da:e9:70:63:70:80:1c:4e:f5:ac:4e:cb:b8:
         9f:8c:f0:12:3e:3a:22:81:cb:50:61:f8:a9:1f:b7:04:af:4e:
         58:18:2e:02:80:0f:af:2c:9c:22:2f:11:5e:c4:bf:d1:3e:be:
         86:7a:9f:7d:ce:76:50:cc:0c:c7:b8:e4:08:1d:65:58:ff:38:
         76:32:f9:2a:e5:cd:4b:66:e1:14:b8:5a:69:83:11:f9:2a:e0:
         7d:de:8b:cd:19:47:a9:22:68:ed:c4:d2:c6:6d:09:41:82:9c:
         96:0f:63:07:8e:60:ac:0a:2b:8a:c6:ae:f0:0c:8b:2d:bc:e3:
         e2:e1:4b:9a:c1:08:cc:8b:27:c2:2f:0d:3c:e2:4f:34:c2:23:
         1b:db:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:36 2026 by rpki-client