Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a464c263-456a-32d2-8dbb-45e0235ae534.roa
File:                     a464c263-456a-32d2-8dbb-45e0235ae534.roa (raw, json)
Hash identifier:          ucfUAjDZH/g4Jw6c550LU8va2QTVtHSwGOB9OmUsAYY=
Subject key identifier:   34:B4:32:BF:25:77:5C:24:70:D0:95:D1:9E:C3:42:5C:2E:91:F9:97
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D76E80778178ED2D590A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a464c263-456a-32d2-8dbb-45e0235ae534.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c8f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:76:e8:07:78:17:8e:d2:d5:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=36165634-6dd5-4ceb-ab70-968298b2f5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b2:20:8a:e1:e6:58:53:e2:2d:4d:a8:ed:f7:
                    b7:38:9a:fe:fd:c1:69:fd:72:c0:a2:6e:9a:03:5c:
                    e7:45:e5:b7:87:a9:92:30:37:65:f5:f6:40:a1:07:
                    9e:f1:86:87:05:67:c7:f7:be:26:c1:e0:7d:b2:5d:
                    f0:7d:81:3c:05:e7:b2:98:a9:7c:4c:95:93:ae:28:
                    ba:45:7d:a9:8e:b2:0a:0d:96:83:80:db:2c:0f:37:
                    9f:0c:b3:e6:82:17:69:5c:8f:26:0d:f2:e7:d0:19:
                    76:86:04:4e:01:29:c4:79:8e:91:88:9b:2f:01:0a:
                    a3:3b:10:db:45:d5:9c:10:f1:6d:0e:4b:96:82:53:
                    55:20:cd:63:63:e9:93:98:98:21:aa:76:e7:06:4c:
                    7e:a4:86:77:24:e2:0b:99:f6:87:b7:c7:28:c6:55:
                    7d:da:50:16:ad:1d:c2:a7:a1:84:a1:a9:7d:84:dc:
                    91:b0:0c:05:c0:d1:9a:19:a4:d4:6e:5f:59:d0:24:
                    fd:2c:8c:23:97:bf:88:42:53:dd:12:e8:67:2a:cc:
                    86:62:9d:9c:be:62:10:27:f1:28:a9:3a:40:75:a7:
                    b8:b1:d2:c8:01:4c:9c:4d:b3:b6:88:93:90:17:7c:
                    50:62:4a:b5:9e:b5:e6:ca:47:46:8f:b7:6a:99:77:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:32:BF:25:77:5C:24:70:D0:95:D1:9E:C3:42:5C:2E:91:F9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a464c263-456a-32d2-8dbb-45e0235ae534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c8f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:be:9e:20:0f:58:e8:cf:7a:a2:c3:49:73:12:aa:ef:d5:0d:
         fd:48:18:91:c6:08:78:44:11:30:e4:17:f4:78:4c:b7:44:e2:
         d3:20:f1:22:33:7d:2d:2f:39:ab:fb:46:fb:c1:0b:44:76:29:
         7d:4e:2a:19:bc:4a:ee:23:f0:0f:de:ab:d4:c5:ee:37:d8:da:
         0e:03:49:ea:0e:55:31:8e:22:05:91:ad:75:9f:4d:d7:29:e3:
         fc:c1:fc:df:a1:89:8d:22:a9:fc:66:d9:87:ff:11:28:31:e4:
         7b:f7:e8:fc:16:ef:eb:0c:6a:07:c6:a6:8f:46:f3:71:a1:7e:
         ab:54:e9:ba:95:a6:69:a1:55:03:01:55:1f:bf:71:03:fc:11:
         6b:07:f7:aa:4a:47:d2:e3:65:da:b8:75:95:d5:21:74:5d:ad:
         a4:2f:ed:3e:39:72:e6:2f:f7:ce:d9:26:6c:aa:25:3f:10:8f:
         74:b9:ec:97:84:b7:27:45:60:6b:9a:9b:27:fe:72:75:41:b2:
         e5:1b:35:0f:5f:87:9b:b5:e4:0f:df:4e:34:fa:e2:fd:34:11:
         87:63:61:99:3a:b5:06:ac:de:73:b3:0c:1d:bd:2f:0b:d1:36:
         7c:87:2b:b3:cd:95:15:e8:af:0d:60:1a:88:33:3b:c2:58:eb:
         4f:3a:4e:ab
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHXboB3gXjtLVkKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MzYxNjU2MzQtNmRkNS00Y2ViLWFiNzAtOTY4Mjk4YjJmNWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bIgiuHmWFPiLU2o7fe3OJr+/cFp/XLAom6a
A1znReW3h6mSMDdl9fZAoQee8YaHBWfH974mweB9sl3wfYE8BeeymKl8TJWTrii6
RX2pjrIKDZaDgNssDzefDLPmghdpXI8mDfLn0Bl2hgROASnEeY6RiJsvAQqjOxDb
RdWcEPFtDkuWglNVIM1jY+mTmJghqnbnBkx+pIZ3JOILmfaHt8coxlV92lAWrR3C
p6GEoal9hNyRsAwFwNGaGaTUbl9Z0CT9LIwjl7+IQlPdEuhnKsyGYp2cvmIQJ/Eo
qTpAdae4sdLIAUycTbO2iJOQF3xQYkq1nrXmykdGj7dqmXdjtQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDS0Mr8ld1wkcNCV0Z7DQlwukfmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTQ2NGMyNjMtNDU2YS0z
MmQyLThkYmItNDVlMDIzNWFlNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsjzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDPvp4gD1joz3qiw0lzEqrv1Q39SBiRxgh4RBEw5Bf0eEy3ROLTIPEi
M30tLzmr+0b7wQtEdil9TioZvEruI/AP3qvUxe432NoOA0nqDlUxjiIFka11n03X
KeP8wfzfoYmNIqn8ZtmH/xEoMeR79+j8Fu/rDGoHxqaPRvNxoX6rVOm6laZpoVUD
AVUfv3ED/BFrB/eqSkfS42XauHWV1SF0Xa2kL+0+OXLmL/fO2SZsqiU/EI90ueyX
hLcnRWBrmpsn/nJ1QbLlGzUPX4ebteQP3040+uL9NBGHY2GZOrUGrN5zswwdvS8L
0TZ8hyuzzZUV6K8NYBqIMzvCWOtPOk6r
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:10:01 2025 by rpki-client