Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa
File:                     a4a4109c-8301-31ea-bef1-16b684dcb864.roa (raw, json)
Hash identifier:          PZrYjc22EhsZQnBt2DHfJxZrKELJXiGsUBpKQgRpCwM=
Subject key identifier:   96:25:7C:51:97:EC:9E:A9:3C:08:22:22:78:21:28:53:B8:79:6C:35
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E168ADC7FFDF9E02E6940
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c9a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:16:8a:dc:7f:fd:f9:e0:2e:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a5de3cb8-bd1c-4d95-94ca-d272b2ae968e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:ec:f4:18:6c:97:ee:0d:24:42:bd:d3:da:
                    18:2d:20:b9:d8:f7:4d:ef:06:3d:06:f4:94:1e:6d:
                    40:5f:11:97:96:9c:bc:c2:05:63:8a:cd:af:bd:cd:
                    44:c0:a7:7d:57:9e:9b:18:09:e4:7e:8a:e0:e2:5f:
                    f2:15:e1:83:8a:dd:db:d6:14:95:f6:0a:71:f7:50:
                    9c:d5:b7:b0:e9:42:07:95:e6:88:43:4d:e1:c8:98:
                    7b:38:d4:fe:e8:63:87:8b:c9:1b:48:38:6e:60:b7:
                    55:a7:da:5a:d1:4a:88:1a:aa:08:e0:07:68:5e:ca:
                    73:60:56:5e:7d:e4:33:44:41:f7:32:8a:9a:a3:a0:
                    23:6a:5f:b3:57:5d:4d:fa:db:8e:24:e5:96:ab:7a:
                    b3:c0:34:d9:65:97:f7:61:60:15:5b:41:68:2f:09:
                    60:f6:ab:7b:47:20:1a:6b:4e:53:ac:e2:86:ce:03:
                    19:03:a9:62:ed:97:0a:3f:fa:b0:d6:b9:cd:c3:3a:
                    a1:4b:2b:32:cb:15:17:88:53:4a:e1:79:70:3e:27:
                    0a:ce:37:d8:a8:5e:ee:4e:23:b3:69:ed:f7:43:d0:
                    49:a4:50:48:13:a3:25:71:fb:b9:c4:29:49:b6:7e:
                    c5:3a:70:c9:bb:ae:7f:82:33:92:7f:e1:1f:1d:c4:
                    bf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:7C:51:97:EC:9E:A9:3C:08:22:22:78:21:28:53:B8:79:6C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4a4109c-8301-31ea-bef1-16b684dcb864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c9a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:0a:e1:6c:44:20:04:ea:be:f5:96:e0:83:1e:c9:bc:4a:01:
         1a:71:89:97:27:26:17:c9:ef:2d:61:a1:87:86:ec:15:5b:07:
         9e:a1:06:0c:5b:e0:74:ba:34:41:90:65:d4:c3:f3:b8:4b:c3:
         b6:a3:64:bd:1b:35:06:80:df:75:e5:42:c2:5a:e0:08:bb:11:
         23:f9:6e:5f:10:e4:5a:95:28:8b:ef:32:e1:37:77:8b:9e:5f:
         c9:18:f0:8c:6c:a4:21:f5:e8:32:45:e7:7a:86:07:fb:69:92:
         e1:64:13:12:37:62:67:2a:4d:bc:84:28:d8:34:c4:6e:f9:52:
         ed:cd:53:74:50:2d:d9:32:96:33:3f:3f:3f:c5:41:06:14:42:
         3e:e9:0b:14:17:2c:cf:6a:fe:3e:f6:fa:dc:b4:d2:d9:1e:55:
         79:bd:2b:8f:89:c6:c8:e9:75:68:01:bf:5e:ec:03:9c:2b:d6:
         cf:8e:e6:7c:d6:5b:e4:d4:4c:72:1a:6e:8e:ac:d0:56:19:2e:
         04:7a:61:5e:d9:c8:e4:b8:ab:13:19:ab:f2:12:aa:6b:39:64:
         6e:c4:81:70:b2:14:a4:1d:73:9f:9f:dd:64:11:d3:6f:51:e8:
         f1:19:2a:60:a3:1b:fc:b6:b8:b6:90:11:a7:d0:f9:35:22:a0:
         48:6d:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:50 2025 by rpki-client