Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa
File:                     bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa (raw, json)
Hash identifier:          hACjXbnQAunhicuoV89MM53fdxkRKM9BrnW6bpvNOoQ=
Subject key identifier:   82:53:90:FA:33:07:9D:4A:99:D3:84:03:54:12:FB:00:E4:0F:1D:33
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DC8A868426B691DE2D800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16787
IP address blocks:        2600:6cf0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c8:a8:68:42:6b:69:1d:e2:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=44cb950b-ba05-4aba-bd69-af65afbd8173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:ca:60:d5:d3:ac:25:b5:ad:52:45:91:47:
                    73:ce:be:1b:49:b4:da:bd:42:3e:b4:10:52:93:ec:
                    ab:69:37:67:32:ff:f6:4b:cc:a7:8f:a8:d9:67:a0:
                    68:04:c9:b5:11:f1:e7:2d:96:b5:b8:79:41:c8:59:
                    d0:6a:11:11:e1:c2:74:e2:97:66:92:f3:68:30:ae:
                    be:c4:b8:f1:32:dc:65:c7:13:81:d9:ea:05:81:bb:
                    12:07:5d:5b:8c:89:e9:61:6a:a9:f0:26:d6:45:1c:
                    15:0d:54:74:4a:a6:7f:7d:69:8c:2d:c7:9d:f2:b8:
                    c7:96:c0:5c:66:e4:ba:74:ec:0b:a5:ea:ff:a6:46:
                    02:b4:0e:62:c4:19:7f:c6:0e:8b:1a:07:4c:6a:87:
                    61:60:f9:18:d7:27:89:7c:5c:1f:a5:af:3e:34:a2:
                    09:48:74:42:2d:6d:76:e7:6e:70:0d:28:32:78:2a:
                    66:10:8b:12:64:41:51:2f:9a:5f:fd:03:12:85:36:
                    48:35:5b:73:5d:f7:3b:cf:ca:9c:2f:24:23:4e:45:
                    b1:70:64:66:dc:67:dd:e1:a5:e6:af:c4:4d:a5:50:
                    99:88:e0:3c:7e:04:14:71:7e:3f:fe:df:05:18:94:
                    54:35:8d:6d:e6:d5:1e:11:25:bb:1a:71:50:ce:b5:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:90:FA:33:07:9D:4A:99:D3:84:03:54:12:FB:00:E4:0F:1D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf5fe59d-0d78-3e9c-b3b2-546db71231b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6cf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:30:b7:0f:cd:96:25:76:da:eb:db:95:de:3c:65:d1:cd:09:
         05:a1:18:5e:bf:92:a4:87:23:3e:1d:87:b6:de:a2:ec:6d:db:
         25:34:8f:b1:f9:fb:b9:e9:29:eb:bd:2e:da:29:a8:2b:f3:6b:
         b7:c2:0d:db:f8:c2:70:9e:e8:fb:38:44:c2:2c:7d:cb:02:04:
         61:5d:ee:7e:dc:d3:38:c7:9d:b0:26:10:86:df:92:74:d2:66:
         76:13:72:86:be:61:34:bf:68:fe:b0:fb:e3:0a:31:4d:19:94:
         ea:9f:6e:cb:06:fa:7a:63:17:34:89:0e:91:e6:43:3d:63:5a:
         fb:50:31:c5:7e:a7:1d:6e:4a:5b:0a:da:24:89:cd:81:8d:0f:
         23:b8:57:ba:e6:de:7e:85:82:b2:2d:b6:eb:cc:b3:6f:8a:1b:
         95:05:21:a3:6a:91:f2:4c:b5:4e:86:69:ee:56:82:ba:a1:14:
         39:53:b7:4e:77:c8:65:74:82:47:70:b2:f6:83:3c:5c:34:78:
         40:5f:c3:de:5e:2e:b0:f0:3b:cf:f6:4a:9d:ee:b7:72:d5:06:
         ff:44:37:f2:cb:06:04:90:c8:f8:3a:5d:a2:f3:e3:be:33:b1:
         e2:e8:bc:5e:4b:f1:d9:f5:d9:76:38:3a:5c:5e:e5:5d:02:a6:
         e6:2f:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:04 2025 by rpki-client