Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff91090-67e8-34c2-b117-447efaaaf7b9.roa
File:                     bff91090-67e8-34c2-b117-447efaaaf7b9.roa (raw, json)
Hash identifier:          cZxhX26aWUtFVCtZBvANsupLvICswN+ZJpUVxZ4MBOU=
Subject key identifier:   90:9A:76:6A:67:44:4D:14:22:37:77:CD:D8:22:76:AA:B6:7A:35:0B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821E14B4552F02D4A09335C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff91090-67e8-34c2-b117-447efaaaf7b9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2600:6c0c:2da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:14:b4:55:2f:02:d4:a0:93:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=00e055dc-fd81-4d9a-a2e2-d5bdcffb158a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:47:e1:d2:69:6c:fc:c2:6d:82:98:df:7d:
                    2d:f1:f1:d2:31:87:25:fb:8d:93:3e:46:0e:72:b1:
                    06:6d:d3:db:a6:14:94:1f:67:58:9c:29:fa:90:24:
                    7c:09:15:93:d3:f0:44:80:01:ea:c2:f4:f3:a5:4f:
                    18:1e:00:4a:08:33:b4:64:54:9c:09:0d:c3:49:d0:
                    8b:b5:6e:3d:ed:1b:f9:42:ae:12:2b:da:93:ec:76:
                    51:a4:f5:0f:03:6a:b2:fb:1d:ac:a5:dd:2c:6c:d7:
                    35:bc:9f:0d:d7:39:43:a6:1c:e0:fb:58:15:48:38:
                    45:05:24:ca:2f:e0:09:fb:2d:6f:c6:54:19:66:5a:
                    18:97:08:7c:e5:58:56:5c:1b:6f:09:3a:92:89:e6:
                    43:6a:dd:a0:58:e4:06:3e:7d:45:4a:df:d3:e7:90:
                    b5:af:f1:b3:24:41:1c:9b:ae:9f:0f:af:12:30:19:
                    df:2b:1c:87:6f:1b:dc:73:fa:e6:e5:88:bf:1a:4e:
                    6f:63:8c:ad:05:d3:f3:c1:c3:39:a2:9b:f4:7e:19:
                    f4:dc:c7:9b:39:05:ed:2e:e0:ba:5d:03:2f:f9:89:
                    02:a8:7d:11:8d:b1:e2:cd:2b:84:c7:52:36:e8:b0:
                    b9:05:c7:69:36:c1:90:0c:0f:4d:25:98:ac:8e:2e:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:76:6A:67:44:4D:14:22:37:77:CD:D8:22:76:AA:B6:7A:35:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bff91090-67e8-34c2-b117-447efaaaf7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:90:28:cb:ac:1c:69:65:3f:b5:80:23:0a:6d:6f:61:65:d1:
         fd:e0:97:b4:b4:bb:17:72:cd:30:c7:bf:72:b2:e0:af:f8:08:
         7e:c0:18:09:6a:a8:e9:62:73:e2:d7:7b:ec:99:28:49:6e:b5:
         6b:2c:a1:37:73:44:7b:ca:4c:e5:18:8e:0c:3e:37:88:65:e3:
         39:93:01:37:7a:31:e4:8a:a5:5e:d9:17:a6:93:33:40:e0:21:
         f7:77:de:55:65:cc:86:63:0d:c4:f0:68:49:2a:c7:03:c7:b8:
         11:12:18:90:37:11:8a:f0:70:69:0d:d3:ed:68:c7:02:4d:ab:
         8d:3a:23:fb:c5:ed:22:8f:1f:31:73:9c:0a:63:30:7c:35:f9:
         ce:c0:34:db:6b:0e:ba:21:b3:1b:27:0b:9e:fa:e9:a3:3e:b3:
         b8:6c:9f:63:60:11:4a:19:79:31:5b:c9:9d:4c:39:b3:32:24:
         c0:56:cb:86:27:34:6c:19:7e:14:a3:94:4d:0a:0e:56:04:58:
         d2:ed:ab:46:07:54:d2:42:1c:08:48:55:70:c7:31:de:0d:3b:
         59:28:1a:b6:ea:62:35:6b:bd:d9:0a:9b:20:ba:61:1b:5e:8b:
         bf:2b:c0:7d:f7:43:99:ce:f5:6f:b2:ab:32:d8:c5:b0:6a:48:
         01:a3:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:37 2025 by rpki-client