Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa
File:                     c829f13a-5138-3d62-88ec-0fead7230e02.roa (raw, json)
Hash identifier:          s6Qe6v+2XqYWpsMoLqsYTQR1k1QUa162EZM7Z74so5o=
Subject key identifier:   CB:2C:66:FB:FF:FF:7C:65:00:6C:07:E2:55:A2:D1:4E:AC:5A:FA:54
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821DCB736CC45739705EAF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2602:107:4820::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:cb:73:6c:c4:57:39:70:5e:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c10b9d8b-f913-4e78-8997-676dda4a3585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:39:a1:8e:a8:c9:f6:1f:1d:13:63:1e:0a:
                    d6:42:56:df:ef:72:b4:33:b9:40:28:e9:1d:d2:03:
                    b9:3a:bd:77:c5:c1:bf:b4:56:62:a9:4c:89:fe:5d:
                    9c:e1:19:f8:9b:d5:03:8a:08:55:f1:05:e9:8e:d9:
                    ff:18:8a:8b:8b:bb:66:a5:2d:4a:fd:d5:fa:be:85:
                    db:ea:54:d3:10:45:3f:43:f4:62:2f:71:9b:03:0d:
                    5a:ce:56:d5:59:1d:2b:70:3e:6d:c2:5f:2d:d3:f6:
                    b2:57:eb:f4:db:8e:40:2f:4b:ed:1a:86:df:3f:f3:
                    a3:e8:ff:af:28:df:05:2b:84:84:c2:38:35:94:36:
                    e6:28:e9:53:1c:c8:c6:e6:54:44:cb:f8:ff:2d:41:
                    8e:5a:c2:67:cb:e1:d5:06:82:4d:ef:f0:ad:7c:61:
                    2b:86:f2:fa:08:24:b8:92:ed:f4:c8:46:d2:72:d9:
                    d8:b0:cf:2e:9a:ce:f3:e6:92:12:ff:c6:ae:67:a7:
                    55:b0:bb:d8:40:eb:c6:9b:b0:1c:61:f8:9b:c6:ec:
                    a4:6a:6c:2c:42:e3:03:4c:07:5b:ba:31:3d:eb:68:
                    d2:e6:09:ce:19:2d:5b:29:d2:3c:23:4f:24:a8:05:
                    ea:35:60:57:a2:06:0f:3b:c8:ad:67:05:40:a3:c8:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:66:FB:FF:FF:7C:65:00:6C:07:E2:55:A2:D1:4E:AC:5A:FA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c829f13a-5138-3d62-88ec-0fead7230e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:4820::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:5c:82:f0:6c:06:7e:dd:6e:13:9a:ea:ff:1b:cc:15:90:
         f6:ef:47:90:af:c8:e8:41:f4:86:cb:c1:ea:86:e2:4e:e5:27:
         9f:01:9c:e1:d4:b0:0f:20:f3:be:20:d8:66:a9:14:65:f1:78:
         4c:36:ed:d3:36:aa:b9:6b:c7:15:a9:af:e1:eb:87:41:b7:65:
         9d:d3:34:9e:b1:10:e0:09:2d:33:69:79:c4:e4:45:32:ed:c9:
         35:4d:ae:1c:4e:5a:10:5e:70:6f:2e:4d:35:ad:fe:bd:63:e9:
         39:04:13:c8:37:35:55:7e:8c:be:e7:08:e2:7f:2c:45:2f:41:
         f8:97:cc:8d:5b:a0:7e:82:a1:8b:d0:33:0a:c6:9b:73:88:37:
         8c:98:65:e5:78:d5:d7:a0:14:c3:3a:d5:97:f4:64:63:e7:24:
         57:90:8d:54:94:c5:7a:41:e2:68:a7:6e:5f:e5:c0:1d:c1:bf:
         54:ba:6d:96:9b:3e:24:23:28:9a:5d:87:38:3c:f9:b6:3c:6b:
         de:9c:87:b6:9d:bb:47:27:89:c2:9e:00:61:75:44:21:5f:ce:
         d8:62:9f:5d:93:52:33:3b:01:b1:eb:4e:a6:c0:77:67:7b:b8:
         3e:81:87:2d:42:9d:5f:1e:54:d2:68:64:df:bc:61:a0:d2:f1:
         09:d7:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:06:24 2025 by rpki-client