Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa
File:                     c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa (raw, json)
Hash identifier:          t0YROEH03x9/7zydC6I2AoltjaZ0VxPboBb09r1c72Q=
Subject key identifier:   24:22:97:2F:3E:5B:18:FB:F1:E8:F5:F7:E4:47:61:4D:2D:4F:F3:FA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB9303BF9CE7C570CDC380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c:645::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:93:03:bf:9c:e7:c5:70:cd:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=9299a11f-eefa-4b74-92a8-5c334bb3c1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:28:4f:a5:b9:9d:a7:89:1f:ae:87:32:25:
                    28:f3:f0:1d:82:a2:be:75:60:36:8d:52:f3:3e:92:
                    e3:c2:3d:38:b9:cc:6f:10:13:e3:e0:59:21:f3:d2:
                    33:db:cf:ff:a7:fa:43:15:df:71:7f:e7:48:53:f1:
                    fb:bb:7e:2b:df:98:48:61:5e:92:20:31:12:38:ca:
                    6b:56:23:e1:80:30:50:c1:56:21:0c:1a:a3:15:fc:
                    38:f2:1f:d7:09:f7:09:49:2d:08:14:af:98:09:4b:
                    75:71:20:89:0e:a6:f7:b7:92:19:d1:87:39:1c:a3:
                    05:62:a8:8d:65:55:c6:41:30:97:47:34:ec:cf:5f:
                    ad:17:ed:28:eb:5e:e1:84:49:94:08:f7:f7:9f:34:
                    37:9a:54:c5:08:0a:84:e4:f2:14:72:a8:88:68:be:
                    41:8c:13:59:6f:52:61:17:36:84:73:af:df:b3:1a:
                    37:50:46:80:8e:4b:42:d7:f3:2c:19:12:fb:2b:be:
                    5b:72:5a:eb:52:22:0d:1e:0c:48:10:d7:95:eb:db:
                    a7:43:c6:33:fd:3c:2f:23:8c:81:03:e2:74:96:b6:
                    5d:c2:be:ae:9d:7a:08:ff:3d:9c:65:c3:3c:d2:8c:
                    32:2a:62:2a:83:5e:39:08:63:25:28:d5:f2:11:0a:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:22:97:2F:3E:5B:18:FB:F1:E8:F5:F7:E4:47:61:4D:2D:4F:F3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:645::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:7f:0c:8b:e7:6e:54:9a:45:f1:58:ce:1b:bd:8f:5e:96:
         0f:b0:42:c6:77:6a:c8:f4:af:4d:d4:60:6c:57:9c:4f:79:36:
         23:c3:dd:83:6a:a6:e5:2e:a5:d0:99:ae:e1:11:ed:88:5a:88:
         51:33:fa:d4:63:eb:22:d2:0c:8c:23:ff:9f:7a:74:eb:ef:de:
         c5:2d:f4:09:ee:6e:1a:e5:bf:28:bb:1f:d5:12:5f:26:21:d2:
         2f:97:54:5a:15:66:43:f6:83:f7:05:79:2a:12:77:aa:d5:47:
         73:76:b7:3c:41:44:9d:d8:ac:aa:f4:99:3e:a6:31:7a:24:fb:
         7f:88:fd:e4:21:35:2d:aa:97:ca:2c:9e:0e:8a:b2:28:80:6a:
         44:54:52:18:f7:99:2f:0c:d8:c0:d1:64:e0:54:ab:8c:77:cf:
         53:93:2b:33:2f:6a:34:3d:0d:52:d2:54:bb:78:64:41:82:a0:
         38:77:fe:33:a6:02:b2:10:08:3e:18:47:30:6b:bb:85:e1:52:
         77:86:c9:91:00:76:55:8e:f0:54:aa:8a:6d:b0:a6:81:30:8f:
         5b:46:e2:dc:89:dc:d3:bf:c6:3f:8c:3b:39:8d:5d:b7:d8:f6:
         89:ac:87:fd:15:a4:32:1c:78:dd:7e:c6:43:33:a6:f4:9d:f9:
         79:17:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:41 2026 by rpki-client