Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca2b6296-4420-3972-b824-4c2a18c45b6f.roa
File:                     ca2b6296-4420-3972-b824-4c2a18c45b6f.roa (raw, json)
Hash identifier:          SyriNLvBav/5YG8XYRQ7jnwtsGgwt+6r/3zry20VgDs=
Subject key identifier:   4E:F0:ED:C5:64:A8:05:ED:F6:4A:7C:9E:A3:60:72:43:32:5D:55:20
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DEE92FB7D29B4382E1774
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca2b6296-4420-3972-b824-4c2a18c45b6f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c0c:211::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ee:92:fb:7d:29:b4:38:2e:17:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=055fc08a-f8e6-4319-ab0a-1e29529e6922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:f4:bd:71:36:56:86:63:9f:5e:62:40:24:
                    07:48:d1:33:12:80:00:22:48:78:d4:18:6f:6c:e0:
                    4c:35:7c:09:5e:2b:17:f5:1d:a5:cd:bd:3f:8d:98:
                    c9:73:4f:65:77:56:7b:f4:bf:7e:79:35:cb:a5:dc:
                    dc:07:3d:07:09:34:56:3b:15:ef:4d:b4:ff:94:84:
                    de:89:f9:99:19:98:40:a8:34:4d:74:89:9e:ff:37:
                    43:d0:5f:4c:2c:24:7c:51:12:bc:7b:27:94:b8:9a:
                    87:95:56:e3:e0:8f:fa:87:1e:e6:d0:71:a7:39:15:
                    85:5d:da:3c:05:42:a1:74:fa:37:f0:23:85:bd:b8:
                    4f:4e:4b:7f:1e:08:4b:02:f8:4d:f0:ab:50:0c:a1:
                    41:25:30:48:d3:77:12:bd:0b:0a:5f:6f:f1:d2:b3:
                    f6:87:52:69:e7:80:2c:27:40:68:07:4a:44:3b:2e:
                    ff:2c:70:72:3c:e1:af:83:87:14:77:4c:ec:87:46:
                    6d:8c:e3:a5:2a:fa:ce:4b:f0:d3:61:16:27:b1:a0:
                    7c:c3:54:17:9f:f0:4c:6f:32:82:d6:95:48:30:cf:
                    33:4e:5f:94:3b:7b:7a:c3:12:a4:38:26:a7:a5:05:
                    ec:63:04:05:f1:9f:5e:bc:b2:cd:a5:97:97:7c:f1:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F0:ED:C5:64:A8:05:ED:F6:4A:7C:9E:A3:60:72:43:32:5D:55:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca2b6296-4420-3972-b824-4c2a18c45b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d0:bd:f2:54:68:30:32:96:fb:95:93:46:bc:8f:a3:a0:88:
         53:a0:77:66:d5:b5:2f:d9:5a:9e:98:a8:b7:8a:ef:5b:86:c5:
         b2:90:3c:c2:5e:2c:80:e9:4a:f7:44:34:26:98:6f:65:ae:47:
         92:12:2f:ca:b0:e9:39:6e:0f:30:6e:90:64:1b:6d:73:2a:cf:
         39:1f:57:5e:e5:5b:01:9c:05:ee:5e:43:6f:bb:98:46:a0:b5:
         d4:89:75:65:61:68:c4:a8:41:9c:c9:b8:c6:8f:4e:38:7c:2c:
         63:81:38:7f:13:33:f8:e4:83:0a:d6:e3:ec:f6:67:b6:8e:2c:
         af:78:6a:61:6d:0d:9a:50:11:d0:d6:12:0e:8f:7b:0c:d0:a8:
         c7:8e:9b:bb:7f:c8:00:19:26:da:71:9c:23:58:98:fa:e3:54:
         44:b1:7d:0f:81:31:d0:74:45:30:69:9f:94:4d:cb:ea:c0:da:
         15:19:1c:bd:23:c7:af:4f:60:86:a4:73:cc:a0:49:a1:25:5f:
         45:5a:3c:19:fc:0c:0d:a4:18:e0:6c:37:aa:cd:36:4b:96:3d:
         06:b5:e5:21:05:77:85:09:1e:b3:5c:55:68:98:58:9c:1f:04:
         ef:a2:b2:fe:68:17:48:d5:d3:77:42:e2:0c:31:1d:80:94:6c:
         cb:ec:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:22:07 2026 by rpki-client