Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da63e237-1694-3fd3-9a60-1b2b24ac46ba.roa
File:                     da63e237-1694-3fd3-9a60-1b2b24ac46ba.roa (raw, json)
Hash identifier:          +kaHgzydaROcvXEHvLXo7/CZLjViCloph/QNUHjRp9k=
Subject key identifier:   99:68:1E:00:EF:63:EA:AB:65:61:DD:73:64:AC:AE:3D:25:F1:BA:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7D167044A4311DD8A540
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da63e237-1694-3fd3-9a60-1b2b24ac46ba.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33588
IP address blocks:        2600:6c34:203::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:7d:16:70:44:a4:31:1d:d8:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e7bb8374-0819-4109-939d-535e8aae37bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:68:3b:95:38:be:df:73:d5:c1:c1:9d:e9:
                    1f:20:0f:bb:53:5c:ec:cd:a2:32:e0:89:9e:ca:f6:
                    a5:25:43:a4:c6:5e:25:5d:c6:59:33:86:fd:c1:e3:
                    84:ba:aa:8d:5e:05:ef:19:85:f2:9d:5c:93:cb:72:
                    9a:3f:e7:f5:cc:52:8f:5f:ca:31:3b:b4:e7:3e:e0:
                    46:51:0f:df:04:bd:74:48:3f:ba:65:42:55:93:1d:
                    e6:74:53:f8:ed:e9:85:49:88:d6:a4:f5:c7:bd:bb:
                    35:32:62:b1:15:54:14:e2:03:11:1a:52:04:05:4b:
                    a0:cd:78:83:8a:88:e9:e7:4f:eb:b1:6a:25:d9:08:
                    7e:a0:72:35:75:cb:13:85:c7:4a:aa:8f:b2:27:1c:
                    aa:7d:7a:57:4a:95:f5:37:72:78:1f:f5:8b:db:9a:
                    ea:2e:9f:53:66:c0:18:4d:23:12:72:31:36:f3:4f:
                    8a:22:90:97:47:56:55:b8:7f:bf:4e:e7:d9:f3:12:
                    3e:f9:e1:e1:53:f5:bf:26:21:e7:4e:f8:1f:db:bf:
                    17:6e:a5:b9:18:e8:b9:3f:53:51:cb:08:ad:d2:63:
                    ad:91:b2:10:1b:32:1a:e7:a1:95:8b:d4:d6:b1:6d:
                    51:f8:8e:98:05:7f:a6:b4:f7:57:3a:6f:c9:71:5f:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:68:1E:00:EF:63:EA:AB:65:61:DD:73:64:AC:AE:3D:25:F1:BA:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da63e237-1694-3fd3-9a60-1b2b24ac46ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c34:203::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:87:38:20:23:c0:cd:7f:df:7a:47:42:4d:ad:4b:7f:cc:
         48:1f:65:d0:76:71:0d:97:a9:da:82:9e:6b:76:1b:c4:8d:88:
         46:84:ce:f1:d9:d3:79:c5:6c:33:14:80:74:22:13:ad:77:c0:
         fd:43:71:af:24:6a:b1:4c:85:3d:b7:35:0f:72:d5:66:60:64:
         c2:bd:c9:f1:f8:1c:3b:4c:bb:e3:1a:62:ac:9c:eb:f1:ca:fc:
         d2:bf:79:55:c8:a6:0b:73:04:8b:53:0c:d8:f5:5a:59:30:dd:
         a5:eb:87:23:4a:68:98:3a:40:33:92:61:99:d1:d8:a8:a8:70:
         2b:3e:40:a8:b3:5b:35:ec:fa:6a:e8:34:ec:4b:80:5e:0d:79:
         63:40:f4:82:b6:fd:71:cd:c8:c8:52:1c:74:0b:e5:f7:1c:b4:
         c6:aa:06:0e:00:4c:b7:c2:40:8f:78:91:6e:fc:5d:4c:7e:b8:
         5b:d7:13:73:fc:bd:cd:b5:f6:43:0b:76:7c:d2:71:cb:69:ab:
         38:38:fb:a3:6b:ee:41:80:f1:0b:09:ae:46:c6:4f:1a:0b:88:
         8a:62:53:bb:7d:e7:13:3d:62:aa:f3:7c:a4:8e:ab:95:59:82:
         ad:b0:11:ea:78:fd:35:4e:08:e6:2c:b9:97:56:63:d5:90:a9:
         4c:1d:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:43 2025 by rpki-client