Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da71d959-3e0e-3f29-87c7-55a2b8f3cffc.roa
File:                     da71d959-3e0e-3f29-87c7-55a2b8f3cffc.roa (raw, json)
Hash identifier:          gO98gDtXOu0vlz+CErH4FQpPxtUuVdWMYOAdMDVVYw4=
Subject key identifier:   D5:F9:F2:94:1D:23:FF:38:EE:BF:42:FE:82:10:60:57:D6:E2:7C:99
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAF8826F05B21CF3E93700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da71d959-3e0e-3f29-87c7-55a2b8f3cffc.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c99::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:f8:82:6f:05:b2:1c:f3:e9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=783b787d-2c66-448f-9b20-960c6c0a59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:0a:48:0c:59:e2:d0:2c:1f:07:50:6c:0b:
                    7f:fc:60:79:6b:2b:d6:54:3f:89:81:09:b2:19:0b:
                    31:36:88:35:bc:bb:cb:26:ce:50:db:a8:6a:5d:88:
                    cd:4c:e8:e1:21:e8:06:35:40:84:c7:26:2c:97:b2:
                    d0:18:a7:3b:8a:7b:3e:72:1e:3c:d1:cb:23:2a:04:
                    00:53:20:aa:62:7e:0e:32:09:3b:eb:bc:fe:10:f0:
                    0c:43:99:f8:a1:85:a6:9e:36:da:05:e8:8e:98:2b:
                    2d:87:4e:0d:ea:32:31:82:88:2e:0e:f5:99:15:7d:
                    17:e0:0d:ee:fa:96:bc:e2:87:1a:72:5e:fe:59:1a:
                    96:40:c2:86:f3:c5:77:34:e1:e5:21:6a:54:01:39:
                    1b:c6:1f:ca:55:f1:8e:21:90:db:6a:2b:23:98:d1:
                    1a:39:4d:fb:af:9e:8f:3c:11:d6:be:35:31:82:40:
                    36:fa:ca:75:06:18:f4:63:bd:12:3c:f8:75:53:7a:
                    ad:3a:6d:31:cb:32:0a:da:a3:65:a4:f2:6d:9f:f9:
                    a7:59:8e:24:59:7b:d2:cf:34:28:b7:2d:cd:10:7c:
                    26:08:5a:10:0c:e8:10:0f:92:dd:c2:b0:82:32:3a:
                    45:d6:c2:08:4f:89:77:ef:90:77:d1:b2:73:7b:b1:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F9:F2:94:1D:23:FF:38:EE:BF:42:FE:82:10:60:57:D6:E2:7C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da71d959-3e0e-3f29-87c7-55a2b8f3cffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c99::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:aa:30:33:5d:4e:92:fa:a6:b3:4c:77:1a:7e:b4:d5:c0:
         1c:25:9e:fc:19:60:ac:65:6c:bc:06:10:d4:b3:36:5e:23:5c:
         26:dd:ba:f7:f0:ba:57:7d:86:08:5d:d1:79:cd:9f:12:df:90:
         07:cb:1c:e3:ce:3b:a5:c0:be:a9:ec:8b:95:04:ec:f3:ba:38:
         11:c3:8b:42:78:bb:bd:f9:04:34:65:a2:9f:0f:3e:1b:03:dc:
         c5:bd:f5:b4:f8:da:4c:34:e9:7a:f8:de:56:c1:9f:9b:85:f5:
         a2:6e:a2:c9:39:27:bf:15:60:b9:9a:a1:f9:ad:5c:50:a9:b9:
         e4:20:75:23:3b:86:f7:4c:72:aa:80:d1:10:b2:ec:6f:c9:e1:
         0c:bb:b2:53:b6:f4:18:e6:5d:7b:24:a1:b0:9d:d0:12:3e:23:
         c4:52:da:38:8d:00:80:77:34:80:57:eb:1d:d0:c9:d3:ad:d4:
         d0:7f:e0:6c:80:50:1b:b3:78:ef:90:ff:ea:57:03:ba:29:73:
         12:61:be:d3:6e:c4:f5:f1:da:3a:ec:78:42:84:c9:f0:a8:a1:
         11:45:c1:89:3a:42:27:53:fb:fb:a6:01:da:0b:3a:f7:10:92:
         3a:cb:5d:c8:13:ca:a5:2a:c7:13:1f:20:9f:b3:47:d9:e1:d7:
         dc:a5:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:48 2026 by rpki-client