Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db422959-b915-389c-ba0d-867c893f5bad.roa
File:                     db422959-b915-389c-ba0d-867c893f5bad.roa (raw, json)
Hash identifier:          A8jzxoSdo9Fx5nsVSwbVAZXT4y2z0egOtL40ZCiWQ6s=
Subject key identifier:   83:3D:7D:22:36:F4:C7:13:53:62:DE:5E:5F:DA:92:C8:CB:CD:9F:BA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B92DD406ECDE4CB46E5C7FA80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db422959-b915-389c-ba0d-867c893f5bad.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c04::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:40:6e:cd:e4:cb:46:e5:c7:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=a056751b-41a7-4aa9-8bca-90fdf25436ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:78:e9:a7:db:ed:66:3d:f7:cd:cd:29:8d:
                    e6:cf:ca:51:6b:1e:62:ec:07:71:6e:e1:ca:f8:f0:
                    59:e0:ac:0f:ad:db:44:7b:40:ae:ca:72:99:43:a6:
                    89:e2:e6:f9:b8:51:5c:14:57:04:28:66:6c:48:28:
                    7f:fe:e6:2e:e3:e5:bd:5e:50:db:32:f1:e3:7f:d2:
                    75:0f:dc:85:cd:1a:c6:a1:14:cb:93:58:2c:dc:e2:
                    c2:ae:32:29:ed:e8:d6:2e:0c:f2:4b:73:cd:14:64:
                    7e:b6:4c:92:38:1a:39:5f:db:5b:f8:79:6f:48:db:
                    9f:24:cf:5b:87:00:22:d2:fe:f1:8e:d1:83:9a:93:
                    41:0b:ec:ca:b6:a6:83:54:7e:cb:71:bc:9a:e1:a7:
                    0e:6f:08:13:3a:94:17:a1:b1:36:f4:81:7a:fc:f6:
                    b9:b2:23:da:ff:da:c8:0d:e4:cf:13:14:ae:e3:c3:
                    2b:2f:27:42:86:42:2c:fe:52:6b:a0:7a:c7:e0:bc:
                    22:4f:64:7a:76:48:b9:1f:9e:fa:03:52:4c:a0:74:
                    44:32:7d:b7:3c:36:74:3b:0d:54:5a:68:d8:c3:b2:
                    1f:f4:1d:51:92:ef:24:8f:ff:b0:d5:bb:db:be:b6:
                    7a:9d:d5:bd:4d:98:a5:b8:95:c3:85:60:64:62:6a:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:7D:22:36:F4:C7:13:53:62:DE:5E:5F:DA:92:C8:CB:CD:9F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db422959-b915-389c-ba0d-867c893f5bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c04::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:bd:93:30:b7:f5:c1:97:31:3e:44:95:37:73:76:8a:4b:
         ae:d9:5c:43:bc:c7:b3:c8:05:55:0f:49:47:44:dc:df:af:88:
         46:0e:dd:b7:82:93:db:18:56:53:95:c9:04:75:6d:e1:6a:49:
         a8:4e:29:e9:79:c7:4e:6b:0a:19:e0:df:7c:73:04:ba:00:f3:
         4e:da:85:4d:de:ab:72:56:40:b0:1f:57:5d:af:81:65:8c:c4:
         a4:3e:fc:19:25:b8:34:69:5b:dd:1d:1d:86:08:20:2d:39:70:
         9a:58:e1:49:99:31:cc:a1:2d:2b:f4:33:3e:4b:9c:dc:a8:3e:
         75:f3:bd:e4:5c:f2:a9:25:84:6b:84:39:3a:81:1e:4f:25:e0:
         b7:ba:6d:52:3d:3f:16:64:ef:c9:53:8a:89:34:6e:8c:a0:41:
         8a:9f:c2:86:1e:57:8d:b3:c2:6b:97:76:16:08:8f:2e:59:be:
         13:bc:bf:1d:5d:c2:91:56:e3:44:8a:da:fe:eb:d4:f0:c2:11:
         47:f1:34:41:d8:10:9c:2b:46:3e:ac:dc:e5:a3:04:6b:d0:d5:
         7f:5a:71:9c:61:32:42:6c:62:14:d9:15:71:0f:76:6a:f2:2d:
         bc:e2:d7:fd:36:13:bb:73:5a:bd:85:e4:8b:0e:a5:be:b3:60:
         80:84:3e:d6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuS3UBuzeTLRuXH+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
YTA1Njc1MWItNDFhNy00YWE5LThiY2EtOTBmZGYyNTQzNmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwB46afb7WY9983NKY3mz8pRax5i7AdxbuHK
+PBZ4KwPrdtEe0CuynKZQ6aJ4ub5uFFcFFcEKGZsSCh//uYu4+W9XlDbMvHjf9J1
D9yFzRrGoRTLk1gs3OLCrjIp7ejWLgzyS3PNFGR+tkySOBo5X9tb+HlvSNufJM9b
hwAi0v7xjtGDmpNBC+zKtqaDVH7Lcbya4acObwgTOpQXobE29IF6/Pa5siPa/9rI
DeTPExSu48MrLydChkIs/lJroHrH4LwiT2R6dki5H576A1JMoHREMn23PDZ0Ow1U
WmjYw7If9B1Rku8kj/+w1bvbvrZ6ndW9TZiluJXDhWBkYmpRZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIM9fSI29McTU2LeXl/aksjLzZ+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGI0MjI5NTktYjkxNS0z
ODljLWJhMGQtODY3Yzg5M2Y1YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsBDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNbb2TMLf1wZcxPkSVN3N2ikuu2VxDvMezyAVVD0lHRNzfr4hGDt23
gpPbGFZTlckEdW3hakmoTinpecdOawoZ4N98cwS6APNO2oVN3qtyVkCwH1ddr4Fl
jMSkPvwZJbg0aVvdHR2GCCAtOXCaWOFJmTHMoS0r9DM+S5zcqD51873kXPKpJYRr
hDk6gR5PJeC3um1SPT8WZO/JU4qJNG6MoEGKn8KGHleNs8Jrl3YWCI8uWb4TvL8d
XcKRVuNEitr+69TwwhFH8TRB2BCcK0Y+rNzlowRr0NV/WnGcYTJCbGIU2RVxD3Zq
8i284tf9NhO7c1q9heSLDqW+s2CAhD7W
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:38:49 2025 by rpki-client