Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd9e1929-3ec8-30db-a2b6-26a722ed4eb9.roa
File:                     dd9e1929-3ec8-30db-a2b6-26a722ed4eb9.roa (raw, json)
Hash identifier:          3DAplypwbniPbQ290mVZbFfQv+ISmw7zSBHSM+a71ns=
Subject key identifier:   40:3F:C4:2C:1F:66:F7:CD:10:B5:A3:89:CF:57:7C:9F:FB:38:B6:45
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AD5A88264F81561CE85865E00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd9e1929-3ec8-30db-a2b6-26a722ed4eb9.roa
Signing time:             Tue 12 Aug 2025 18:27:28 +0000
ROA not before:           Tue 12 Aug 2025 18:27:28 +0000
ROA not after:            Mon 10 Nov 2025 19:27:28 +0000
asID:                     20115
IP address blocks:        2600:6c2f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:a8:82:64:f8:15:61:ce:85:86:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 12 18:27:28 2025 GMT
            Not After : Nov 10 19:27:28 2025 GMT
        Subject: CN=0b2d7c4f-4f2f-415e-87ff-854762075f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:aa:13:61:f9:df:dc:7a:09:b1:c5:aa:57:
                    9a:3f:2d:89:bf:a1:c3:d1:28:94:e9:d5:07:b7:82:
                    75:5e:54:ce:e4:1b:80:1f:0d:3b:d9:5a:10:83:59:
                    55:73:56:a0:c6:7a:79:9a:a2:51:a0:19:49:99:da:
                    b5:8f:80:e5:07:90:76:6f:10:00:5b:55:0b:97:ce:
                    cc:07:94:2a:6e:ba:60:ce:21:39:c6:ce:5d:89:85:
                    1e:55:0c:06:e2:07:db:d5:06:6b:ab:8e:76:52:4c:
                    53:98:72:2a:46:74:65:eb:79:8e:72:f9:ee:aa:47:
                    c8:80:56:21:71:87:87:96:cc:d5:1d:e6:55:ac:0c:
                    f0:fe:b7:63:b0:91:c5:c5:31:2b:9a:d4:4b:bc:f7:
                    4f:d8:aa:67:45:55:f8:cc:91:f3:97:5e:09:cf:8f:
                    07:ea:13:60:13:9a:fa:6e:10:37:6b:23:72:13:57:
                    bd:2d:be:d7:c6:1f:fe:4e:a8:67:60:32:13:91:93:
                    28:04:09:2b:2b:39:45:d7:99:fa:37:d3:15:63:d6:
                    68:fe:f1:51:83:c9:5b:10:9e:23:82:a7:b5:16:46:
                    6e:35:c7:f3:ed:a9:80:54:fb:08:7f:ac:94:9c:71:
                    10:11:50:01:0f:2f:3c:74:8e:db:35:20:52:e5:a6:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3F:C4:2C:1F:66:F7:CD:10:B5:A3:89:CF:57:7C:9F:FB:38:B6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dd9e1929-3ec8-30db-a2b6-26a722ed4eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c2f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e0:39:1d:ec:a1:c8:a2:20:c7:0f:b0:b4:7a:83:74:b2:87:
         e4:94:1c:bf:dd:09:85:af:2f:1e:fc:88:82:c8:6d:b2:6c:ab:
         fa:26:87:ef:4e:8b:a9:b1:60:61:4a:86:b2:49:20:a7:d8:8e:
         dd:df:98:86:68:3e:6d:f0:86:c0:6e:01:d1:54:8c:6a:18:3f:
         ed:c7:f3:3c:eb:34:cf:4f:e6:8f:bd:8e:a0:87:95:72:ae:71:
         5d:66:92:46:63:0b:a6:c8:ea:3f:f8:18:84:a3:d0:71:e2:69:
         84:06:7a:1e:b3:97:6b:0e:d5:47:62:7c:68:34:c1:b1:36:e4:
         1a:8d:39:68:fc:17:84:79:97:54:1c:b7:10:26:d5:84:39:7a:
         e7:d6:ee:7d:85:c3:b6:77:16:2c:9b:60:fb:13:ca:f6:73:c3:
         0e:1d:7f:8c:3c:bb:dc:4e:5e:73:e3:a9:02:a3:d2:ef:b3:55:
         ae:3d:1f:8f:10:8f:7f:fd:b4:69:ef:1d:61:1d:e8:16:d3:59:
         b2:e9:02:62:ab:85:d1:03:09:14:70:74:16:20:8c:35:dd:d8:
         be:bc:6c:f2:f2:ed:0a:0c:f5:8e:89:4d:b0:18:18:b7:34:4e:
         7c:66:d4:bb:e2:51:bd:cf:2d:07:68:29:98:6a:81:5c:ee:73:
         a6:e7:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:47 2025 by rpki-client