Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa
File:                     4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa (raw, json)
Hash identifier:          7QQUJeyST5g13kjSI85WxPqVsQUO2wpivty0HsC01jM=
Subject key identifier:   CC:AC:D7:2F:69:3A:85:ED:AE:64:A6:29:FB:EF:25:6C:8F:78:ED:46
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A86DB73DF2B248A5D9C5455C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9420::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:73:df:2b:24:8a:5d:9c:54:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=ccf41cb7-8a54-44a4-854a-93b8a08d3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:30:76:b9:e6:fd:83:e4:92:9c:49:08:b4:
                    df:9b:33:9b:fe:d2:ed:86:34:aa:89:58:4a:6f:ec:
                    fd:65:58:e4:df:66:b3:8a:64:99:af:22:65:5f:17:
                    e3:8d:c7:66:06:54:b9:1e:9a:60:1e:14:81:63:ed:
                    73:d8:11:75:48:e6:1e:05:01:87:a8:10:cf:a2:22:
                    03:c9:47:06:ca:09:fd:e2:08:19:be:b9:ca:8e:e9:
                    66:b7:97:c3:f4:a8:fc:6f:8b:77:61:a0:c1:da:32:
                    e8:1f:dd:be:07:72:ba:91:6d:c2:9b:6e:74:3c:67:
                    b0:9e:d4:1b:16:bc:0c:94:03:c3:da:1d:c8:36:0d:
                    00:2c:ab:d1:92:8a:9a:94:7e:c0:10:73:83:05:f8:
                    a7:06:f7:85:3c:08:c9:4f:5c:b6:37:96:92:f5:a6:
                    5f:6e:d8:ca:16:e5:b7:ec:b0:06:be:cf:d5:2f:d1:
                    3d:2a:a3:1f:54:34:bb:0b:54:66:f8:58:9f:78:e5:
                    8c:d8:37:e0:8d:5e:cb:fb:7b:7a:08:18:d7:88:94:
                    c5:bc:0b:3c:bd:84:5a:eb:93:62:13:51:4d:3a:52:
                    1f:8c:68:41:29:cd:fc:97:9f:f2:bc:8c:46:12:7e:
                    86:d6:71:1f:38:9b:e6:51:0f:4d:d7:22:e0:99:b0:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AC:D7:2F:69:3A:85:ED:AE:64:A6:29:FB:EF:25:6C:8F:78:ED:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4627ebd9-5b23-32a2-97ad-0d5fa546f740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:20:dc:c1:56:75:f0:41:b7:59:8f:f4:a7:98:fc:f6:aa:
         37:98:4e:1a:d0:b2:13:d3:42:6c:7b:62:22:94:a4:e3:26:70:
         45:04:26:73:91:ec:04:bd:c7:85:8c:a7:c4:cf:fb:2d:b3:ab:
         45:54:7d:1b:f9:f8:b7:c7:30:0f:e8:57:0d:60:c0:e0:30:9c:
         ff:da:a5:01:81:57:77:84:f4:78:dd:ac:99:c7:dc:cb:97:5b:
         1b:d1:37:46:97:7b:0d:e4:a7:8a:61:e7:e1:7b:9c:33:11:f1:
         66:e8:f8:c6:57:ee:cc:12:ca:f2:a7:7f:4e:71:e9:76:34:54:
         2b:b3:02:08:4d:f6:df:a5:33:ed:fe:ff:78:ae:6e:7c:40:61:
         aa:15:ae:79:09:38:5f:4e:b4:9e:1b:8d:d1:27:31:78:fe:4b:
         b8:03:86:8f:f5:f4:e4:1d:f9:76:53:c9:cc:86:54:7e:cb:98:
         dc:92:56:2d:be:f3:8b:14:28:16:f9:cc:ec:bc:e5:70:3b:e1:
         b1:c0:d1:ce:20:fb:3a:76:dd:91:03:13:42:32:b8:0c:b0:e7:
         c4:cd:14:15:91:09:23:f8:fe:fd:ee:d6:43:ef:29:4d:54:ae:
         ed:56:3a:d5:13:84:8d:02:6b:c1:fb:44:10:30:55:7c:af:b2:
         0f:21:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:18:25 2025 by rpki-client