Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa
File:                     99196f23-8f13-31d6-bed9-bd319f47e92b.roa (raw, json)
Hash identifier:          ZAwylOawn92W89XgEywQ2Msqohy1SiRDvwzSE4JHytU=
Subject key identifier:   39:2E:52:DA:D0:AD:22:19:44:71:B8:0E:8C:DB:59:80:C4:D3:D7:B9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E779A1FF42E781C801E58A380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        2600:6c49::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:1f:f4:2e:78:1c:80:1e:58:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=a4f54cc2-ceed-4016-befd-5040cf6cca94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:b4:a3:cc:39:60:69:ed:9b:0b:eb:ce:6c:
                    dd:76:84:07:eb:50:ba:26:f4:79:7e:9d:cf:7e:7f:
                    30:bd:f2:d8:41:76:c4:19:f8:75:3b:e9:e2:85:ae:
                    f7:1e:13:70:0d:b3:3d:5e:7d:a1:12:9d:0a:5b:c1:
                    e2:d1:dd:17:ed:94:8d:09:c2:c2:b9:94:af:a7:5c:
                    12:52:85:73:d4:2b:be:c1:40:c2:61:51:f2:1c:34:
                    8c:11:56:0b:c5:10:41:ad:67:97:90:fd:9c:87:41:
                    25:4d:11:54:23:3a:cc:5a:c7:fa:15:1e:31:6c:67:
                    fb:a0:27:e3:81:12:0d:d5:24:97:0f:97:79:7f:57:
                    c0:20:9e:b4:20:93:44:f4:b6:90:9d:e8:dc:de:5c:
                    65:69:8a:d4:fe:60:68:5d:57:8d:fa:a1:98:d1:1a:
                    4e:d4:29:43:12:76:93:86:74:17:cb:60:20:73:2f:
                    18:bf:61:1e:b3:5c:72:4f:22:07:54:27:64:11:41:
                    16:d9:c0:0a:78:cc:14:be:b0:09:d7:cb:34:8d:ea:
                    4f:8c:e0:59:4e:9b:38:80:d4:b2:e7:20:2c:fd:fd:
                    dc:04:78:e4:05:87:af:f9:65:54:8b:f0:7f:4c:1c:
                    56:62:70:0e:04:08:70:72:4e:7e:04:95:e9:b3:26:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:52:DA:D0:AD:22:19:44:71:B8:0E:8C:DB:59:80:C4:D3:D7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c49::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:ca:a2:12:40:ae:e0:dd:3e:84:8a:c4:aa:ca:bc:44:1a:
         6b:77:f8:e0:65:1c:93:e3:04:36:3d:53:dd:70:fc:51:87:51:
         9c:a5:af:c5:12:bc:74:ae:41:77:fc:18:52:ca:41:0c:53:13:
         8c:48:22:20:e7:60:dc:74:ca:3d:b5:4f:38:6a:4b:e5:58:fd:
         1a:cd:e1:26:81:c3:1b:ef:74:e7:5f:ed:90:8f:09:d0:5e:a3:
         af:38:58:f1:5b:28:24:c3:2c:ee:1b:47:c9:63:d7:5e:02:52:
         46:45:d6:47:f1:7d:ab:9b:26:b7:46:02:35:98:30:34:53:9b:
         f9:8e:8f:14:5b:f9:77:43:c2:7f:9d:04:c8:05:91:38:91:b4:
         c2:aa:75:ec:35:ab:c3:16:2a:27:3f:64:83:6c:bd:a8:8d:eb:
         1b:50:da:f5:dc:bf:1c:b1:d3:d3:f1:c9:2a:61:e6:ca:3a:5b:
         ef:8a:53:98:ed:37:a8:82:16:3c:9d:20:ac:ed:8c:92:ff:f3:
         d3:ab:e0:26:71:00:9a:93:be:63:c0:c5:6d:0b:d5:b1:db:54:
         d7:23:f5:f4:c2:6e:ce:a5:b4:69:88:dc:be:58:c0:eb:8c:37:
         8b:40:a7:47:1e:29:c4:d8:19:5e:23:a2:ec:66:be:6a:c2:68:
         61:98:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:02:05 2026 by rpki-client