Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01594c8d-7e63-371f-8bb8-1d84239bcc6f.roa
File:                     01594c8d-7e63-371f-8bb8-1d84239bcc6f.roa (raw, json)
Hash identifier:          3DxZm2F/DzUVK05ZzHiWcogI0sTnfgmsIlOZ/GC5elQ=
Subject key identifier:   1B:B2:2D:56:5E:65:0F:C5:CC:B7:5A:20:B5:99:3C:8A:8A:07:55:99
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DEAC4D7BA70788E6FE0C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01594c8d-7e63-371f-8bb8-1d84239bcc6f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ea:c4:d7:ba:70:78:8e:6f:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=841aff7d-0f5c-4dcb-92a4-c09bce5313bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:37:b7:27:a8:0c:26:03:e1:ea:b1:a0:f1:
                    7a:7a:dd:9d:39:77:95:7d:90:ca:d7:5b:04:8f:39:
                    a7:8d:8b:e5:a5:c9:d9:3d:a2:31:56:08:03:8e:53:
                    a7:88:ea:bc:f5:4d:4b:35:3a:b2:85:f2:89:06:3c:
                    69:fb:42:1a:48:a8:2c:e4:bd:af:13:24:5c:87:cd:
                    ab:27:88:b9:e8:77:9d:31:6a:e9:a7:2f:d7:d7:a5:
                    b2:78:67:b0:6d:fd:cf:f2:a8:cf:5b:29:f6:68:45:
                    a9:c8:e6:be:d3:9f:f7:67:ca:fc:49:3d:e9:ab:b8:
                    c1:61:d1:7b:46:3f:c3:81:d6:79:bd:3e:2a:0c:b1:
                    ea:46:53:ed:46:70:d7:a8:6c:76:a5:a1:48:97:c1:
                    12:b7:c7:7e:06:7d:31:28:7e:af:4e:ee:18:ca:b7:
                    f3:d5:67:e4:da:85:6c:0b:2e:29:a4:8d:f5:86:c7:
                    45:11:30:8b:95:90:1e:18:12:98:51:0a:50:b0:52:
                    e3:27:b4:70:04:79:45:64:ba:39:e1:82:b3:07:67:
                    e4:bc:61:9c:d3:9f:2d:45:85:fb:91:20:6f:04:32:
                    27:5e:f0:c8:8b:e9:ec:55:2d:3e:e3:a1:0a:30:44:
                    ce:e4:64:20:79:a3:5e:e6:12:42:a3:22:36:e5:70:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:2D:56:5E:65:0F:C5:CC:B7:5A:20:B5:99:3C:8A:8A:07:55:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/01594c8d-7e63-371f-8bb8-1d84239bcc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:0a:5a:25:9a:b5:18:19:92:1e:0f:c8:66:08:1f:59:1c:
         4f:2c:1d:a0:d7:66:d3:08:c5:0b:f0:36:4d:34:f0:97:69:05:
         c1:23:5c:cb:b5:2f:05:e7:2b:ae:7d:5e:6c:d1:30:45:55:3c:
         a8:cd:bf:9a:bf:a5:d5:54:98:d3:f5:e7:dc:4f:89:c6:9f:bb:
         0e:db:63:f1:6d:e2:91:c9:3b:bc:73:18:3c:dd:5a:51:f2:1d:
         3d:ad:53:fa:ed:94:8d:29:8c:04:fe:23:0c:57:df:80:90:30:
         83:e1:e6:04:ed:cb:71:81:af:e9:8b:4d:96:f2:a8:21:7c:c4:
         1b:d2:38:06:a8:f8:4d:36:b2:a6:94:35:c4:11:75:fb:77:09:
         05:0e:65:25:56:eb:68:42:72:5d:5f:0e:72:ff:0d:65:75:66:
         a1:87:29:8e:e0:a4:1a:81:e9:91:21:1c:fe:58:61:3a:ac:0b:
         30:8f:e6:5e:4a:f2:47:7e:80:41:76:58:b6:fa:e6:8c:33:f1:
         19:91:e9:27:df:5a:e7:bf:31:fb:9f:2e:63:12:67:17:92:64:
         24:37:bc:44:29:60:6c:82:94:a7:84:4a:75:95:ed:97:15:44:
         64:e7:7d:06:4d:19:08:90:66:c1:39:1c:c2:e1:1e:c1:50:7a:
         ce:0d:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:24:24 2026 by rpki-client