Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ba8aa59-20f7-308f-a6b1-bf7abab4b7ce.roa
File:                     3ba8aa59-20f7-308f-a6b1-bf7abab4b7ce.roa (raw, json)
Hash identifier:          Mg6wkXf/p4QRiGhPBjd2sbbleKaAzg87GjtrOvhhr5E=
Subject key identifier:   8D:1B:F2:CA:FF:66:2E:73:E1:36:0B:9E:5B:5F:49:67:6F:AF:9A:E4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E09CB341FFA55D53D31818080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ba8aa59-20f7-308f-a6b1-bf7abab4b7ce.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     23222
IP address blocks:        2600:6c4f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:34:1f:fa:55:d5:3d:31:81:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=22a7fcf4-b80e-426e-94cc-0274dc98e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:eb:7f:6c:27:c1:b0:88:62:98:98:98:df:
                    59:de:94:aa:ad:75:43:98:0a:a3:f7:04:cc:4e:8b:
                    53:04:aa:a3:19:a0:73:be:28:17:c6:c0:0e:ec:6b:
                    06:2d:30:c6:29:e4:b7:8e:20:1f:87:f7:38:f9:be:
                    9c:87:2b:31:9b:5b:38:58:7e:f3:6e:db:b3:9e:dc:
                    2b:24:a7:22:0a:32:0b:ba:22:9f:5a:13:76:a1:03:
                    ca:05:03:07:ec:72:2e:28:a1:b1:da:54:47:81:a4:
                    38:1f:e5:a1:71:0e:26:aa:5a:f9:31:10:43:ed:5b:
                    64:45:89:57:63:68:d6:8a:09:4b:70:51:e7:c8:eb:
                    9b:a7:25:80:ff:84:eb:36:f9:5a:9a:db:27:70:f9:
                    02:7a:7b:19:d2:a0:2c:ec:b4:a5:5c:53:70:fb:40:
                    f8:7b:ae:9b:44:85:62:01:64:14:f3:31:b5:8d:55:
                    47:6b:cb:ab:70:4d:59:98:d1:c2:77:29:1f:b9:c8:
                    40:91:8b:36:b7:03:1f:67:a0:5c:8a:b6:09:c4:03:
                    5c:88:26:c2:50:bc:4d:1a:35:08:75:73:44:a7:38:
                    e8:47:3c:00:c9:b3:d5:47:3e:0d:a8:b1:aa:88:bd:
                    57:86:2a:3e:a5:5d:5c:87:15:10:bc:12:28:e4:d9:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1B:F2:CA:FF:66:2E:73:E1:36:0B:9E:5B:5F:49:67:6F:AF:9A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3ba8aa59-20f7-308f-a6b1-bf7abab4b7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c4f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:04:18:2e:d0:13:6d:c9:3d:d9:1c:6a:a8:cf:4b:c7:04:
         1a:cf:d3:ed:e6:65:be:31:d0:78:6a:ef:cc:66:d3:cf:e1:ef:
         f3:14:5e:54:73:bf:c6:eb:c7:d4:a8:03:78:fa:ad:61:be:7a:
         12:9a:1a:d8:ff:75:56:dc:0e:17:12:a6:45:63:aa:bb:10:69:
         a5:22:82:60:6e:c9:3d:fb:c4:29:6a:46:cc:7f:21:4f:d2:6c:
         08:55:67:81:7f:d7:f5:6c:7e:52:54:c2:82:8e:28:eb:24:10:
         6d:e4:05:e6:ba:5f:8d:e2:04:16:2b:97:60:7f:39:e8:dc:1c:
         80:4f:4b:c1:b6:00:29:c0:bb:fb:25:b8:a3:28:04:08:12:39:
         e8:08:9a:19:99:8d:ad:ae:7e:3d:ac:8e:30:2f:e4:a0:33:d5:
         81:c8:b5:8f:31:d8:8a:12:72:3d:e2:65:e6:8b:95:c6:c6:55:
         73:d2:68:96:f2:8c:f1:23:b3:93:b3:1c:b0:5a:36:92:a8:a6:
         63:cb:8e:99:d8:9e:b4:5c:ec:1c:dd:b5:28:aa:dc:f4:57:84:
         4b:a7:79:51:c9:8d:04:8c:2f:b1:d2:e9:f6:b8:92:02:ec:56:
         4a:64:9b:92:3a:70:46:a3:12:ab:81:5f:49:cc:4d:6c:d5:e7:
         41:fd:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 17:31:17 2026 by rpki-client