Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fd052b6-d4b9-3b28-846a-8b6c142ba3da.roa
File:                     5fd052b6-d4b9-3b28-846a-8b6c142ba3da.roa (raw, json)
Hash identifier:          nem16Weh3o9eMVE6pHLWG7hFnWH54noXkIVz4h2qOQ4=
Subject key identifier:   D6:AA:98:CA:F2:E5:CC:AD:E3:F1:C1:1F:FF:96:32:D3:D0:A8:54:3B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF024B3A78549D2E997C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fd052b6-d4b9-3b28-846a-8b6c142ba3da.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c0c:11d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f0:24:b3:a7:85:49:d2:e9:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e2e4a19a-d8dd-4fe3-946d-56b466b062b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:95:b4:74:23:7c:d4:3e:60:02:b1:fc:87:
                    97:fb:9e:cc:de:7d:e6:47:29:dc:98:f9:95:7c:2b:
                    27:20:ca:24:8c:00:e5:62:5a:b1:4f:ff:2e:49:ed:
                    bb:7f:c9:0c:44:59:a6:fc:2e:ec:f8:ca:6d:72:15:
                    cb:62:e3:80:65:6a:e3:96:b2:00:21:4d:1b:3e:7f:
                    4e:38:d7:96:36:7f:9d:b5:c7:44:30:b8:d6:52:b1:
                    3a:cf:1b:1b:64:5f:eb:13:44:16:50:62:4d:ed:3b:
                    11:f4:b6:02:e1:d0:bc:d0:25:0e:8a:20:dd:6d:02:
                    d0:a3:30:59:32:9c:9b:b6:8f:9c:f1:9c:2f:1a:5b:
                    36:f1:78:36:ce:b0:dd:b4:fb:98:f8:e5:d4:f1:9c:
                    c4:de:7c:fe:45:c7:68:cb:6b:79:71:e5:63:7c:7b:
                    94:a3:bd:02:d0:12:04:5d:5c:a1:88:82:1f:e4:f2:
                    8f:cb:bc:09:80:c5:8a:ec:d5:ae:96:ff:5e:39:96:
                    2f:2d:81:e6:13:f2:67:37:b0:ea:1b:aa:52:ab:e1:
                    3d:42:3c:9e:84:0b:95:cd:c9:54:90:01:1e:e5:a7:
                    2c:71:43:f1:ec:9d:74:cd:da:a8:c9:92:b0:a0:02:
                    f2:ae:28:8c:ca:12:1a:13:ad:9b:c7:ff:98:ac:e7:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:98:CA:F2:E5:CC:AD:E3:F1:C1:1F:FF:96:32:D3:D0:A8:54:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5fd052b6-d4b9-3b28-846a-8b6c142ba3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:11d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:33:ae:5d:03:17:05:3f:89:a5:1d:f4:bd:93:ae:5e:79:
         87:2b:27:1a:69:a8:3e:36:3d:a9:11:d3:68:e9:64:10:d0:f2:
         e5:37:d2:7a:e5:d6:ce:a4:92:f3:ff:f6:33:5c:50:cd:ef:d3:
         70:58:98:ff:67:2e:5a:11:88:bb:8a:9c:78:a3:ca:5f:68:70:
         ea:ff:31:99:31:d6:c8:c8:01:06:df:74:4a:5d:a2:50:ea:7c:
         0a:24:be:03:dc:2b:87:c9:dd:ca:d5:79:28:5d:51:30:c0:51:
         db:d5:ff:78:b0:b8:b2:88:dc:2c:08:da:0d:6f:fc:82:89:5c:
         96:5d:fc:bc:fa:27:d7:50:dc:ad:f6:fb:68:44:aa:83:cb:31:
         1a:de:06:af:6d:7c:a3:49:6d:22:db:0c:d6:14:86:33:fa:46:
         7b:02:6d:62:9b:01:14:28:6c:6b:4d:dd:26:f2:c1:f5:67:b5:
         05:bb:b6:1b:d7:0d:63:ab:28:e1:d3:81:aa:ca:e2:ae:4e:9b:
         a0:2c:2a:03:bb:d0:de:e7:c6:ca:d6:cf:49:ee:d7:5a:85:eb:
         b6:48:1a:4b:fb:24:5a:ed:a5:13:7e:0d:8f:b9:8a:da:d3:f5:
         71:31:41:85:82:1d:ba:e8:6d:1a:4c:42:65:5a:a9:23:44:65:
         c2:76:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:43:13 2026 by rpki-client