Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c9ff5f1-0739-345f-b3be-b0c4705cbbb9.roa
File:                     7c9ff5f1-0739-345f-b3be-b0c4705cbbb9.roa (raw, json)
Hash identifier:          imhbwx79npq21GI69elXk5UQGCPV1dsNDsQRUohtj8Q=
Subject key identifier:   80:91:1E:C3:A6:6B:EF:13:C8:9D:62:7D:E0:72:7E:4D:47:F8:CC:90
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584ED431F57701C9DD869DB36980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c9ff5f1-0739-345f-b3be-b0c4705cbbb9.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c39::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f5:77:01:c9:dd:86:9d:b3:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=de902d35-2412-4485-a7ad-dba99a9be6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:4e:fc:d1:27:14:a1:43:cc:2a:c0:4a:f9:
                    55:c2:35:b8:a2:a4:56:c2:03:a1:3d:f9:3b:7a:10:
                    12:37:5b:f9:c2:65:58:62:66:a4:17:02:28:6e:e6:
                    41:0f:9a:e2:8f:71:4e:c5:5f:e9:96:46:e8:50:73:
                    a9:22:c2:bf:99:9a:6f:ab:37:f3:80:f4:27:1d:73:
                    fd:08:4e:38:e7:eb:a2:b5:5e:66:87:69:bb:47:8b:
                    0c:29:e1:55:b2:c2:3f:4f:e5:65:be:45:a3:6c:7d:
                    6c:c7:57:a5:85:7e:9c:2e:67:4c:41:41:f0:a7:8e:
                    86:a2:1d:bc:22:e7:47:5c:8c:30:21:04:07:f1:22:
                    6a:b6:de:6e:47:7a:db:b8:da:5e:38:69:13:d7:f6:
                    69:e5:6d:22:b1:88:3e:3e:70:f4:ca:c8:3c:b7:f0:
                    33:d6:38:e5:59:96:d7:f6:75:c1:d9:a4:e7:52:6f:
                    c4:fc:36:f3:99:fa:60:cb:73:cf:39:90:05:57:28:
                    80:64:fa:ee:09:ed:bf:73:f2:7a:57:1e:09:56:05:
                    d9:40:49:93:0f:3d:d9:f3:0a:19:6f:1d:d3:a5:49:
                    43:6f:fd:af:46:a8:da:99:d6:74:a9:42:4e:43:ea:
                    36:dd:6a:4a:8b:4b:21:65:cd:70:3e:2a:8f:31:ce:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:91:1E:C3:A6:6B:EF:13:C8:9D:62:7D:E0:72:7E:4D:47:F8:CC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7c9ff5f1-0739-345f-b3be-b0c4705cbbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c39::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:5c:0d:10:59:a2:02:d3:9f:63:3e:eb:02:3d:3f:4b:a9:
         b5:c7:d9:93:aa:93:18:14:60:42:4e:7c:dc:2d:56:8b:8f:33:
         c3:da:43:11:af:80:42:82:75:a6:54:2c:86:44:18:1f:21:47:
         3a:2b:28:fd:e2:df:d7:1e:99:86:71:ed:5d:bd:0b:05:ff:2e:
         32:ac:c4:7c:bc:51:e9:a4:6b:e1:23:1a:19:56:b7:60:b9:01:
         47:a9:80:f2:6b:91:24:1e:16:f8:23:14:c0:97:e4:3b:fb:96:
         ed:ef:33:29:1a:bd:ae:b5:0a:e7:ad:07:de:51:dc:a5:14:47:
         fe:dc:81:9c:b6:83:00:79:89:12:4d:6d:1d:50:6a:4a:5a:b9:
         8f:b4:39:39:94:1d:b8:16:a6:77:aa:15:48:32:02:00:10:3f:
         95:27:3c:47:6a:1b:50:29:d2:31:a5:ee:a5:af:55:13:1c:b7:
         af:b9:4f:7c:04:de:88:e0:04:a3:54:73:bd:e2:43:a8:f2:a0:
         57:84:75:36:83:48:f0:00:e0:bc:db:b3:dd:a1:67:ec:7b:f7:
         44:56:05:a3:c6:c1:a5:e1:83:3b:67:50:76:24:d6:f5:71:4f:
         76:a4:53:d6:c7:44:00:dd:1e:68:76:43:8b:5c:c2:36:5b:29:
         fb:e3:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:27 2026 by rpki-client