Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883b6f25-2b1b-37c2-9e2c-69efa50a225e.roa
File:                     883b6f25-2b1b-37c2-9e2c-69efa50a225e.roa (raw, json)
Hash identifier:          DXOkHnZwzWCNlXzgqKIa6XpWq7bHmC7PXCAO2vycZSo=
Subject key identifier:   80:48:18:94:9D:1B:47:97:51:BB:7D:86:74:C0:7D:0E:FD:27:17:66
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37236D81AAB67B56B8D5880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883b6f25-2b1b-37c2-9e2c-69efa50a225e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        2600:6c0c:21d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:36:d8:1a:ab:67:b5:6b:8d:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=25e831c3-c7b5-4ea3-8c31-74521afbd92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:06:f5:8e:4d:3f:e0:e1:2e:79:96:a7:a8:ff:
                    21:35:25:99:2c:64:b7:76:45:13:50:4d:49:87:9c:
                    50:c0:ef:b3:59:de:db:ba:21:e3:98:c9:ab:db:e2:
                    7c:b1:ee:9d:dc:96:a2:22:f7:ab:0c:2d:f5:60:77:
                    2c:a9:3b:da:e4:ae:25:54:28:c2:40:35:52:da:cf:
                    dd:ea:ca:10:d4:8d:92:9a:21:e5:66:69:49:de:81:
                    37:13:11:7c:63:61:6c:70:ea:c7:6c:fc:38:45:72:
                    63:89:e4:65:ad:66:c3:79:c6:8c:82:ba:79:05:e5:
                    f8:53:31:0b:f0:47:ae:c4:23:fd:e9:b4:aa:d2:48:
                    cd:84:0a:a6:9a:66:bb:7d:3a:ce:24:8e:ab:4e:f3:
                    62:5f:f0:b5:b2:04:27:57:48:74:da:c7:50:6b:75:
                    c1:85:5b:ec:b3:c3:9e:1f:b0:78:e0:88:a2:1f:1f:
                    ee:ae:f7:78:c0:57:58:45:eb:9d:92:5f:ea:6a:97:
                    8f:00:aa:f8:7d:7e:e9:61:83:cc:01:b4:2f:20:fa:
                    57:ca:66:94:47:04:67:00:e0:90:6d:f3:3b:6d:71:
                    35:47:2f:ee:ec:6e:f0:e7:63:1a:d0:8c:3a:7a:81:
                    9a:44:4d:b6:8b:e0:a8:b7:1f:d6:da:2c:fb:e9:a0:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:18:94:9D:1B:47:97:51:BB:7D:86:74:C0:7D:0E:FD:27:17:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/883b6f25-2b1b-37c2-9e2c-69efa50a225e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:21d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:e1:5b:56:e6:52:36:33:21:53:50:92:2c:0e:9d:33:09:
         6a:be:ba:19:3a:84:28:0d:af:9c:7f:88:dd:82:5b:42:f8:b0:
         72:4f:e9:91:13:5a:cd:d9:90:bd:9f:4c:d0:8d:e0:55:7f:9c:
         e5:99:bb:d6:ea:2b:81:d2:8f:d0:6d:10:f0:03:f4:69:bf:1c:
         71:a9:4b:8b:4b:5b:27:e0:dd:18:13:72:f8:98:81:d1:e4:8d:
         02:7f:a3:cb:eb:73:44:5a:e6:65:f5:5a:e5:92:9b:03:f6:03:
         74:1a:7a:a3:07:b3:d1:eb:d9:b7:b8:99:44:5b:05:8d:94:52:
         00:bf:9b:c1:1d:f5:3c:74:a7:dd:ac:9e:57:50:77:81:d2:b6:
         31:e8:93:79:ce:3f:1a:1b:e4:5b:72:4d:1e:af:27:72:11:26:
         7b:6a:58:8b:53:90:95:cd:c0:8f:55:05:7e:9d:c3:a7:c8:ab:
         a6:50:79:95:fb:09:0d:4c:3f:2f:22:1b:b1:02:39:e3:6e:f5:
         d0:7f:1d:04:7f:32:24:02:02:8c:f1:fd:f9:61:88:a2:68:67:
         3d:22:05:d7:4e:f1:79:d6:3c:b2:81:bd:db:92:08:e0:27:ca:
         6b:81:10:49:cb:60:6d:f0:74:de:76:f1:d8:e9:51:b6:b9:a8:
         ea:80:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:14:45 2026 by rpki-client