Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa
File:                     99196f23-8f13-31d6-bed9-bd319f47e92b.roa (raw, json)
Hash identifier:          ES6hmsYNf/vCRm2nGCwB9pPf2eUrGBp+8d8Q3K393PY=
Subject key identifier:   71:44:D0:CD:A1:D5:CD:98:78:A3:76:A9:B8:DD:ED:2F:FF:47:BC:BF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584BD71EA1465AD2DDA328503E60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa
Signing time:             Wed 12 Nov 2025 23:48:13 +0000
ROA not before:           Wed 12 Nov 2025 23:48:13 +0000
ROA not after:            Tue 10 Feb 2026 23:48:13 +0000
asID:                     20115
IP address blocks:        2600:6c49::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d7:1e:a1:46:5a:d2:dd:a3:28:50:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 12 23:48:13 2025 GMT
            Not After : Feb 10 23:48:13 2026 GMT
        Subject: CN=c0b8584d-f81c-442c-b37e-1425cf312776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:bd:7a:38:e6:0a:7a:0d:19:77:9b:a4:18:
                    d6:aa:e2:2a:1e:b3:70:17:1b:07:2c:79:af:0a:9d:
                    bd:eb:8e:06:26:e0:d5:2e:ae:20:1a:d1:61:76:da:
                    40:91:26:6e:24:f9:83:9d:49:30:03:fd:11:75:23:
                    88:07:59:7f:e9:70:28:4b:ee:2a:70:8f:6f:bf:49:
                    63:26:a9:59:b0:83:0a:d3:ed:cc:aa:c9:5f:b0:a5:
                    73:d1:92:36:01:4d:97:2e:08:bb:37:68:3c:c5:77:
                    43:ca:79:06:b2:8d:94:cf:c0:0d:67:fd:01:f3:43:
                    8c:91:4c:67:81:60:56:c7:52:16:32:af:31:54:e8:
                    ce:30:e0:7b:80:12:aa:89:c8:72:67:0e:25:5e:19:
                    13:a2:47:2b:32:89:2c:c2:fe:08:72:4a:27:d1:c5:
                    d2:05:96:ce:2b:fc:af:b0:47:ad:b8:37:d9:2a:4c:
                    99:b9:cd:40:f4:c0:d2:78:46:76:d0:2b:a6:c4:fa:
                    c8:2b:27:15:0e:69:bb:35:fc:2e:65:85:3b:f2:d4:
                    c6:7f:06:1e:4d:fe:05:1b:a1:37:f1:19:75:b2:8c:
                    1d:e0:8e:72:00:67:b1:6e:db:0b:cd:eb:2d:23:13:
                    3b:6a:9e:06:fa:f8:3d:ae:04:19:40:c2:01:57:d5:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:44:D0:CD:A1:D5:CD:98:78:A3:76:A9:B8:DD:ED:2F:FF:47:BC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/99196f23-8f13-31d6-bed9-bd319f47e92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c49::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:2b:64:c8:8c:c0:fa:81:6c:b9:7e:2e:51:1e:f5:95:54:
         cd:6c:c7:33:02:b4:0c:fe:3a:09:63:0b:bd:70:d9:a3:7d:bb:
         1d:3f:15:89:40:fd:f1:27:a9:e5:18:9a:53:3b:60:b1:36:c4:
         b4:a9:0f:d6:50:e7:b5:34:89:f6:27:03:20:6d:15:97:43:d3:
         fd:1f:d5:08:73:8a:4c:97:be:c9:26:69:a9:cf:a4:d1:d6:32:
         48:d2:4a:c0:ef:ba:5d:a0:17:e7:80:4a:54:82:4d:d5:2d:30:
         e8:16:f7:71:97:3e:82:8a:df:8c:c3:82:a7:10:ed:c3:6f:d2:
         53:fa:bc:5c:16:68:9c:39:1d:1a:29:81:4a:10:20:7a:12:9e:
         9e:3a:36:e5:9c:90:3f:5f:19:91:bb:93:94:5c:f2:9d:41:e7:
         e8:07:0e:a0:e0:46:b8:48:3b:d3:12:65:24:df:e7:46:8c:68:
         7f:f9:b6:9f:7e:24:3e:88:4c:d2:c2:b6:41:d0:78:ee:09:e9:
         a2:8f:ec:91:e3:93:75:dd:df:c2:9b:50:93:bc:09:42:43:5c:
         f1:0e:93:16:4f:8c:47:f8:0c:c1:de:b7:28:b6:ff:6e:31:31:
         2d:a5:17:4e:83:ee:86:d0:7c:b3:17:0c:00:dc:89:5f:7b:d8:
         1a:42:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 03:13:07 2025 by rpki-client