Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9dc2bd48-b125-3430-93da-6fecfad72ac6.roa
File:                     9dc2bd48-b125-3430-93da-6fecfad72ac6.roa (raw, json)
Hash identifier:          9cZ0333IeoxjNJlVFk76bnMJ4bK4fbXFqnR2PF4eqbQ=
Subject key identifier:   16:62:4A:D8:2C:B4:CF:3F:71:24:54:D3:24:3B:8D:53:34:F9:87:9A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E5DA5DB7B016D0B7A8F00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9dc2bd48-b125-3430-93da-6fecfad72ac6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c0d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:5d:a5:db:7b:01:6d:0b:7a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=00425551-3bbd-4980-9abd-91645910e916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:d5:d1:7c:d9:77:21:ae:d3:d1:14:cd:58:
                    58:80:fd:44:41:97:4c:cf:03:d1:ea:4e:40:84:41:
                    79:43:74:90:b3:eb:07:92:92:79:07:59:02:a4:43:
                    da:66:9f:61:86:d1:6e:7f:cf:7c:37:26:f4:36:da:
                    24:20:a4:85:bb:62:54:6a:24:42:0b:5b:38:d7:84:
                    c6:1f:93:08:4d:2c:bb:e2:40:47:87:37:0d:cf:35:
                    7a:57:46:c9:e6:9f:06:53:8f:7e:68:00:f5:59:92:
                    3a:f4:bc:1c:b0:9a:d7:6d:bc:a2:2d:96:1a:77:e6:
                    fd:03:27:17:86:4d:ab:62:fb:42:15:19:0c:1c:d2:
                    5b:51:0a:a5:e8:b9:3a:d7:8d:24:53:09:a7:18:9e:
                    00:ba:05:65:28:60:35:1b:e7:81:d5:a0:46:55:e6:
                    e5:12:dc:73:a4:60:9b:e1:52:89:d3:fd:fa:d6:d8:
                    3c:19:07:8b:3c:ad:ce:e6:6b:20:82:58:c5:c1:fe:
                    6a:10:a9:cb:ad:64:05:f5:76:4e:09:62:60:fb:1e:
                    70:86:ba:4a:a2:18:4b:de:4c:b6:59:cd:d8:91:dd:
                    6e:06:64:4b:b2:87:14:bb:e5:1b:e8:90:90:84:6d:
                    78:45:6e:67:83:aa:41:d2:32:c3:89:67:58:a9:1d:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:4A:D8:2C:B4:CF:3F:71:24:54:D3:24:3B:8D:53:34:F9:87:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9dc2bd48-b125-3430-93da-6fecfad72ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:43:2c:c0:10:b7:25:38:0c:73:a8:ad:35:54:e2:31:88:
         1f:9b:60:ac:66:26:cf:56:4c:51:b2:6b:a0:98:eb:ca:7c:29:
         f8:e6:97:da:6a:51:97:a4:54:fb:23:33:8d:3f:97:7b:5c:41:
         e9:aa:7e:a2:a5:52:c3:aa:a1:07:57:3d:60:17:88:60:43:5a:
         ae:fe:9b:5b:85:f1:49:27:23:41:3a:d6:ce:48:4a:67:af:b5:
         a4:bc:4d:9e:d6:08:94:f4:09:93:7d:54:81:fe:09:2c:ca:2e:
         a7:8c:f5:be:c7:5b:92:8d:1f:48:e1:5b:1d:96:40:fe:50:42:
         c6:14:7c:38:4c:b0:64:84:76:dc:2d:e0:69:2f:78:01:f8:4f:
         7b:06:a2:55:f4:1d:6d:94:6a:51:56:66:5e:a5:3e:61:15:6b:
         f9:ae:c3:f2:d8:5a:0d:58:33:7b:57:b5:dd:9e:7c:74:e5:0e:
         a0:eb:af:e1:9c:12:7b:89:6f:c4:b2:a8:46:96:76:1f:a6:3c:
         2e:72:47:99:c7:56:cf:96:76:d0:dc:b4:5d:08:6b:89:87:44:
         19:12:ee:38:c6:ba:37:03:a2:ea:2e:ba:24:4c:2c:b5:33:ea:
         a7:98:9a:5e:f7:e0:79:84:9f:b4:f9:41:30:a5:f0:d6:85:f9:
         40:35:58:74
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9lXl2l23sBbQt6jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MDA0MjU1NTEtM2JiZC00OTgwLTlhYmQtOTE2NDU5MTBlOTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXTV0XzZdyGu09EUzVhYgP1EQZdMzwPR6k5A
hEF5Q3SQs+sHkpJ5B1kCpEPaZp9hhtFuf898Nyb0NtokIKSFu2JUaiRCC1s414TG
H5MITSy74kBHhzcNzzV6V0bJ5p8GU49+aAD1WZI69LwcsJrXbbyiLZYad+b9AycX
hk2rYvtCFRkMHNJbUQql6Lk6140kUwmnGJ4AugVlKGA1G+eB1aBGVeblEtxzpGCb
4VKJ0/361tg8GQeLPK3O5msggljFwf5qEKnLrWQF9XZOCWJg+x5whrpKohhL3ky2
Wc3Ykd1uBmRLsocUu+Ub6JCQhG14RW5ng6pB0jLDiWdYqR2AEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBZiStgstM8/cSRU0yQ7jVM0+YeaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWRjMmJkNDgtYjEyNS0z
NDMwLTkzZGEtNmZlY2ZhZDcyYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsDTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAX7UMswBC3JTgMc6itNVTiMYgfm2CsZibPVkxRsmugmOvKfCn45pfa
alGXpFT7IzONP5d7XEHpqn6ipVLDqqEHVz1gF4hgQ1qu/ptbhfFJJyNBOtbOSEpn
r7WkvE2e1giU9AmTfVSB/gksyi6njPW+x1uSjR9I4VsdlkD+UELGFHw4TLBkhHbc
LeBpL3gB+E97BqJV9B1tlGpRVmZepT5hFWv5rsPy2FoNWDN7V7Xdnnx05Q6g66/h
nBJ7iW/EsqhGlnYfpjwuckeZx1bPlnbQ3LRdCGuJh0QZEu44xro3A6LqLrokTCy1
M+qnmJpe9+B5hJ+0+UEwpfDWhflANVh0
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:34:35 2026 by rpki-client