Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa
File:                     c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa (raw, json)
Hash identifier:          AEgzIG1Y09wSdby3bIDWFdbv9T/iNtkrkKPtaJl34uI=
Subject key identifier:   24:F6:FA:19:A8:06:31:83:9D:F4:37:D4:7F:23:9E:23:99:CE:96:85
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655E617FECA1D499D4CC7100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        2600:6c0c:645::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:61:7f:ec:a1:d4:99:d4:cc:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=7389628d-eb18-4d03-a2fb-9bf4e85f50c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:08:40:e0:ed:b2:55:19:7b:82:64:bf:6f:8b:
                    aa:95:2e:eb:0a:70:c2:d7:18:32:d5:bf:73:c4:38:
                    e9:3a:67:ed:c6:bc:a6:16:90:53:58:68:fc:cf:a9:
                    e8:22:0f:fa:08:ec:0e:2c:59:b4:a8:6a:18:e5:64:
                    b0:e9:d1:3f:de:73:f8:02:e1:c7:61:a3:4d:40:ea:
                    44:1a:85:74:5e:bc:4c:e1:bd:65:8a:b5:fa:a0:7e:
                    e8:81:59:a4:46:63:46:70:00:fb:ff:c5:23:68:4d:
                    27:e4:40:57:de:28:8e:74:ba:2c:7d:d3:f7:32:b7:
                    2d:24:e5:1e:1c:2b:5d:d7:0f:e1:11:8e:ae:f7:6c:
                    e2:66:6e:c8:82:0e:83:f2:3d:8b:d4:b5:cf:ee:94:
                    27:58:78:e9:dd:1f:c5:d1:71:35:09:b8:d0:c0:9d:
                    75:62:d7:a1:84:6f:34:4b:3d:de:fa:e5:ac:d9:10:
                    f1:ef:d1:02:51:9a:6c:c1:56:93:3b:4e:7f:a2:30:
                    d6:e5:eb:1d:68:bf:f2:cd:42:c1:cf:fc:95:8b:e6:
                    b7:e5:3f:92:3e:df:f7:59:59:cb:00:f8:0e:22:41:
                    bb:c2:2b:08:29:8a:c6:a5:d2:53:6f:ee:35:8e:00:
                    fa:c8:86:3a:09:64:cd:80:f8:76:ef:37:b0:77:af:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:FA:19:A8:06:31:83:9D:F4:37:D4:7F:23:9E:23:99:CE:96:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c992f66b-6e8e-3118-b7c5-e4a2f53aa1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:645::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:f8:48:a7:c1:69:fc:9e:e0:ee:c4:2b:1b:ef:af:5c:19:
         11:ea:29:5d:9a:cb:94:78:0a:e0:6c:6b:62:3b:5c:d1:85:98:
         29:25:1a:e8:fe:45:ff:81:91:c4:4a:55:ab:23:f3:35:61:81:
         6c:02:44:4d:c7:d9:33:15:0e:b3:27:57:fc:4d:1a:b3:f1:19:
         a5:b2:af:2e:9e:20:cc:56:c8:38:e5:f9:c6:de:46:f1:6b:73:
         b9:76:cd:b3:d0:0c:99:66:2f:4b:6d:f4:cd:0b:32:8e:7b:9c:
         86:68:03:e6:70:e1:39:11:53:1d:59:5e:6c:cd:0d:48:7e:41:
         62:91:88:f4:e2:97:54:82:06:c5:eb:f5:1e:04:fd:52:d2:98:
         6d:bb:8a:90:49:0a:99:f0:51:14:d4:05:82:cb:7c:38:c0:a5:
         f7:6e:0c:1a:17:b4:73:26:d6:a4:d3:f1:48:cd:0c:11:20:4c:
         fc:e3:fc:52:b0:39:27:36:89:cb:bb:46:ff:4a:7e:57:a9:b6:
         0a:b5:05:6e:f7:e9:cf:c8:82:30:e3:78:ea:2a:93:bf:55:17:
         10:ab:27:b7:ee:af:aa:31:f5:f2:2f:c6:50:7b:9c:15:13:2d:
         0a:e3:dc:89:2f:ff:73:35:e0:bc:ab:c8:e0:fc:a7:70:fc:34:
         4b:6b:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:43:45 2026 by rpki-client