Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f1b285a-8565-362d-8830-b73b687638dd.roa
File:                     2f1b285a-8565-362d-8830-b73b687638dd.roa (raw, json)
Hash identifier:          8X0ehrGZd/oPchXK9FkKOGQ73yw1A45ye/eReOBMPrg=
Subject key identifier:   71:5F:37:4C:6C:D5:74:4F:52:2F:64:07:DF:CA:CA:4F:E1:9F:DF:B0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FCEE60D8255092FA6B400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f1b285a-8565-362d-8830-b73b687638dd.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        2600:6c19::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:ce:e6:0d:82:55:09:2f:a6:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=654c0167-3324-47fb-9c42-f25a10a44855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:55:9c:b8:9e:b2:57:70:16:23:06:67:8e:
                    e5:59:ad:9b:5b:56:48:02:8f:9f:49:ee:86:65:cb:
                    43:88:3e:f6:41:10:1f:0b:f7:8f:1b:c9:64:60:a1:
                    8c:a7:05:c6:70:77:18:7e:c8:fe:af:66:0d:1e:19:
                    79:d0:f2:7a:82:ab:08:82:ee:0c:f0:b8:3a:48:61:
                    bc:bf:1a:da:0d:11:1e:ca:85:f1:df:b9:5f:c8:69:
                    ba:84:b8:51:43:b9:1a:eb:04:ce:5a:f7:3d:b6:f5:
                    0c:31:fc:15:b0:37:c6:50:b4:0a:f8:e3:e9:cd:90:
                    33:45:a8:42:2a:cf:14:be:f2:ed:b5:49:a6:98:90:
                    7b:b1:83:89:87:d2:d4:91:a5:9d:1d:09:fa:05:f2:
                    76:a3:07:a4:5a:97:ea:04:53:01:b8:89:02:10:ac:
                    a7:21:56:f1:d0:16:12:ff:d1:6d:83:b2:ce:5e:5f:
                    be:97:e1:c8:71:f8:b9:03:91:2e:59:61:7b:80:41:
                    ab:7b:95:d0:94:17:3f:52:5b:36:b2:52:84:29:b3:
                    b5:23:e0:44:35:61:6e:a3:e3:4f:5f:5a:9d:37:0c:
                    e3:ac:31:60:6c:e7:17:cb:3d:2a:39:4e:9f:44:3c:
                    fc:09:15:5e:87:2b:01:76:0d:56:c9:2e:ae:a0:26:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:37:4C:6C:D5:74:4F:52:2F:64:07:DF:CA:CA:4F:E1:9F:DF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f1b285a-8565-362d-8830-b73b687638dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c19::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:9a:21:71:07:8b:49:84:9a:02:db:04:c8:ac:6c:36:26:
         67:fe:64:79:5b:1c:9b:a3:0e:81:6b:99:51:43:18:cd:3f:4d:
         d6:6f:76:f8:da:0f:66:80:15:df:e3:7c:18:11:44:45:11:a5:
         a5:61:69:f9:13:a5:eb:8b:f6:dc:57:94:1a:9b:87:de:d1:b9:
         e1:89:23:3f:12:3c:54:f5:38:70:98:3d:66:7e:50:e8:38:91:
         f3:37:78:56:d5:60:e9:fc:68:8c:ec:24:42:ea:75:88:32:4e:
         a7:68:c6:6d:da:05:c7:8d:df:f5:65:55:2e:ba:57:6f:ee:8d:
         74:1f:ad:5a:fa:ca:ea:c4:81:44:67:87:7f:cb:91:60:84:15:
         1e:19:57:56:aa:8b:17:bb:9e:89:9c:c3:02:bd:4d:81:b0:24:
         e9:45:80:37:8a:3f:dc:52:94:10:a6:50:c6:0b:7b:6b:5e:96:
         f3:93:7c:da:ea:1d:79:f6:9d:01:02:d4:85:39:5f:6b:ef:4a:
         d3:88:43:55:20:64:30:ce:c7:3c:9d:96:6b:6b:91:c0:f6:a2:
         f8:49:e5:fd:7c:ed:08:39:f7:be:e8:84:19:87:4c:0c:be:c3:
         83:f2:ef:93:3e:69:54:b0:82:08:07:71:b8:bf:61:bb:77:c7:
         00:43:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:29 2026 by rpki-client