Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f29f9df-8926-30ba-ad36-2a86a38b1497.roa
File:                     2f29f9df-8926-30ba-ad36-2a86a38b1497.roa (raw, json)
Hash identifier:          jD54mYkHaD8RQHpDRC73gfVRAXHNNdDHVCK7yVXGuLQ=
Subject key identifier:   02:06:8A:BA:08:3A:A7:D4:38:09:22:78:E8:E3:08:11:3B:A2:7A:6C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1613DC91C1823A636751880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f29f9df-8926-30ba-ad36-2a86a38b1497.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2600:6c7f:9060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:3d:c9:1c:18:23:a6:36:75:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=5f7b7097-3660-4c76-9522-7c4986b07b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:28:2c:fe:81:3d:d8:06:df:7a:83:05:5a:
                    d7:49:dc:97:b0:66:d8:88:a6:19:b2:f1:a5:4f:e2:
                    e9:97:0b:fd:d6:dc:c8:92:5c:3f:86:ed:ac:b8:2f:
                    94:38:df:d0:b4:1f:b8:10:23:30:6a:86:09:1a:22:
                    c3:22:3e:d4:48:e5:dd:99:03:ad:a4:41:c5:25:39:
                    cf:ba:21:51:8a:2a:46:b6:17:15:62:b5:e9:18:5f:
                    4d:ae:64:06:5f:0e:e6:b7:1c:e0:14:0e:91:0d:f8:
                    fe:2e:4f:57:b9:f4:21:ad:b7:80:9e:87:14:a3:fd:
                    15:6d:be:9c:b9:43:81:b6:9c:56:19:fd:b7:b2:51:
                    d7:08:ae:97:9c:f2:e0:d7:30:b5:82:74:bd:96:f7:
                    00:5c:58:24:e5:1a:a1:8a:15:2e:2b:f0:24:79:91:
                    73:c7:45:1b:a9:d6:94:a1:5f:97:ad:0b:b5:15:46:
                    9b:43:b3:e9:55:cc:a9:e9:47:38:95:fe:42:37:cb:
                    5b:f7:9e:78:06:b3:d6:f0:7b:02:db:4b:ec:50:f8:
                    36:5d:01:c4:4c:cf:c5:fa:2c:1b:ad:3a:12:6d:80:
                    a3:79:2a:20:13:d1:78:89:7c:0d:97:0b:90:19:da:
                    e0:27:3a:8c:88:20:6d:09:14:dd:b7:cd:ce:0c:33:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:06:8A:BA:08:3A:A7:D4:38:09:22:78:E8:E3:08:11:3B:A2:7A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2f29f9df-8926-30ba-ad36-2a86a38b1497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c7f:9060::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:2c:2b:c1:c5:ae:66:00:58:e3:7d:7f:da:cf:60:b3:9a:
         29:27:61:aa:3d:be:12:8a:99:a9:dd:c0:43:47:f4:c6:0c:3b:
         c4:0b:a1:78:96:ca:e4:8e:6a:6f:23:69:87:1a:df:8e:13:f3:
         32:f2:42:54:b1:d2:01:3d:49:1c:fb:d0:af:20:23:49:30:aa:
         e9:2b:f9:1e:64:f2:13:fe:a3:58:6c:64:52:f1:f3:5e:0a:9c:
         86:1d:f6:8b:c9:86:da:2c:a4:57:b4:61:97:c0:c2:25:01:25:
         51:6a:2e:eb:7f:23:0b:cd:e8:69:43:38:09:0c:37:56:00:62:
         e5:4c:52:b1:32:d0:a8:5b:d5:77:0d:c3:c5:cb:9a:9d:0a:f8:
         58:f1:db:f8:ad:49:85:59:0d:e5:2f:6c:00:09:81:e6:bd:6d:
         db:9a:35:75:f6:9c:39:6b:5b:e9:3b:fa:02:ab:38:f0:26:27:
         f0:38:53:f8:51:0f:5e:78:e6:9f:16:65:86:72:a8:48:b7:a6:
         21:12:f7:ff:56:df:5c:6e:69:4d:c3:d6:6d:58:73:09:7e:a5:
         08:d2:31:12:dd:c6:43:c6:81:a4:d7:1a:6b:b3:e3:14:a7:f6:
         1c:f2:08:4e:71:78:c2:b9:7e:57:a0:39:11:3b:2c:60:ef:f3:
         b3:25:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:44 2025 by rpki-client