Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4571761d-bf5f-361a-83a1-581ca048a91c.roa
File:                     4571761d-bf5f-361a-83a1-581ca048a91c.roa (raw, json)
Hash identifier:          GiGez27QDx8NIgBBQkc3YzfnPpvik7w1HHhgm426S8A=
Subject key identifier:   6A:A0:42:30:FB:06:9D:F6:E8:D7:7B:AD:FB:9B:67:E2:D5:52:A4:A4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16171B115C9E113EB78A680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4571761d-bf5f-361a-83a1-581ca048a91c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2600:6c89::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:71:b1:15:c9:e1:13:eb:78:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=06418a17-bcfe-49b4-b629-c5d49d7cce2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:f8:ff:5a:77:22:50:c2:81:fb:e5:9e:aa:
                    dc:f8:34:63:17:a2:71:e5:23:1a:7c:12:c8:ce:39:
                    c3:07:1a:f2:8a:d9:57:ff:8b:9f:fe:3d:7b:23:a9:
                    46:39:0b:f1:d5:23:74:99:62:62:d1:20:25:53:b5:
                    2f:13:0e:dd:d6:0b:8e:f9:40:02:47:64:f0:49:72:
                    36:3d:42:bb:56:72:09:55:31:5a:81:0e:c4:d0:ff:
                    26:c6:6e:27:a2:e9:29:fe:29:87:81:b0:b3:1c:d8:
                    c1:f8:e1:b6:41:33:b3:45:e4:aa:e4:07:3d:60:8b:
                    5a:14:f7:15:4a:5d:92:32:d4:67:4b:6b:a7:c9:c4:
                    2a:b3:68:72:31:22:88:f0:4c:24:98:53:81:61:81:
                    b1:e7:e7:a9:e0:08:40:52:a1:2d:59:b4:c0:aa:e6:
                    f2:c2:ff:39:e2:12:90:35:b1:f8:63:14:aa:94:55:
                    c5:2c:df:11:c9:0c:12:df:86:43:1a:4c:07:7c:27:
                    a6:f4:54:25:75:54:f1:98:99:ba:e0:5e:31:77:cc:
                    86:05:3b:1b:4e:ca:ea:8c:8f:cd:fb:0a:86:37:9a:
                    59:49:c9:9e:d8:f3:e9:96:bf:bb:7d:e1:ce:3e:ac:
                    75:78:39:78:d4:eb:a6:37:a9:f7:92:dc:4f:bb:e1:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A0:42:30:FB:06:9D:F6:E8:D7:7B:AD:FB:9B:67:E2:D5:52:A4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4571761d-bf5f-361a-83a1-581ca048a91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c89::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:86:30:e5:50:41:bc:52:48:9b:82:10:03:26:eb:1a:e3:
         c3:a0:71:94:bf:36:7f:14:be:47:09:e9:a4:20:99:b5:70:11:
         34:ac:d6:8f:da:75:9a:ed:a8:81:f3:1b:7f:1b:c2:a6:9c:34:
         c8:82:96:55:25:8c:d4:cc:f7:fc:ce:bd:e3:de:38:ee:32:39:
         c9:46:29:72:9f:1d:92:9e:0c:80:08:6b:e9:ff:54:15:b6:8e:
         b7:8d:0f:1d:fa:38:bd:14:d9:d1:d6:ed:3d:a5:cc:93:ea:74:
         d3:44:6c:8e:9d:3f:32:89:b3:d8:ca:55:3d:ab:48:2d:84:f0:
         9f:28:f3:5c:af:39:6a:8e:57:f5:9a:ae:c5:8d:23:0f:34:d9:
         33:23:ac:a7:c1:e3:df:49:8b:1d:47:56:1b:c0:2e:9b:43:3a:
         8d:d1:81:98:27:da:10:eb:69:d2:fb:5d:1e:2d:a4:06:85:b4:
         2b:69:58:cf:ab:76:c1:c0:65:74:eb:35:1d:79:37:43:bc:ac:
         37:12:70:b1:6c:49:a7:4d:4e:58:8e:2d:8f:f6:b5:92:d4:58:
         48:5f:50:88:38:d6:42:86:81:e9:c0:d2:d9:a8:84:23:8a:06:
         7c:da:58:bf:7e:dd:eb:02:9e:ce:12:2a:e7:66:85:22:2d:6c:
         2a:fc:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:37 2025 by rpki-client