Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/721b50f6-20b0-3790-ae9e-94d921ccb404.roa
File:                     721b50f6-20b0-3790-ae9e-94d921ccb404.roa (raw, json)
Hash identifier:          FU3TZZ+tioqyJ0g1j1JkTNt5G/FTK8MkS6C7CVZotPA=
Subject key identifier:   77:4A:B1:1C:44:5F:B3:1D:FB:B0:07:A1:39:6D:1A:40:8E:16:66:BF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F35E7CA7ACB1FAD6B2361E1C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/721b50f6-20b0-3790-ae9e-94d921ccb404.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     22516
IP address blocks:        2600:6c52:5900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:ca:7a:cb:1f:ad:6b:23:61:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=e4efd7f7-e9b3-4529-b842-a150778e7f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:e3:6a:ab:bb:52:83:83:44:49:40:b0:92:
                    dd:61:d5:fe:82:57:ba:ff:92:3a:7c:63:04:f0:61:
                    af:df:b4:7a:3d:9c:44:8b:01:37:b6:61:20:cc:91:
                    8f:f4:8a:1b:ed:44:45:ee:45:0c:ba:52:77:d1:a8:
                    89:b8:09:32:14:62:29:e9:87:63:da:dd:a0:7d:6a:
                    e5:a2:df:ff:ac:68:e4:57:2d:77:06:81:02:9d:6c:
                    87:78:be:b9:02:b7:a5:18:58:d4:31:06:71:be:97:
                    42:15:4c:64:c4:b1:02:96:6e:1f:e6:d5:95:81:9b:
                    37:6e:48:df:45:e1:c6:e3:f6:14:b7:87:54:87:64:
                    7f:32:75:1a:60:1f:7b:4e:4c:b5:c1:22:fe:a5:b4:
                    db:e5:21:ed:fb:88:fc:5f:d0:ca:ea:c9:af:00:8c:
                    fa:b6:eb:2b:30:76:0b:65:bd:55:02:a9:e8:8f:2c:
                    b9:f3:4e:4e:46:4e:c1:f9:1d:81:8b:68:00:82:48:
                    fa:56:7e:eb:72:ad:c4:fb:5f:0f:b9:c4:76:20:72:
                    5a:91:f3:fa:23:15:91:8d:c3:99:cc:69:13:55:e4:
                    d8:83:e5:c4:c0:ff:5d:72:5b:88:c1:06:3b:e3:b4:
                    ba:af:23:b5:18:cf:b3:78:04:b4:e2:92:f8:fa:35:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:B1:1C:44:5F:B3:1D:FB:B0:07:A1:39:6D:1A:40:8E:16:66:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/721b50f6-20b0-3790-ae9e-94d921ccb404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c52:5900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:32:24:c6:ef:4f:07:4d:75:b1:bd:3b:a4:8c:be:01:f3:40:
         c8:22:fa:fb:64:6a:93:95:61:cd:ba:93:b4:4b:1d:58:ab:0f:
         8f:4e:fe:04:d0:98:91:94:f5:94:ce:43:cd:d9:8e:f4:c9:ce:
         7e:d7:5a:8b:40:ec:39:eb:91:7e:3c:09:e8:0a:63:67:d7:8e:
         ca:19:5c:90:ab:c1:cf:89:1f:4d:c5:3e:c6:30:23:84:0b:bd:
         f6:c4:bb:4f:a2:7b:ea:15:0f:72:b8:52:b5:36:7f:7b:6c:b7:
         28:1c:19:16:45:62:2d:ef:a5:aa:24:22:bf:c6:29:6b:f3:cd:
         55:8a:94:32:fb:51:e2:f2:b4:a5:48:03:6f:4f:8d:7b:83:76:
         a7:00:ff:e7:c5:3f:94:52:2b:0d:0b:a3:1c:6c:13:d4:99:f5:
         3c:24:32:29:b4:87:9f:49:31:91:08:10:70:fe:59:e9:3a:f2:
         b8:a0:8d:2f:83:a4:1b:7c:50:52:e8:6b:9f:61:eb:39:4b:24:
         06:74:b4:78:ae:39:ae:f4:20:b9:fb:e8:8a:12:96:42:9b:7d:
         68:69:84:f2:58:f5:24:2a:d2:66:47:0a:a5:92:d8:59:34:b5:
         56:c7:48:2e:e1:da:32:cd:0a:02:c6:41:70:f7:7b:d4:f4:31:
         5b:e0:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:40:13 2026 by rpki-client