Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d1fc477-1ece-3b8f-b2af-dfdf78910025.roa
File:                     8d1fc477-1ece-3b8f-b2af-dfdf78910025.roa (raw, json)
Hash identifier:          m8DuFrFGMUkgV0RPnIwa+SUP4STGh++UaYVq6+Nx1Nw=
Subject key identifier:   19:54:81:3A:66:D1:4C:6E:AB:A1:A3:0B:68:97:06:91:59:38:9E:44
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F35E7CDC90C6F2372391C7B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d1fc477-1ece-3b8f-b2af-dfdf78910025.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     22516
IP address blocks:        2600:6c83:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:cd:c9:0c:6f:23:72:39:1c:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=22472f2d-a619-4517-ba1e-00cbe3c8514f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:9e:78:19:f3:4f:94:40:09:95:0b:ac:20:
                    aa:e4:14:57:3b:6d:b7:c4:7f:6c:d8:83:a8:ed:9d:
                    b9:2d:16:5a:1a:c6:c6:09:bf:b6:f1:fd:1c:44:4c:
                    28:be:12:f0:c0:e6:5b:91:ad:3e:85:e8:e9:14:f4:
                    56:fc:36:0c:12:d8:2a:7e:91:b8:d7:51:6a:6b:f5:
                    2a:2b:fe:ed:68:33:1d:66:28:17:65:99:e6:72:08:
                    d2:62:e8:3f:3b:3c:8d:17:fd:b2:8a:e2:c0:66:d9:
                    e9:0f:4e:4e:c8:da:de:f2:a3:0b:ae:89:b7:c5:6c:
                    f3:89:e9:17:85:63:b6:5d:dc:e1:a6:3a:1f:e7:2e:
                    fb:cc:f0:de:aa:7b:9d:d0:2a:61:b3:4f:0f:2e:cf:
                    61:69:33:2c:0d:e1:50:36:21:1e:69:0b:2a:9f:c6:
                    90:7b:55:20:b9:0f:bb:e4:55:88:d4:a4:2b:6f:f5:
                    5f:35:95:12:b6:a1:58:ee:d7:e7:15:a0:b9:ea:fa:
                    22:9b:c3:a2:ff:ad:4d:0b:20:fe:33:b8:14:5c:50:
                    f0:d7:59:c9:91:38:b8:f6:f0:8d:2c:24:ae:28:19:
                    a0:74:52:c5:54:85:ea:04:16:eb:bb:ca:24:50:4d:
                    28:4a:c4:0b:ca:a7:fc:02:07:be:9a:9c:b2:d3:61:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:81:3A:66:D1:4C:6E:AB:A1:A3:0B:68:97:06:91:59:38:9E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8d1fc477-1ece-3b8f-b2af-dfdf78910025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c83:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:18:11:4e:6a:f0:f6:1a:19:34:63:c9:8f:37:cb:21:c8:15:
         5a:02:8d:a7:ab:4e:c8:bd:aa:ab:47:37:24:8d:6b:27:b3:ef:
         74:7d:77:92:46:2f:fd:6f:3e:45:49:ed:e6:8f:82:f0:2b:da:
         53:ce:ee:06:41:bc:b8:1c:c6:ee:d4:98:17:76:26:5a:6e:a8:
         fd:2c:64:c3:fe:55:cd:cb:b0:f0:39:83:33:3e:da:fd:bf:e7:
         80:ac:aa:1d:b7:9e:ae:b1:39:68:ae:f8:08:27:55:43:56:72:
         38:fb:35:f8:c6:eb:36:73:22:87:d2:1a:8e:73:bf:6e:3b:aa:
         9f:bc:92:8e:bb:12:1b:1a:ed:f0:18:72:38:b1:a5:c9:e5:0d:
         3b:a4:c6:4c:eb:a6:71:ee:df:89:12:2f:6a:b6:e4:b6:59:3e:
         eb:f9:bc:16:56:0e:16:3a:2c:7a:fb:6f:82:8c:40:ac:56:10:
         f5:19:df:36:ff:e8:5f:92:ef:5b:80:ee:ad:6c:48:3b:9d:4a:
         26:b0:08:92:15:d0:ee:15:2c:3c:1a:6d:7b:00:b1:10:58:19:
         4b:cf:ce:ea:6d:cd:ab:16:e2:05:72:93:3e:13:97:7e:dc:34:
         3e:11:99:35:4f:4b:4e:9b:5d:63:c1:71:fb:28:29:df:98:b2:
         ac:bb:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:21:39 2026 by rpki-client