Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0e511ba-c54a-36e9-94fb-79d8be977ada.roa
File:                     b0e511ba-c54a-36e9-94fb-79d8be977ada.roa (raw, json)
Hash identifier:          JTY3+PspeE7Z+wE1JXh+X3KnDxOYgt8wTf9exDERVlc=
Subject key identifier:   88:3D:FD:32:9D:D4:6D:4B:3E:7A:E6:95:AD:5A:0A:A5:F2:1B:2E:03
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FD41E5439DBA9023D7F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0e511ba-c54a-36e9-94fb-79d8be977ada.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        2600:6c86::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d4:1e:54:39:db:a9:02:3d:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=2b4e9367-54b5-4abb-9135-5b632a6de6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:45:95:77:db:43:72:86:72:00:36:99:ac:
                    d9:85:18:32:71:a4:3a:07:ce:3b:7e:07:28:d8:f1:
                    f9:a0:09:f5:7b:25:ad:af:b8:69:ad:f4:c8:d0:d9:
                    56:9c:04:05:35:a0:9a:74:1f:c3:82:f9:1a:b2:05:
                    62:78:8a:59:0e:b3:27:dc:59:a3:4c:f4:d0:55:a2:
                    1c:08:9a:b7:e2:ce:d5:bd:7d:13:52:58:cd:1d:cd:
                    81:55:2c:0f:33:ec:90:4d:31:27:61:fc:e3:4a:16:
                    85:c1:d3:64:8a:17:8d:0c:19:2b:9a:38:22:05:7a:
                    11:06:f8:ee:12:60:60:23:bf:df:f8:dd:e2:46:a7:
                    2c:fd:7e:4b:2d:9b:5c:73:05:a2:77:29:d1:40:ec:
                    f1:ce:bf:9d:1e:5d:91:5c:05:cf:f0:d5:61:3f:49:
                    e7:ed:93:ad:7e:6a:a3:52:5c:eb:5f:ae:a0:91:ff:
                    eb:95:7f:29:31:64:c2:9e:f0:d1:71:83:8f:4f:c8:
                    fc:9a:f6:65:f3:2a:5a:01:62:2f:4d:25:7e:91:54:
                    21:82:15:1d:03:71:90:4d:f0:5f:aa:32:41:0f:5f:
                    bc:23:92:12:64:45:3d:50:4e:d2:a1:27:f1:44:af:
                    49:96:4e:52:ba:0f:61:5e:fb:c8:ba:b2:9b:ae:f1:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:FD:32:9D:D4:6D:4B:3E:7A:E6:95:AD:5A:0A:A5:F2:1B:2E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b0e511ba-c54a-36e9-94fb-79d8be977ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c86::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:e6:08:50:0b:c1:94:f6:44:7e:12:53:53:c5:4e:09:70:
         d4:6b:e5:5a:31:00:8f:0b:90:f6:09:27:06:c3:7d:57:74:a6:
         36:00:89:ba:52:18:99:b9:e9:1e:a3:64:2e:27:7f:30:ad:0e:
         b2:34:63:cf:04:f9:96:e7:a7:33:74:85:b2:55:cf:9e:e4:e8:
         7f:05:af:6e:86:cb:76:5b:92:e9:29:d9:ad:4f:13:b9:8a:a1:
         a2:43:24:bf:e8:53:55:8f:c8:ef:a8:8b:9f:3b:88:8e:0b:df:
         4b:75:3a:23:c3:ed:f3:11:45:2d:ee:8e:f6:bc:bd:f6:c7:d3:
         6d:46:b9:94:ae:db:a0:59:e7:b7:b9:4f:c0:f2:19:3f:f5:99:
         f1:22:39:75:e9:f3:3f:8a:5b:98:2b:e9:72:00:f1:3c:2b:a1:
         94:f4:c0:a2:3d:e7:ff:6a:84:db:63:02:87:8e:80:a3:f4:f1:
         30:94:10:f0:97:c9:93:8b:36:3a:0f:44:ab:6e:85:98:5e:23:
         00:48:9b:5c:3b:91:9f:21:2e:53:11:46:b2:85:fd:62:09:a9:
         55:76:86:74:6d:85:22:de:f0:92:87:f6:df:06:52:41:71:86:
         fa:1f:61:bb:93:e7:40:8d:9b:33:75:5f:21:d8:3e:77:ce:7d:
         d4:51:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:10 2026 by rpki-client