Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b48cd581-2929-3e1c-861e-8d2266910cff.roa
File:                     b48cd581-2929-3e1c-861e-8d2266910cff.roa (raw, json)
Hash identifier:          KwJenGv3TNFZWAwK2sX8x4b0DToP5/U+Q+l0mMe4N54=
Subject key identifier:   EB:10:8B:47:F2:37:76:33:4F:EE:E5:D2:38:BA:80:9F:BE:EB:D5:1F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EA4450E709EB986A6AD917900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b48cd581-2929-3e1c-861e-8d2266910cff.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     22516
IP address blocks:        2600:6c52:4a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0e:70:9e:b9:86:a6:ad:91:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=23067027-820b-4d53-8942-fcf5f36b0d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:d2:6a:17:bb:3c:b0:0c:00:bc:3b:ec:7f:
                    3c:d3:71:a1:c2:0b:34:c4:96:10:02:15:06:cc:65:
                    3f:f2:f9:9a:d0:64:57:75:ba:7b:a4:b7:45:31:85:
                    67:2e:8c:ea:66:06:cd:8b:0f:37:53:2c:a7:ba:7a:
                    f0:4f:f5:83:8b:75:64:26:c3:34:94:11:d4:bd:d6:
                    58:a7:ce:1f:b8:9b:73:12:6c:4c:b8:39:3c:2a:97:
                    17:6c:da:a7:6b:7e:4d:3e:8a:62:8c:15:e9:bf:aa:
                    08:ed:c3:da:00:87:43:90:f1:94:2f:4d:a0:52:c6:
                    3c:f9:c6:ea:dc:a2:3a:e2:d5:7f:c6:36:dc:3c:61:
                    02:7f:73:c5:ad:fb:d7:09:90:2d:6b:25:65:e2:5a:
                    b3:da:90:a6:ca:01:4d:dc:e9:bb:eb:26:59:81:b2:
                    9c:fa:cb:5c:e7:64:06:4f:66:4a:d3:9e:51:17:ea:
                    3e:b1:e2:af:7d:54:7c:c5:ba:cd:30:06:44:f7:62:
                    e9:9b:64:5f:7f:56:65:86:6f:a5:cb:da:5a:5b:cf:
                    51:15:7c:fd:3a:df:3b:b2:a1:bf:73:3c:5f:69:05:
                    49:b8:be:89:8d:18:b1:0b:a3:27:11:03:24:e0:7f:
                    a8:ca:58:f4:76:e2:b1:f5:aa:63:82:eb:2f:b9:03:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:10:8B:47:F2:37:76:33:4F:EE:E5:D2:38:BA:80:9F:BE:EB:D5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b48cd581-2929-3e1c-861e-8d2266910cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c52:4a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:e0:27:49:02:df:77:a1:12:59:92:e0:df:8b:ff:88:80:
         6a:2b:26:bf:3d:45:9a:1d:ba:bf:45:15:d5:b7:93:83:fb:43:
         e8:b8:75:e6:4b:67:3a:d9:85:b7:2d:20:dc:47:43:01:5e:21:
         57:d2:34:aa:c6:f2:c1:72:b5:a3:f5:83:51:eb:9b:fc:06:8d:
         85:74:4c:c2:00:eb:f3:23:2e:20:71:1a:dd:b1:38:cf:71:1a:
         42:14:b9:d2:4b:80:b0:f1:68:28:47:ad:b2:35:e1:d3:0a:4b:
         e3:6b:be:d9:ba:8a:93:26:ff:30:9b:88:4b:25:64:1a:06:1a:
         a5:c7:db:49:35:fd:a4:8e:52:d0:25:97:56:6a:78:d8:f5:ec:
         9d:58:1a:f6:16:b1:73:c4:84:e4:59:d5:db:bb:42:65:dd:5f:
         a3:d3:53:fa:85:5b:64:b0:92:78:3e:f8:71:33:ce:ec:48:c9:
         8b:4d:56:b2:b3:7d:c5:aa:a7:64:09:2d:74:a9:22:e1:ba:a8:
         1a:e3:0d:1e:37:3d:f8:d4:ad:f9:13:6e:b6:1a:15:ce:99:68:
         ad:d0:e7:07:dd:49:cd:5e:c6:50:5e:9a:35:77:4b:b2:82:d2:
         e6:07:d3:58:a9:d5:9a:61:00:60:93:54:e0:25:b0:95:e8:b6:
         ee:0a:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:18 2026 by rpki-client