Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa
File:                     d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa (raw, json)
Hash identifier:          gQM0Nyef68W/ppaqRqWvkpGgBEX3umI9VXhGUOpVois=
Subject key identifier:   30:0E:E0:9C:C8:CF:D6:90:37:B2:0A:60:E8:CA:5F:17:0F:ED:74:8D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161D5C327C15D16FCCA9A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2600:6c4a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:d5:c3:27:c1:5d:16:fc:ca:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7e98dcf5-c960-4122-9c6a-38169bfbacf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:a2:96:c2:89:1c:fe:c0:73:f4:c9:34:8b:
                    a6:2b:0d:2c:89:97:fd:08:71:12:29:77:24:a6:4c:
                    bc:fd:5e:96:e8:cc:09:28:49:91:89:6e:71:e3:e4:
                    c0:72:d0:32:42:45:56:b0:47:bc:77:47:8d:a9:d9:
                    e8:e1:8a:9e:f1:4d:34:59:b6:2f:c2:6d:06:e0:e7:
                    0e:93:1a:2f:17:4f:62:99:40:cb:b2:1e:2f:08:4e:
                    1f:ea:17:54:38:df:2e:bf:df:1a:11:be:12:1a:a8:
                    09:fc:c3:26:89:cd:6a:74:a6:4f:70:45:d3:d9:db:
                    5f:ce:85:89:f3:cd:01:c3:11:d8:94:4c:b1:5e:3d:
                    3d:93:93:58:0f:3e:07:ca:7c:bb:48:97:ec:71:f7:
                    c7:a2:e0:47:d4:ae:b0:0e:0a:4b:27:6d:87:a6:30:
                    b6:38:33:9a:57:02:85:41:37:6c:af:35:9c:f0:b6:
                    9f:64:bc:b4:00:aa:93:68:10:46:57:53:81:c2:91:
                    27:75:f5:8a:ec:a0:d3:ea:16:62:0c:97:68:4e:e3:
                    ed:01:fe:91:0e:a0:e9:b0:37:82:3a:69:50:50:3f:
                    c6:ab:ef:89:e0:34:4c:dd:38:ce:81:98:f4:dd:24:
                    c0:0e:49:54:9a:84:4f:c9:59:3f:49:31:04:29:9b:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:E0:9C:C8:CF:D6:90:37:B2:0A:60:E8:CA:5F:17:0F:ED:74:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d132c122-6bc9-3249-8de9-eb68b6a8e0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c4a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:57:fd:7e:f5:2c:c6:a5:8f:72:bb:05:6a:fb:63:cf:cd:e2:
         99:5e:27:16:ce:5c:5d:37:ce:5a:b2:23:70:fd:e0:a0:30:3c:
         7c:79:ca:61:e1:f0:e5:ed:64:c6:a1:05:55:5f:b3:f2:8e:b4:
         3f:68:cd:38:59:91:1f:22:84:56:7f:0c:a4:64:5e:d0:3b:bc:
         38:9f:90:2c:91:a2:bd:9f:74:bd:a5:f1:d7:aa:95:32:53:c5:
         a9:c4:8e:ef:48:d6:3a:ea:e7:21:92:13:38:ba:d5:d4:30:06:
         99:d7:48:fa:d2:40:ea:af:40:7c:6b:8d:33:73:94:6d:55:d3:
         aa:94:e4:74:cc:07:17:cc:78:9c:6b:88:bd:59:22:08:90:55:
         51:12:82:9e:98:77:ac:fc:cb:7a:3f:af:6c:d6:2e:e7:39:84:
         0c:00:83:ba:e2:7f:36:e8:83:a2:2c:fe:a5:cb:f4:92:89:b8:
         1c:2a:27:02:41:04:9c:f9:2b:58:48:87:5f:66:ab:dc:9f:f3:
         0c:64:06:eb:4d:e6:63:27:d4:3a:b4:6a:52:21:d2:d7:f2:58:
         6c:f1:ec:03:7e:54:80:fa:9b:db:63:2e:74:27:f1:1c:77:94:
         70:84:90:f4:01:d8:57:aa:9b:38:5c:00:10:b5:75:cb:a3:db:
         17:4a:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:34 2025 by rpki-client