Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa
File:                     0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json)
Hash identifier:          cBjiiw2E4ygtgxj2UonxkkOTgM5K1UvMMuX5Z3BoEKc=
Subject key identifier:   9D:47:85:6B:6A:4B:8C:3E:B7:29:E9:8B:25:14:59:22:8F:4D:1C:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A761B69E50EA8839ADF4A0880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:141b:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:69:e5:0e:a8:83:9a:df:4a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=f7b4156e-28af-4b70-b7fc-8a0fc0117a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:93:e7:c8:32:89:b6:be:c6:a9:fd:8c:25:
                    9a:92:2a:62:b8:24:f4:47:cf:cc:c4:3e:ed:e4:09:
                    77:b9:24:a8:f1:1b:3f:bf:f9:f0:89:4c:2b:86:98:
                    59:76:fc:bd:77:46:bb:a2:20:97:d4:1a:a9:27:67:
                    c8:b3:dd:e7:5e:07:bb:10:d9:51:2d:6c:cf:39:99:
                    64:b2:02:a2:c7:15:63:22:45:b1:64:2b:bb:32:c8:
                    e7:80:84:69:49:0a:b6:b2:c2:8d:9f:e3:7b:b5:4f:
                    17:82:f6:ca:6a:f6:6a:07:af:9a:95:02:0e:71:02:
                    b3:cd:a8:bb:a2:bd:8f:51:66:fd:a5:96:e5:ac:ee:
                    98:2e:ec:e5:66:3f:4d:02:0c:40:9f:23:db:b5:97:
                    f5:c6:d9:5a:01:c6:43:4c:c8:95:90:88:0c:cb:a1:
                    f0:da:1d:d8:90:08:ce:09:a4:0a:9e:97:2d:6d:f1:
                    f7:f4:79:c7:3b:15:12:e5:25:31:b7:7a:70:7d:9e:
                    3a:17:1d:75:d4:63:f3:2e:f3:38:f8:d5:56:31:00:
                    75:c9:b9:8b:ca:85:4f:94:d0:55:04:e0:dc:15:64:
                    35:cc:de:94:d0:78:18:01:5d:52:32:1e:bc:dc:d1:
                    6a:31:5b:49:af:76:d6:f6:c4:37:4b:ba:a2:b5:76:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:85:6B:6A:4B:8C:3E:B7:29:E9:8B:25:14:59:22:8F:4D:1C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:f800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:4c:90:42:5c:e5:e1:bc:57:6f:8c:8a:68:26:70:73:cb:
         1b:67:f3:a5:42:32:49:a4:e6:ae:35:3b:a7:28:f9:29:59:cc:
         78:c5:11:d7:40:e8:68:df:d4:db:5a:eb:98:7f:aa:a3:4e:87:
         ee:91:47:c4:ef:1f:21:6b:b7:b0:3c:88:3c:d9:5b:77:b4:6e:
         d4:78:2a:73:45:79:fd:79:56:27:e3:2f:f6:26:3d:8f:c0:0a:
         49:e2:e4:64:93:d8:44:bd:1e:24:e6:b3:b3:9e:22:50:60:86:
         22:1f:0c:ad:ce:22:d8:f9:4a:23:28:de:05:6e:d5:62:18:dc:
         bd:8e:21:88:01:bd:45:ce:51:21:19:fe:41:7d:0e:b9:eb:f8:
         d4:b1:f6:93:83:da:f3:8b:1c:b0:05:4a:29:4c:a8:25:16:b4:
         a8:eb:f2:ab:2c:06:fb:0c:34:02:9a:20:14:d6:ca:6e:2a:29:
         1b:fa:18:93:8f:ef:52:c8:fc:c5:fe:57:d7:73:f4:ff:eb:db:
         4b:0b:59:62:d4:02:10:f1:96:5d:60:bb:c5:23:c1:cb:3c:c4:
         ff:48:7b:b9:8f:30:89:aa:2a:6f:7e:4e:64:77:9e:21:62:19:
         88:77:0d:84:10:35:53:02:2e:2a:23:e1:8c:d5:97:e4:1a:9b:
         a3:bf:d4:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G2nlDqiDmt9KCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZjdiNDE1NmUtMjhhZi00YjcwLWI3ZmMtOGEwZmMwMTE3YThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqiT58gyiba+xqn9jCWakipiuCT0R8/MxD7t
5Al3uSSo8Rs/v/nwiUwrhphZdvy9d0a7oiCX1BqpJ2fIs93nXge7ENlRLWzPOZlk
sgKixxVjIkWxZCu7MsjngIRpSQq2ssKNn+N7tU8XgvbKavZqB6+alQIOcQKzzai7
or2PUWb9pZblrO6YLuzlZj9NAgxAnyPbtZf1xtlaAcZDTMiVkIgMy6Hw2h3YkAjO
CaQKnpctbfH39HnHOxUS5SUxt3pwfZ46Fx111GPzLvM4+NVWMQB1ybmLyoVPlNBV
BODcFWQ1zN6U0HgYAV1SMh683NFqMVtJr3bW9sQ3S7qitXbXtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ1HhWtqS4w+tynpiyUUWSKPTRz/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z
ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADjJTJBCXOXhvFdvjIpoJnBzyxtn86VCMkmk5q41O6co+SlZzHjF
EddA6Gjf1Nta65h/qqNOh+6RR8TvHyFrt7A8iDzZW3e0btR4KnNFef15VifjL/Ym
PY/ACkni5GST2ES9HiTms7OeIlBghiIfDK3OItj5SiMo3gVu1WIY3L2OIYgBvUXO
USEZ/kF9Drnr+NSx9pOD2vOLHLAFSilMqCUWtKjr8qssBvsMNAKaIBTWym4qKRv6
GJOP71LI/MX+V9dz9P/r20sLWWLUAhDxll1gu8Ujwcs8xP9Ie7mPMImqKm9+TmR3
niFiGYh3DYQQNVMCLioj4YzVl+Qam6O/1Hg=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:21:59 2025 by rpki-client