Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa
File:                     17cb8211-26bc-3364-9e10-6881f39b4e6d.roa (raw, json)
Hash identifier:          Uh6HK6hIdhkjc7WZrNEdV8zeHztuv8T/eZimdCIT9Kk=
Subject key identifier:   E1:31:03:D2:AC:1F:39:9B:3B:AB:81:94:09:9E:36:04:40:99:AC:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FC5E86D61F6E633DAA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fc:5e:86:d6:1f:6e:63:3d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=b1bbf213-2030-43a3-9498-4d61bd6c8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6a:3c:c0:ba:e0:13:e9:78:62:7b:5e:0c:18:
                    d4:f1:34:05:72:3c:65:f1:8c:e1:65:f4:20:53:c1:
                    fa:f6:68:72:21:0b:d2:96:7a:52:98:71:9c:4d:40:
                    ba:6e:c3:b5:a9:1c:88:1a:67:45:48:cf:a6:e5:6c:
                    16:a6:0c:d3:a3:6c:5f:5c:36:31:5c:8d:fb:03:e5:
                    f3:89:2c:06:c3:5d:66:40:54:d8:e9:d6:69:15:cc:
                    8d:70:3a:bd:27:54:e6:4b:74:8c:81:b9:9f:cf:69:
                    a9:64:74:00:70:7e:2a:64:41:3b:73:fd:3e:38:58:
                    c3:68:36:13:78:1b:10:0f:71:ee:8f:23:8e:01:14:
                    ff:5f:39:ce:b9:42:36:b1:db:3a:53:b7:5e:ab:16:
                    50:96:57:f4:d1:e3:4b:ab:2b:fe:a3:9e:93:de:6b:
                    6e:31:f3:b7:85:28:b2:a8:67:4f:ae:c2:de:79:1b:
                    bb:a6:22:e6:e8:9b:bd:6f:9a:0f:a3:33:a1:88:3f:
                    81:22:95:68:0f:89:be:3e:27:4a:13:86:56:b3:08:
                    41:52:be:c9:84:bd:63:95:53:62:3d:75:cb:f0:8e:
                    d8:21:23:50:82:e8:a1:6b:bb:1c:31:c7:e9:07:07:
                    b5:0e:f1:75:e1:20:0a:6e:2b:a4:42:cc:e0:a3:0f:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:03:D2:AC:1F:39:9B:3B:AB:81:94:09:9E:36:04:40:99:AC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:76:30:2f:3f:b0:6c:2b:c4:d6:d3:c5:b6:f0:d7:66:e7:61:
         3f:4b:d4:22:77:81:47:90:88:91:6b:45:de:2b:d0:e3:f1:f8:
         e1:64:da:40:19:e2:a8:70:11:97:53:59:ad:59:a6:ee:b3:77:
         5f:53:df:ca:7d:c8:3e:a7:11:49:95:ff:e2:24:7d:6a:0e:3d:
         5b:45:22:27:96:6b:03:4f:0b:21:dd:91:94:e8:c5:e6:ef:e3:
         53:26:e2:3c:51:ac:90:38:4b:45:21:bd:8a:d9:df:25:0a:3b:
         f8:9f:ac:23:ed:f3:6a:c2:fb:9b:7a:4b:83:05:c5:6d:36:46:
         0f:28:8e:cd:b7:2a:89:8b:99:ad:8c:8d:ad:79:79:53:96:9b:
         5a:f0:e4:17:6a:90:fb:26:ea:d2:a9:81:9d:89:6d:7b:16:e9:
         80:1f:85:34:8a:e9:84:b7:66:94:22:b1:e7:1b:7f:d5:06:52:
         a0:45:87:a0:47:c6:d8:c4:bd:59:a0:17:c0:f7:1a:f5:61:96:
         9e:85:c2:2b:d9:73:98:72:df:9d:3e:93:a2:22:06:62:58:86:
         16:19:9b:ff:04:2d:20:d0:26:64:dc:09:0f:d8:49:5f:c1:8d:
         a0:31:ca:e7:a7:d7:a6:7e:36:11:d8:b8:14:4b:d9:60:5c:bd:
         02:76:e3:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfxehtYfbmM9qgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
YjFiYmYyMTMtMjAzMC00M2EzLTk0OTgtNGQ2MWJkNmM4NDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWo8wLrgE+l4YnteDBjU8TQFcjxl8YzhZfQg
U8H69mhyIQvSlnpSmHGcTUC6bsO1qRyIGmdFSM+m5WwWpgzTo2xfXDYxXI37A+Xz
iSwGw11mQFTY6dZpFcyNcDq9J1TmS3SMgbmfz2mpZHQAcH4qZEE7c/0+OFjDaDYT
eBsQD3HujyOOART/XznOuUI2sds6U7deqxZQllf00eNLqyv+o56T3mtuMfO3hSiy
qGdPrsLeeRu7piLm6Ju9b5oPozOhiD+BIpVoD4m+PidKE4ZWswhBUr7JhL1jlVNi
PXXL8I7YISNQguiha7scMcfpBwe1DvF14SAKbiukQszgow+L9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOExA9KsHzmbO6uBlAmeNgRAmayxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdjYjgyMTEtMjZiYy0z
MzY0LTllMTAtNjg4MWYzOWI0ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAZ2MC8/sGwrxNbTxbbw12bnYT9L1CJ3gUeQiJFrRd4r0OPx+OFk
2kAZ4qhwEZdTWa1Zpu6zd19T38p9yD6nEUmV/+IkfWoOPVtFIieWawNPCyHdkZTo
xebv41Mm4jxRrJA4S0UhvYrZ3yUKO/ifrCPt82rC+5t6S4MFxW02Rg8ojs23KomL
ma2Mja15eVOWm1rw5BdqkPsm6tKpgZ2JbXsW6YAfhTSK6YS3ZpQisecbf9UGUqBF
h6BHxtjEvVmgF8D3GvVhlp6FwivZc5hy350+k6IiBmJYhhYZm/8ELSDQJmTcCQ/Y
SV/BjaAxyuen16Z+NhHYuBRL2WBcvQJ249k=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:24 2025 by rpki-client