Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457972ed-2155-3593-b1c5-0b68d873f676.roa
File:                     457972ed-2155-3593-b1c5-0b68d873f676.roa (raw, json)
Hash identifier:          M07sF+6db5irKtj0KyZiGhTUveFMbIhBPIJjYYPDPjo=
Subject key identifier:   41:25:35:D9:9A:DA:05:FD:B6:CC:D6:96:13:73:49:A2:E1:5B:B2:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FBB9B8AD7ADF84CA37C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457972ed-2155-3593-b1c5-0b68d873f676.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1409:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fb:b9:b8:ad:7a:df:84:ca:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=fa6abfa5-3687-4e5b-937e-124b8ba475c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:1c:76:fd:87:86:a1:f0:3f:67:25:8b:63:
                    81:9e:90:89:af:b8:cc:bf:15:5c:4f:2d:ca:10:8d:
                    9f:0e:0b:ca:ae:4a:30:5d:4d:46:4b:c7:4f:55:88:
                    8a:d9:b4:05:7f:8e:0c:a3:88:90:ad:8c:dc:8f:a9:
                    3b:d7:0b:e5:b7:21:4a:b6:e8:c8:96:89:bb:bb:b2:
                    80:a3:25:8e:ed:15:77:47:f2:dc:03:6e:14:96:df:
                    11:70:a4:c6:60:22:30:43:e2:13:6c:b2:dc:fd:0d:
                    1d:dd:e8:32:40:7b:a7:9a:19:28:af:36:23:37:70:
                    b2:95:b9:62:bc:b2:c9:c6:da:fe:a1:be:47:dd:83:
                    03:1a:a1:81:4d:15:f2:cb:8b:a8:d2:eb:70:d2:1f:
                    4c:40:1f:89:53:f6:45:73:ed:9f:4d:46:2f:25:69:
                    66:cf:a5:6d:6c:d9:b3:b1:c7:96:f3:29:15:cf:d3:
                    80:e8:eb:8c:bc:a1:01:70:32:3b:3e:15:60:f2:5b:
                    31:b5:d8:4e:5a:e9:99:0c:d2:43:2e:e2:26:ba:27:
                    4d:4d:76:ff:60:83:19:ce:ba:69:87:0c:4e:19:52:
                    85:f0:74:20:19:13:a1:55:2b:e4:4c:63:c0:c8:eb:
                    6c:67:cc:63:cd:54:bf:8a:92:ea:b6:35:9d:e3:3c:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:25:35:D9:9A:DA:05:FD:B6:CC:D6:96:13:73:49:A2:E1:5B:B2:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457972ed-2155-3593-b1c5-0b68d873f676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:c800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:3a:a7:34:2f:ee:13:e0:56:71:0e:90:30:d7:35:ee:c3:
         19:2c:3b:c9:3b:31:40:8e:6f:11:cb:01:bf:18:7d:bb:aa:5f:
         49:ef:48:2e:e9:3c:4e:8e:8b:5e:fe:61:77:0a:68:3b:6d:e3:
         be:c2:9e:90:11:2d:f1:7f:a3:2b:b2:02:9e:ed:db:dc:72:72:
         df:93:9f:95:c7:68:a2:02:eb:e6:32:58:14:fd:8f:97:f0:69:
         76:05:8a:dc:ce:52:d1:af:fc:c1:3e:db:07:e4:bc:15:e2:df:
         8b:d5:d1:ae:c0:c1:3c:9e:01:f9:22:65:85:a9:68:06:62:c3:
         34:2b:db:be:ce:d9:6d:b4:6c:0a:6d:b6:d0:95:34:76:09:13:
         ba:7a:3b:8f:eb:1c:83:76:43:61:79:83:e2:f1:7a:8a:4e:8a:
         6c:42:eb:e4:32:e0:33:5e:ca:e0:99:1e:92:7d:ea:ce:dc:fc:
         f0:6a:dd:a9:b3:bf:e2:54:b9:83:ef:e7:c5:85:52:49:8b:93:
         53:2c:f0:97:96:ff:ec:6f:22:2f:9c:34:6c:60:02:e7:66:65:
         59:7c:76:a9:cf:b0:8b:ff:53:5e:f4:f2:d4:7d:7d:39:ec:af:
         ee:4c:d8:ec:ee:d5:1c:a0:10:6a:f0:5a:03:17:4e:62:21:ee:
         2c:af:17:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfu5uK1634TKN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
ZmE2YWJmYTUtMzY4Ny00ZTViLTkzN2UtMTI0YjhiYTQ3NWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt4cdv2HhqHwP2cli2OBnpCJr7jMvxVcTy3K
EI2fDgvKrkowXU1GS8dPVYiK2bQFf44Mo4iQrYzcj6k71wvltyFKtujIlom7u7KA
oyWO7RV3R/LcA24Ult8RcKTGYCIwQ+ITbLLc/Q0d3egyQHunmhkorzYjN3Cylbli
vLLJxtr+ob5H3YMDGqGBTRXyy4uo0utw0h9MQB+JU/ZFc+2fTUYvJWlmz6VtbNmz
sceW8ykVz9OA6OuMvKEBcDI7PhVg8lsxtdhOWumZDNJDLuImuidNTXb/YIMZzrpp
hwxOGVKF8HQgGROhVSvkTGPAyOtsZ8xjzVS/ipLqtjWd4zx94QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEElNdma2gX9tszWlhNzSaLhW7J2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU3OTcyZWQtMjE1NS0z
NTkzLWIxYzUtMGI2OGQ4NzNmNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCcgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIzDOqc0L+4T4FZxDpAw1zXuwxksO8k7MUCObxHLAb8YfbuqX0nv
SC7pPE6Oi17+YXcKaDtt477CnpARLfF/oyuyAp7t29xyct+Tn5XHaKIC6+YyWBT9
j5fwaXYFitzOUtGv/ME+2wfkvBXi34vV0a7AwTyeAfkiZYWpaAZiwzQr277O2W20
bAptttCVNHYJE7p6O4/rHIN2Q2F5g+LxeopOimxC6+Qy4DNeyuCZHpJ96s7c/PBq
3amzv+JUuYPv58WFUkmLk1Ms8JeW/+xvIi+cNGxgAudmZVl8dqnPsIv/U1708tR9
fTnsr+5M2Ozu1RygEGrwWgMXTmIh7iyvF6E=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:55:52 2025 by rpki-client