Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99bf05f1-f114-3ba6-8306-2edc8016f147.roa
File:                     99bf05f1-f114-3ba6-8306-2edc8016f147.roa (raw, json)
Hash identifier:          1KGWcD1MpeWpC5Pgr+CTlhdmVLZOeRwthrh9a52NzsU=
Subject key identifier:   58:00:D2:A2:6B:76:64:0E:83:E7:53:70:FE:6F:E6:45:FE:69:CA:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68263CF5D34D2F489212BD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99bf05f1-f114-3ba6-8306-2edc8016f147.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        2600:1488:4041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:3c:f5:d3:4d:2f:48:92:12:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=43dfcbcb-d8cb-47e2-871c-a4505d3ee734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:9f:ea:07:18:4a:d2:99:71:6c:3a:e6:4b:
                    74:3e:75:af:2f:e9:ac:c2:d1:0e:c3:6d:7e:ff:18:
                    21:97:fd:97:b1:e1:07:f2:20:61:ef:b9:15:fa:43:
                    4f:bf:7c:ae:ec:c4:07:61:c4:30:77:59:47:cf:bf:
                    57:ff:47:bb:15:e1:88:33:58:d7:72:15:4e:16:66:
                    6a:47:1c:89:97:2c:de:a0:ac:c9:72:06:42:f9:a8:
                    b7:d7:26:28:f4:03:53:4a:2f:2d:0c:6c:bf:17:e1:
                    21:db:c1:2a:5a:85:99:01:75:b4:21:a2:3a:be:f2:
                    32:5c:61:79:4a:97:e8:14:f3:b1:63:66:e6:6e:0f:
                    c6:48:c3:73:5c:d1:0e:7e:49:0a:cb:e3:5d:94:10:
                    d8:ba:33:12:a9:d3:73:ec:c9:33:53:4a:19:39:8c:
                    c4:14:15:98:b6:3c:28:0f:41:35:41:98:57:b8:66:
                    43:b8:b5:81:41:4b:b1:6c:fb:f5:39:e5:20:3d:d4:
                    54:ae:c3:3a:c8:f1:74:1d:cb:f3:a1:2c:23:bf:9a:
                    9f:96:ca:6c:85:0c:16:2c:a2:c9:88:b9:f2:b4:37:
                    53:ee:fd:54:b5:c9:cf:35:72:44:f3:ef:96:77:38:
                    28:77:5d:ce:3f:5c:04:41:14:d5:25:59:fa:c3:3c:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:D2:A2:6B:76:64:0E:83:E7:53:70:FE:6F:E6:45:FE:69:CA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99bf05f1-f114-3ba6-8306-2edc8016f147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:90:6b:e8:14:5c:ba:3b:23:12:9d:c4:f4:17:78:41:3c:1c:
         ce:2f:fc:d8:c9:6b:c1:5a:2a:a2:9d:5a:06:fa:28:80:6c:1f:
         6c:1c:54:96:9c:60:9c:70:15:12:fe:28:fb:1c:1d:b3:a8:8d:
         20:4c:cd:09:1e:ea:0b:af:41:96:f4:23:44:69:47:62:c1:36:
         56:a0:9e:a2:41:01:c0:21:38:1c:12:1c:de:30:58:cc:b5:bb:
         09:4a:76:fd:be:7d:3b:d3:a3:04:e5:58:6c:9d:14:48:74:39:
         3d:f0:3d:11:23:5b:78:d1:ba:45:5c:64:93:48:77:62:b7:75:
         3c:8b:a0:b2:3d:c6:49:9a:69:ff:ea:10:8f:fa:95:e7:21:09:
         06:70:ad:9c:76:de:d3:da:de:c1:41:b2:af:ce:12:7d:6e:20:
         ef:0e:47:97:b2:29:55:0c:7f:da:fb:59:a1:ac:80:a0:0d:32:
         1e:c3:7d:50:d4:e4:d8:aa:a7:6e:eb:22:ae:c1:52:aa:a5:57:
         56:b3:ba:64:d5:37:db:e1:46:3c:0b:53:63:5f:46:80:80:bb:
         b8:42:e6:7d:4c:bf:7b:8f:0c:a9:bb:8f:fa:78:d0:04:e1:24:
         bf:04:a6:77:8d:0b:8b:07:18:d4:e2:90:0b:e3:7c:37:77:08:
         0c:0a:cd:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJjz1000vSJISvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NDNkZmNiY2ItZDhjYi00N2UyLTg3MWMtYTQ1MDVkM2VlNzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN+f6gcYStKZcWw65kt0PnWvL+mswtEOw21+
/xghl/2XseEH8iBh77kV+kNPv3yu7MQHYcQwd1lHz79X/0e7FeGIM1jXchVOFmZq
RxyJlyzeoKzJcgZC+ai31yYo9ANTSi8tDGy/F+Eh28EqWoWZAXW0IaI6vvIyXGF5
SpfoFPOxY2bmbg/GSMNzXNEOfkkKy+NdlBDYujMSqdNz7MkzU0oZOYzEFBWYtjwo
D0E1QZhXuGZDuLWBQUuxbPv1OeUgPdRUrsM6yPF0HcvzoSwjv5qflspshQwWLKLJ
iLnytDdT7v1UtcnPNXJE8++Wdzgod13OP1wEQRTVJVn6wzxBXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFgA0qJrdmQOg+dTcP5v5kX+acoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTliZjA1ZjEtZjExNC0z
YmE2LTgzMDYtMmVkYzgwMTZmMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEBB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABKQa+gUXLo7IxKdxPQXeEE8HM4v/NjJa8FaKqKdWgb6KIBsH2wc
VJacYJxwFRL+KPscHbOojSBMzQke6guvQZb0I0RpR2LBNlagnqJBAcAhOBwSHN4w
WMy1uwlKdv2+fTvTowTlWGydFEh0OT3wPREjW3jRukVcZJNId2K3dTyLoLI9xkma
af/qEI/6lechCQZwrZx23tPa3sFBsq/OEn1uIO8OR5eyKVUMf9r7WaGsgKANMh7D
fVDU5Niqp27rIq7BUqqlV1azumTVN9vhRjwLU2NfRoCAu7hC5n1Mv3uPDKm7j/p4
0AThJL8EpneNC4sHGNTikAvjfDd3CAwKzVM=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:42 2025 by rpki-client