Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac0eb5b-c675-331c-ac22-6c31f717ca5e.roa
File:                     eac0eb5b-c675-331c-ac22-6c31f717ca5e.roa (raw, json)
Hash identifier:          WQ/59avIeT3zVTgWQZHZX3VxOH/NQ6OQ6YmMMaggsb8=
Subject key identifier:   FE:B5:6F:5C:59:1E:E7:1E:F9:B0:AC:0B:B1:D9:B4:1A:1B:95:7F:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FA2327547DB71D2BFB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac0eb5b-c675-331c-ac22-6c31f717ca5e.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1406:5a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fa:23:27:54:7d:b7:1d:2b:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=90ac76f2-34f5-4739-a8dc-1b71627b1a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d6:a4:54:21:2b:b6:f0:65:fe:55:dc:ee:06:
                    1f:f4:70:99:5f:45:34:d4:18:89:a8:52:aa:f7:7e:
                    68:ee:29:03:0a:b3:e2:d9:6a:df:a0:d4:c3:ee:3b:
                    27:f5:d6:5a:f4:c8:53:6f:5f:0a:89:54:02:97:89:
                    93:a1:ad:df:33:79:ac:f4:45:7f:29:c4:4e:73:e1:
                    47:d9:6d:b7:6d:c2:c6:1b:05:a8:40:31:ea:7b:4e:
                    db:16:82:ff:77:e8:a0:da:de:f3:2e:2a:ce:82:f3:
                    3f:15:5c:2f:5f:e0:8b:f2:39:fa:7c:fd:cc:58:be:
                    1a:fd:c9:8c:0c:11:41:c9:03:d6:33:50:2a:fe:4f:
                    cf:f9:eb:ca:33:91:6f:f7:25:39:a4:ce:07:fa:ff:
                    00:51:f5:8c:32:a6:25:43:97:47:35:a6:13:0b:40:
                    97:1a:4e:ef:96:54:ca:a6:96:5d:a8:84:05:22:89:
                    8b:ee:43:b4:c9:54:fe:da:a8:75:7d:c5:e7:a6:49:
                    64:54:6c:67:1b:88:f7:3a:73:83:a3:2a:ef:45:5e:
                    76:b2:9f:5b:1f:e9:41:02:4a:a8:02:21:2c:3a:ba:
                    bc:7f:67:3e:7d:14:45:33:77:aa:48:32:bd:89:32:
                    f6:4e:f3:ff:f3:f5:fa:ca:18:04:de:a2:3c:f7:ed:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:6F:5C:59:1E:E7:1E:F9:B0:AC:0B:B1:D9:B4:1A:1B:95:7F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eac0eb5b-c675-331c-ac22-6c31f717ca5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:5a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:af:cf:5b:49:f2:8d:d2:dc:1e:de:a0:b1:9e:23:cf:a0:
         44:b6:b7:36:86:10:b8:d9:50:ca:70:8f:4a:66:8d:26:ee:36:
         5c:e5:83:e8:37:55:a2:de:d4:27:37:50:42:dd:af:84:83:c9:
         a7:67:f7:74:81:d6:75:99:86:26:fa:99:d4:4f:09:76:c6:fd:
         e4:71:8f:54:d4:58:e6:6b:66:a9:5c:fd:5f:d8:12:1c:93:60:
         f8:78:cb:ba:fc:36:c6:99:1e:89:a1:e8:70:5a:7a:d0:dc:91:
         a8:e6:57:46:42:dd:46:58:c4:d4:1e:d7:77:74:23:95:9b:96:
         e8:03:87:33:ac:9d:fa:38:7d:9f:4f:c2:55:14:2f:25:91:3b:
         9a:f4:7a:e5:cb:1c:99:cb:42:b9:a3:7e:34:82:d6:95:22:43:
         77:a8:06:ce:ae:37:54:97:5d:16:98:4b:b5:3c:92:ab:94:20:
         ac:43:f4:45:5b:6f:85:2a:0e:c4:32:ac:90:2e:a5:94:b4:0b:
         82:6d:e4:a1:0d:2e:88:ac:78:ce:f9:62:65:34:dc:87:93:91:
         71:75:27:fd:41:86:10:a6:02:fe:10:aa:9c:30:79:b5:eb:12:
         0f:70:b1:6c:43:e5:5b:3d:de:6a:01:ab:c2:1f:c1:f8:9e:17:
         53:86:a9:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfojJ1R9tx0r+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
OTBhYzc2ZjItMzRmNS00NzM5LWE4ZGMtMWI3MTYyN2IxYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtakVCErtvBl/lXc7gYf9HCZX0U01BiJqFKq
935o7ikDCrPi2WrfoNTD7jsn9dZa9MhTb18KiVQCl4mToa3fM3ms9EV/KcROc+FH
2W23bcLGGwWoQDHqe07bFoL/d+ig2t7zLirOgvM/FVwvX+CL8jn6fP3MWL4a/cmM
DBFByQPWM1Aq/k/P+evKM5Fv9yU5pM4H+v8AUfWMMqYlQ5dHNaYTC0CXGk7vllTK
ppZdqIQFIomL7kO0yVT+2qh1fcXnpklkVGxnG4j3OnODoyrvRV52sp9bH+lBAkqo
AiEsOrq8f2c+fRRFM3eqSDK9iTL2TvP/8/X6yhgE3qI89+0J7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP61b1xZHuce+bCsC7HZtBoblX+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFjMGViNWItYzY3NS0z
MzFjLWFjMjItNmMzMWY3MTdjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBloA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHfPr89bSfKN0twe3qCxniPPoES2tzaGELjZUMpwj0pmjSbuNlzl
g+g3VaLe1Cc3UELdr4SDyadn93SB1nWZhib6mdRPCXbG/eRxj1TUWOZrZqlc/V/Y
EhyTYPh4y7r8NsaZHomh6HBaetDckajmV0ZC3UZYxNQe13d0I5WblugDhzOsnfo4
fZ9PwlUULyWRO5r0euXLHJnLQrmjfjSC1pUiQ3eoBs6uN1SXXRaYS7U8kquUIKxD
9EVbb4UqDsQyrJAupZS0C4Jt5KENLoiseM75YmU03IeTkXF1J/1BhhCmAv4Qqpww
ebXrEg9wsWxD5Vs93moBq8IfwfieF1OGqaU=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:27:58 2025 by rpki-client