Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c10cbb-8d64-3b31-8073-deedf263afa5.roa
File:                     f5c10cbb-8d64-3b31-8073-deedf263afa5.roa (raw, json)
Hash identifier:          133uaTszR7UBE+KE/etVntjBc6KtJ0eUao9sy53aIjk=
Subject key identifier:   58:B6:D9:77:02:4D:E2:B2:F2:A2:86:94:12:68:AC:EC:91:2D:28:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A857600A415262F6612503680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c10cbb-8d64-3b31-8073-deedf263afa5.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     21342
IP address blocks:        2600:1480:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:00:a4:15:26:2f:66:12:50:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=45536838-2718-45a3-9a37-0bb5668f9995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:7b:32:d1:cb:3e:9b:49:e1:2a:bf:ca:52:
                    45:d5:bd:78:75:27:39:d3:a6:96:a5:0b:4a:13:a1:
                    a0:eb:e2:b4:b7:82:a9:84:e3:44:63:08:36:a0:a2:
                    23:0f:e0:5c:18:d3:a5:1b:3b:4d:12:70:58:14:59:
                    46:ea:9d:61:0e:4f:85:e5:bc:d5:79:ae:1d:1f:79:
                    4a:fe:1e:3a:b4:5b:1b:b6:f6:5b:4f:23:4f:c5:5e:
                    e8:35:dd:95:d2:af:24:4e:6e:5e:fa:e7:5b:ac:46:
                    e1:c5:29:2a:37:d9:e3:af:0b:a8:56:2c:29:1d:4b:
                    fa:53:64:50:54:8a:bd:8b:7d:74:f6:12:90:4a:22:
                    97:d5:cf:f3:a8:f8:ae:32:81:35:55:81:2b:a8:0b:
                    d0:32:68:6f:40:8b:2f:19:8d:ec:57:fe:18:c8:f0:
                    a3:33:7b:1b:39:f1:ac:26:06:94:04:5a:c9:6e:0f:
                    db:0c:f0:80:64:b9:75:27:dc:a8:2f:41:94:64:04:
                    bf:ea:a3:3a:82:b0:0f:9a:03:98:64:cc:03:f7:dc:
                    b0:6e:9f:c2:d9:80:46:a2:e4:dc:17:4c:38:1a:3b:
                    58:03:31:c8:14:66:5a:4e:4a:0c:63:01:d7:72:46:
                    50:a9:77:3b:22:99:f6:f5:78:83:56:41:52:0b:0d:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B6:D9:77:02:4D:E2:B2:F2:A2:86:94:12:68:AC:EC:91:2D:28:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c10cbb-8d64-3b31-8073-deedf263afa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:89:14:78:2e:62:dc:1b:a1:c8:df:99:d3:21:d4:77:a8:c3:
         0a:af:2b:c2:4a:4c:37:21:87:1f:6e:26:d6:5f:75:94:b2:dc:
         8b:66:08:a4:2b:81:3e:52:76:a3:77:f3:2b:8d:b2:c8:c8:bc:
         82:97:65:cf:d5:b5:f5:75:11:3b:42:f7:ad:1c:d6:66:73:94:
         d3:9c:42:bb:80:43:61:41:7b:06:f0:61:f0:32:34:2f:23:65:
         91:1a:93:b7:3a:d0:06:7f:05:0e:cc:b3:06:52:09:ec:17:a9:
         89:d8:df:5c:c5:bb:b3:8f:e8:1e:9a:38:71:96:94:6c:82:50:
         77:a9:97:8c:4a:5e:46:fd:d3:86:99:24:10:dd:0e:72:90:f5:
         aa:91:e1:d1:01:df:ba:f6:c2:ad:b9:bf:28:9d:1a:79:d7:3f:
         56:be:67:31:a0:16:e7:22:52:d2:6b:d6:24:21:8b:1a:d6:e8:
         84:6e:92:31:cf:4f:06:79:46:ae:00:f5:65:07:e5:b8:0d:d5:
         cf:4e:91:6c:a6:c6:ae:5b:4b:cc:40:7f:80:7e:93:e1:3c:92:
         97:07:d1:2f:97:26:b0:91:e3:99:af:c9:93:88:49:ce:7c:00:
         86:43:31:1e:51:a1:cb:f1:d1:1c:13:e1:94:04:0a:23:9d:76:
         90:74:60:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFdgCkFSYvZhJQNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk
NDU1MzY4MzgtMjcxOC00NWEzLTlhMzctMGJiNTY2OGY5OTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh117MtHLPptJ4Sq/ylJF1b14dSc506aWpQtK
E6Gg6+K0t4KphONEYwg2oKIjD+BcGNOlGztNEnBYFFlG6p1hDk+F5bzVea4dH3lK
/h46tFsbtvZbTyNPxV7oNd2V0q8kTm5e+udbrEbhxSkqN9njrwuoViwpHUv6U2RQ
VIq9i3109hKQSiKX1c/zqPiuMoE1VYErqAvQMmhvQIsvGY3sV/4YyPCjM3sbOfGs
JgaUBFrJbg/bDPCAZLl1J9yoL0GUZAS/6qM6grAPmgOYZMwD99ywbp/C2YBGouTc
F0w4GjtYAzHIFGZaTkoMYwHXckZQqXc7Ipn29XiDVkFSCw0qBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFi22XcCTeKy8qKGlBJorOyRLShLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVjMTBjYmItOGQ2NC0z
YjMxLTgwNzMtZGVlZGYyNjNhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUgAwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFKJFHguYtwbocjfmdMh1HeowwqvK8JKTDchhx9uJtZfdZSy3Itm
CKQrgT5SdqN38yuNssjIvIKXZc/VtfV1ETtC960c1mZzlNOcQruAQ2FBewbwYfAy
NC8jZZEak7c60AZ/BQ7MswZSCewXqYnY31zFu7OP6B6aOHGWlGyCUHepl4xKXkb9
04aZJBDdDnKQ9aqR4dEB37r2wq25vyidGnnXP1a+ZzGgFuciUtJr1iQhixrW6IRu
kjHPTwZ5Rq4A9WUH5bgN1c9OkWymxq5bS8xAf4B+k+E8kpcH0S+XJrCR45mvyZOI
Sc58AIZDMR5Rocvx0RwT4ZQECiOddpB0YJU=
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:58:27 2025 by rpki-client