Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa
File:                     12770fea-885a-3710-a35b-a1ab794c831c.roa (raw, json)
Hash identifier:          O+dZqodmxcP95U+JVi7OJxCsF2f/p63dqo8FeRqhiC4=
Subject key identifier:   9D:10:51:FC:85:01:56:4C:A0:BF:D5:D0:A3:B0:77:25:7C:76:45:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FD40B51D3C3E05D2438D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     20940
IP address blocks:        2600:1405:e400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d4:0b:51:d3:c3:e0:5d:24:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=303c99b7-2690-42b7-84e6-33e0aeaea700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:57:67:eb:78:f5:a1:94:d5:9e:db:9d:82:
                    ab:26:6a:69:94:4c:06:5e:ee:7c:1a:9e:e0:42:fc:
                    4a:5e:93:16:01:84:62:17:ff:bd:ac:19:5b:ac:cf:
                    0c:59:20:e1:33:5c:06:28:18:e5:95:5c:e7:2c:65:
                    e6:50:80:1e:5e:db:1a:ea:f1:48:71:3e:2a:eb:95:
                    da:57:5e:39:d0:73:3d:37:47:88:0f:1c:f4:da:e8:
                    98:02:5e:ab:1b:98:1b:72:b3:c6:b9:9a:28:c4:74:
                    0d:1a:90:e7:79:d2:c6:dd:e9:11:a5:b5:ed:89:b0:
                    48:dc:eb:af:4c:4e:c0:86:c2:2e:04:1b:b5:ce:dd:
                    4c:bb:da:ef:83:ec:38:8b:c1:9c:ae:5e:af:7d:6e:
                    de:89:ee:f7:6e:d7:26:6e:f8:4f:7d:89:f9:3f:db:
                    6d:39:74:78:c5:f7:2a:37:75:95:d0:b3:71:15:8f:
                    43:82:b3:ee:d9:be:54:9b:c6:ec:ec:ef:d2:48:99:
                    36:9a:cf:be:3e:6a:95:29:a5:3e:eb:e4:53:f2:5a:
                    38:f9:e1:c0:4f:a9:70:b7:f4:91:ca:e2:e6:d4:c4:
                    c4:f9:43:da:12:c0:93:14:15:11:4d:62:60:f7:ff:
                    5d:4c:4d:0f:01:c3:ea:c0:a3:4c:89:5d:e9:4e:88:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:51:FC:85:01:56:4C:A0:BF:D5:D0:A3:B0:77:25:7C:76:45:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:e400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:31:2b:79:f8:3e:3a:33:75:f6:97:52:42:43:2a:77:55:ae:
         53:2e:95:7d:09:e7:92:1c:f7:64:e8:16:60:13:8c:76:2f:61:
         47:74:b8:5a:d5:d6:34:e1:9c:88:e6:32:7c:ea:3c:24:69:00:
         d1:76:4f:9b:53:a3:b3:c8:3a:e1:88:f5:52:39:14:9a:70:1b:
         de:f0:9b:15:d7:52:8c:3e:e0:61:5b:ae:27:58:b9:ae:ff:7d:
         e7:3a:61:d9:a4:b6:37:ca:d9:dd:d7:79:13:4b:7e:cc:2c:ce:
         82:33:25:da:fe:c2:10:02:a1:2c:a4:fa:de:41:83:9a:ef:8c:
         d1:b8:c4:39:92:f8:24:d0:51:d2:54:20:aa:20:86:a5:85:bc:
         d4:b0:74:54:a9:a4:5a:50:35:c7:1a:b7:f0:53:f4:87:c8:78:
         ba:8a:4c:e3:e0:8d:ba:e0:3f:be:18:21:fd:25:17:62:d7:b5:
         68:6b:9b:8e:72:6e:ba:ea:51:f2:79:ba:79:24:da:60:42:46:
         18:21:87:ae:73:0c:47:3c:65:55:af:0a:4a:c7:92:3d:21:ca:
         a9:40:61:1a:63:0d:67:e2:cc:f7:87:bd:18:dc:77:b7:ec:6d:
         9c:7e:45:77:9e:35:08:9b:db:69:91:81:b8:95:d9:bc:4b:9e:
         15:ab:5a:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj9QLUdPD4F0kONAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MzAzYzk5YjctMjY5MC00MmI3LTg0ZTYtMzNlMGFlYWVhNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9XZ+t49aGU1Z7bnYKrJmpplEwGXu58Gp7g
QvxKXpMWAYRiF/+9rBlbrM8MWSDhM1wGKBjllVznLGXmUIAeXtsa6vFIcT4q65Xa
V1450HM9N0eIDxz02uiYAl6rG5gbcrPGuZooxHQNGpDnedLG3ekRpbXtibBI3Ouv
TE7AhsIuBBu1zt1Mu9rvg+w4i8Gcrl6vfW7eie73btcmbvhPfYn5P9ttOXR4xfcq
N3WV0LNxFY9DgrPu2b5Um8bs7O/SSJk2ms++PmqVKaU+6+RT8lo4+eHAT6lwt/SR
yuLm1MTE+UPaEsCTFBURTWJg9/9dTE0PAcPqwKNMiV3pTogS0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ0QUfyFAVZMoL/V0KOwdyV8dkWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI3NzBmZWEtODg1YS0z
NzEwLWEzNWItYTFhYjc5NGM4MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBeQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIUxK3n4PjozdfaXUkJDKndVrlMulX0J55Ic92ToFmATjHYvYUd0
uFrV1jThnIjmMnzqPCRpANF2T5tTo7PIOuGI9VI5FJpwG97wmxXXUow+4GFbridY
ua7/fec6YdmktjfK2d3XeRNLfswszoIzJdr+whACoSyk+t5Bg5rvjNG4xDmS+CTQ
UdJUIKoghqWFvNSwdFSppFpQNccat/BT9IfIeLqKTOPgjbrgP74YIf0lF2LXtWhr
m45ybrrqUfJ5unkk2mBCRhghh65zDEc8ZVWvCkrHkj0hyqlAYRpjDWfizPeHvRjc
d7fsbZx+RXeeNQib22mRgbiV2bxLnhWrWs8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:09 2025 by rpki-client