Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12a65bb9-19b0-31a0-b6f6-c556c68d3b21.roa
File:                     12a65bb9-19b0-31a0-b6f6-c556c68d3b21.roa (raw, json)
Hash identifier:          TVPTPxLIFJ1Pp8nkTrO7tuizPoI82ZqimPzLoU0V/ms=
Subject key identifier:   AB:2B:EB:3A:C3:D8:79:C7:73:10:A5:8B:B6:31:BA:18:1F:1D:9F:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF23A233193CF49FB0D0C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12a65bb9-19b0-31a0-b6f6-c556c68d3b21.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     38040
IP address blocks:        2600:1417:2c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:23:a2:33:19:3c:f4:9f:b0:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=79d2d0f2-b800-48aa-9d0c-e5b43590c5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4a:e7:4c:99:f0:72:72:aa:8e:79:70:86:19:
                    85:a5:01:ef:6e:75:00:8f:96:0b:fe:e7:43:8e:0c:
                    cc:4b:4d:aa:e5:7f:90:3e:85:cf:db:7a:32:11:1f:
                    25:cc:d6:d6:21:e6:4a:62:27:91:5e:ce:1a:c6:fd:
                    b2:ec:f3:fc:bd:c4:55:8d:d6:26:18:e0:b9:44:38:
                    b8:e9:ab:13:3b:39:0c:7e:11:7d:52:f7:79:30:7d:
                    a8:84:68:26:eb:f1:e2:43:da:82:46:21:9c:46:04:
                    46:3d:34:bc:b7:2b:74:47:a7:41:28:5d:ef:4a:20:
                    62:03:89:0a:d1:b3:d1:d2:70:dc:9a:a7:3b:b1:55:
                    e4:89:29:a7:f0:6f:f9:c7:a6:c3:92:a3:dd:03:8f:
                    6e:c5:df:c7:95:b7:d6:c8:c3:7e:e8:8f:af:3b:f4:
                    07:69:8f:d4:f0:c1:2b:a6:5f:f6:44:62:4b:7a:92:
                    c7:b1:90:ea:8f:a1:32:e9:88:13:95:81:ad:ea:dd:
                    54:27:b4:a2:fa:12:25:75:00:7d:3f:ea:9d:a2:1f:
                    a0:79:74:b9:7d:9b:ff:87:a8:8c:4e:16:f7:76:96:
                    f5:eb:e9:1b:5b:cd:88:7d:5e:a0:b9:47:dd:59:ed:
                    d8:80:61:c5:54:b2:b3:31:d9:2c:52:29:44:bf:08:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:EB:3A:C3:D8:79:C7:73:10:A5:8B:B6:31:BA:18:1F:1D:9F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12a65bb9-19b0-31a0-b6f6-c556c68d3b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:2c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:9e:54:63:69:a9:5f:56:03:24:cd:83:30:0b:7e:0b:96:
         de:e6:b8:0d:95:2d:a0:ce:c1:f8:3d:15:fe:a2:dd:3b:35:d9:
         7d:f7:f6:67:14:80:f9:34:ed:e7:c7:6f:3a:a9:0d:09:19:dd:
         0d:6b:60:3d:33:5c:e9:fc:53:20:db:b8:6e:04:75:34:39:3e:
         d4:11:a7:8c:d3:35:36:88:d8:fc:3e:53:41:09:c5:d0:f0:4c:
         e1:c1:24:6a:05:a3:9b:28:24:17:be:b7:b7:54:16:74:c1:97:
         ce:a1:40:78:5e:7b:16:16:52:81:f5:e5:74:ea:1e:0b:7a:88:
         7d:f1:ba:6a:62:65:67:ac:b1:4c:5d:54:10:a4:64:09:8c:71:
         e5:ef:e4:c9:a5:ea:ef:21:ae:a2:d1:b9:8e:41:86:b5:d3:b4:
         8a:b4:c4:23:b1:d7:67:75:e2:eb:63:d2:ce:72:cb:58:29:6b:
         6e:4c:e9:a6:55:cd:9d:24:e8:c5:1b:7f:d5:72:92:cc:37:fe:
         6f:10:5f:7b:2b:d4:b1:21:06:66:3a:ea:12:1a:2e:27:98:cd:
         4f:9f:ea:fe:9f:d3:5f:94:34:54:c9:13:75:d0:c8:d8:3f:03:
         32:e6:d9:f4:90:0c:a8:97:f6:df:b1:d1:c5:5a:9f:1c:d5:9a:
         08:14:65:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yOiMxk89J+w0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
NzlkMmQwZjItYjgwMC00OGFhLTlkMGMtZTViNDM1OTBjNWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ErnTJnwcnKqjnlwhhmFpQHvbnUAj5YL/udD
jgzMS02q5X+QPoXP23oyER8lzNbWIeZKYieRXs4axv2y7PP8vcRVjdYmGOC5RDi4
6asTOzkMfhF9Uvd5MH2ohGgm6/HiQ9qCRiGcRgRGPTS8tyt0R6dBKF3vSiBiA4kK
0bPR0nDcmqc7sVXkiSmn8G/5x6bDkqPdA49uxd/HlbfWyMN+6I+vO/QHaY/U8MEr
pl/2RGJLepLHsZDqj6Ey6YgTlYGt6t1UJ7Si+hIldQB9P+qdoh+geXS5fZv/h6iM
Thb3dpb16+kbW82IfV6guUfdWe3YgGHFVLKzMdksUilEvwge7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKsr6zrD2HnHcxCli7YxuhgfHZ/7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTJhNjViYjktMTliMC0z
MWEwLWI2ZjYtYzU1NmM2OGQzYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFywA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAqrnlRjaalfVgMkzYMwC34Llt7muA2VLaDOwfg9Ff6i3Ts12X33
9mcUgPk07efHbzqpDQkZ3Q1rYD0zXOn8UyDbuG4EdTQ5PtQRp4zTNTaI2Pw+U0EJ
xdDwTOHBJGoFo5soJBe+t7dUFnTBl86hQHheexYWUoH15XTqHgt6iH3xumpiZWes
sUxdVBCkZAmMceXv5Mml6u8hrqLRuY5BhrXTtIq0xCOx12d14utj0s5yy1gpa25M
6aZVzZ0k6MUbf9Vyksw3/m8QX3sr1LEhBmY66hIaLieYzU+f6v6f01+UNFTJE3XQ
yNg/AzLm2fSQDKiX9t+x0cVanxzVmggUZQc=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:34 2025 by rpki-client