Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ae80f85-33a4-3f34-921d-3cae19ac5f91.roa
File:                     4ae80f85-33a4-3f34-921d-3cae19ac5f91.roa (raw, json)
Hash identifier:          XSz/olhXwz5Fe1EOFbNWqpFDY3YbyT0oTZr4sF+NzB8=
Subject key identifier:   50:BB:2F:B2:C0:B4:CD:30:82:45:43:99:8D:9F:00:C3:B0:A4:C1:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AFB9A975F6F17EA0031715320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ae80f85-33a4-3f34-921d-3cae19ac5f91.roa
Signing time:             Tue 26 Aug 2025 08:40:08 +0000
ROA not before:           Tue 26 Aug 2025 08:40:08 +0000
ROA not after:            Mon 24 Nov 2025 09:40:08 +0000
asID:                     14618
IP address blocks:        2606:6c00:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fb:9a:97:5f:6f:17:ea:00:31:71:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 26 08:40:08 2025 GMT
            Not After : Nov 24 09:40:08 2025 GMT
        Subject: CN=9d7a8878-4155-4585-8a5e-fa661f8393fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:d1:70:1b:2e:17:9e:cc:62:8f:fd:a9:6b:
                    bc:ac:07:eb:99:3c:f2:17:81:da:2a:b0:51:a8:4d:
                    b5:d9:88:9d:41:52:96:6a:0a:6d:0a:ef:a6:52:6f:
                    d9:25:4a:4d:9f:89:37:57:3e:bc:e8:14:9e:6d:fa:
                    1a:c4:ce:c4:5f:63:0f:d9:9f:e3:56:22:a1:05:14:
                    42:cf:dc:b5:89:2a:e1:57:b6:94:0f:b3:14:03:1e:
                    8b:a5:85:09:f2:32:0e:ef:bf:25:53:e5:6c:8f:fa:
                    45:1a:e8:99:4a:0f:d1:fa:50:6c:eb:e3:d9:27:fe:
                    79:90:31:a0:08:89:ef:c9:8f:3a:1a:d0:c3:7c:8a:
                    d9:d7:30:a7:4c:29:9c:1e:49:c1:cb:e0:e6:59:df:
                    56:34:48:99:d7:17:1d:07:9d:d2:f8:28:a0:1c:20:
                    f2:c3:b9:92:c2:e4:60:86:2f:eb:f2:c4:59:8e:e5:
                    54:fb:94:09:bf:78:2e:08:58:4c:ca:48:0e:b5:b2:
                    0b:55:42:e4:f9:e8:c3:5e:5c:fa:46:13:d2:30:ab:
                    80:5f:2b:18:17:58:ba:33:ef:06:4c:9a:e0:54:01:
                    c9:dd:bc:b2:41:93:39:b9:4e:af:9b:08:40:37:93:
                    99:e7:bc:c0:7f:62:ce:1a:64:ee:5d:02:09:24:39:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:2F:B2:C0:B4:CD:30:82:45:43:99:8D:9F:00:C3:B0:A4:C1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ae80f85-33a4-3f34-921d-3cae19ac5f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:68:72:cd:0a:26:24:54:3e:6a:1f:f5:80:9d:7d:c9:e3:1f:
         53:85:40:69:92:4d:dd:26:e8:65:c3:dc:0b:b9:59:0a:a3:ee:
         2d:db:cd:06:f9:1a:3c:cb:d0:87:2c:a2:17:e3:df:3c:f9:08:
         6b:28:c8:c7:35:a4:4c:da:0c:8b:b7:9e:df:4c:d8:b2:42:9b:
         eb:2b:82:00:17:2b:5e:2f:5f:48:c8:da:16:a7:18:ff:6e:de:
         1b:0a:59:f9:1f:8f:74:3d:dd:30:37:b8:f9:b4:0a:20:be:4a:
         18:d4:30:66:6f:28:f3:36:61:a5:97:23:e5:9a:06:bc:e5:67:
         ee:f8:05:62:e1:0e:e3:82:14:38:c2:09:e7:55:0b:8f:ec:9c:
         b2:eb:13:24:94:e8:ba:3e:53:0f:11:43:a5:37:6c:5e:c6:9d:
         5c:cf:8d:99:58:64:88:2a:dd:5c:86:e9:ad:9a:df:3b:21:0c:
         0a:61:f6:63:50:ac:c9:d8:23:94:ab:6b:74:a5:e8:e4:35:e0:
         1b:a1:f9:08:c4:6e:eb:d8:75:a0:5f:d6:0e:4f:cc:55:7a:5e:
         e8:f0:e2:77:b4:a6:1d:5e:bd:18:58:0e:70:12:a8:3a:f6:9e:
         5f:24:77:9c:b5:51:35:a6:8e:5b:87:27:ba:cd:c4:c7:fd:fa:
         03:9f:21:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr7mpdfbxfqADFxUyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgyNjA4NDAwOFoXDTI1MTEyNDA5NDAwOFowLzEtMCsGA1UEAxMk
OWQ3YTg4NzgtNDE1NS00NTg1LThhNWUtZmE2NjFmODM5M2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBHRcBsuF57MYo/9qWu8rAfrmTzyF4HaKrBR
qE212YidQVKWagptCu+mUm/ZJUpNn4k3Vz686BSebfoaxM7EX2MP2Z/jViKhBRRC
z9y1iSrhV7aUD7MUAx6LpYUJ8jIO778lU+Vsj/pFGuiZSg/R+lBs6+PZJ/55kDGg
CInvyY86GtDDfIrZ1zCnTCmcHknBy+DmWd9WNEiZ1xcdB53S+CigHCDyw7mSwuRg
hi/r8sRZjuVU+5QJv3guCFhMykgOtbILVULk+ejDXlz6RhPSMKuAXysYF1i6M+8G
TJrgVAHJ3byyQZM5uU6vmwhAN5OZ57zAf2LOGmTuXQIJJDnCkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFC7L7LAtM0wgkVDmY2fAMOwpMHXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFlODBmODUtMzNhNC0z
ZjM0LTkyMWQtM2NhZTE5YWM1ZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFRocs0KJiRUPmof9YCdfcnjH1OFQGmSTd0m6GXD3Au5WQqj7i3b
zQb5GjzL0Icsohfj3zz5CGsoyMc1pEzaDIu3nt9M2LJCm+srggAXK14vX0jI2han
GP9u3hsKWfkfj3Q93TA3uPm0CiC+ShjUMGZvKPM2YaWXI+WaBrzlZ+74BWLhDuOC
FDjCCedVC4/snLLrEySU6Lo+Uw8RQ6U3bF7GnVzPjZlYZIgq3VyG6a2a3zshDAph
9mNQrMnYI5Sra3Sl6OQ14Buh+QjEbuvYdaBf1g5PzFV6Xujw4ne0ph1evRhYDnAS
qDr2nl8kd5y1UTWmjluHJ7rNxMf9+gOfIRI=
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:27:57 2025 by rpki-client