Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7666df2-e60f-3720-9f63-b8ecdfb1340e.roa
File:                     d7666df2-e60f-3720-9f63-b8ecdfb1340e.roa (raw, json)
Hash identifier:          jFzHi18hveGUOp9s3r64+r7uI5U5s6gwCTPNAlSDgI8=
Subject key identifier:   DE:81:E7:E1:55:7B:82:46:F7:1D:58:2D:BE:A2:32:84:04:D7:F8:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F9C8D7F653419F7A29B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7666df2-e60f-3720-9f63-b8ecdfb1340e.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63949
IP address blocks:        2600:3c12:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9c:8d:7f:65:34:19:f7:a2:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=858002bf-3670-4f93-95e2-4552b876103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:53:a7:fb:d4:b3:20:0d:f6:86:03:bd:dd:
                    93:38:eb:4a:00:e6:71:88:3d:ac:96:6c:10:69:4b:
                    21:b6:21:03:d2:2d:f0:7e:b5:42:ac:a2:e2:2b:44:
                    36:89:fc:e5:1a:b0:4e:68:d1:4b:20:86:7d:0a:e4:
                    a4:e3:a7:f4:1f:25:0d:fe:dd:4f:1f:00:4e:55:09:
                    34:b7:54:5a:4c:5b:10:66:5e:82:d2:5b:9a:9e:47:
                    ab:19:63:b3:0d:82:5f:0a:66:64:dd:80:14:f6:64:
                    6c:54:d5:1b:81:74:70:3f:bf:1b:8e:24:04:9f:95:
                    96:24:78:ef:68:9d:06:71:80:9e:67:dd:d9:5b:8c:
                    6d:d6:c9:17:32:ae:68:db:4d:8d:fc:a7:60:8f:23:
                    0e:26:4e:e7:c1:9a:98:7a:3b:08:c4:d4:42:a6:10:
                    f4:fe:52:22:ce:c2:df:47:1a:5e:0c:9c:1b:9b:2b:
                    42:39:ac:0f:a8:1e:40:15:1f:88:ca:29:25:a4:7d:
                    95:e7:c0:69:7b:62:94:27:cb:3a:b1:b4:fc:c1:52:
                    08:d7:86:28:57:91:7f:1a:8e:e7:2a:0f:c6:cf:95:
                    c9:71:92:4f:02:f9:ec:01:34:6b:9a:1f:aa:0a:92:
                    0c:38:2c:40:27:a9:bf:91:f6:2a:9e:3c:7d:13:da:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:E7:E1:55:7B:82:46:F7:1D:58:2D:BE:A2:32:84:04:D7:F8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7666df2-e60f-3720-9f63-b8ecdfb1340e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:83:17:e4:20:a5:9f:74:35:a1:75:83:a1:84:7e:af:89:
         be:0b:d7:eb:93:01:14:03:7d:f6:9c:57:4e:55:df:c3:74:76:
         4a:78:93:c9:df:35:bf:ed:e5:c8:47:2d:b8:8d:1d:4e:90:6e:
         3d:a9:e6:ff:6f:77:75:ef:4e:b2:9b:7f:af:73:5b:d1:6b:16:
         e2:df:5e:d1:88:78:1b:a8:ec:1e:62:95:c6:cb:e5:46:d8:d6:
         b3:a7:ba:6b:5f:f9:93:28:29:65:16:63:0d:e8:9e:db:ca:c2:
         ae:bb:68:82:9c:6f:ab:19:d8:86:ba:d9:d0:b7:c3:74:73:96:
         41:a9:e9:38:0a:0d:8b:b0:6a:45:47:12:1e:f0:70:8f:d2:3a:
         92:0f:28:c2:3c:82:cc:63:ce:93:2b:f9:c5:cc:41:ac:48:b9:
         fe:5f:2c:a4:0f:ca:5d:67:1e:cb:5e:28:43:4a:55:e2:8d:44:
         9c:22:3b:b8:96:f2:52:07:94:0d:92:08:88:56:37:10:21:55:
         d4:3b:b5:7d:39:99:1b:58:54:1d:5c:84:e7:ce:dc:90:33:64:
         92:95:5e:ce:18:08:b7:5e:28:e8:cd:cf:b1:03:54:aa:60:36:
         4e:8a:f8:2f:a3:0f:b0:46:7b:46:5a:13:4e:98:78:da:1e:c8:
         dc:8a:ee:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnYX5yNf2U0Gfeim4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
ODU4MDAyYmYtMzY3MC00ZjkzLTk1ZTItNDU1MmI4NzYxMDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr9Tp/vUsyAN9oYDvd2TOOtKAOZxiD2slmwQ
aUshtiED0i3wfrVCrKLiK0Q2ifzlGrBOaNFLIIZ9CuSk46f0HyUN/t1PHwBOVQk0
t1RaTFsQZl6C0luankerGWOzDYJfCmZk3YAU9mRsVNUbgXRwP78bjiQEn5WWJHjv
aJ0GcYCeZ93ZW4xt1skXMq5o202N/KdgjyMOJk7nwZqYejsIxNRCphD0/lIizsLf
RxpeDJwbmytCOawPqB5AFR+IyiklpH2V58Bpe2KUJ8s6sbT8wVII14YoV5F/Go7n
Kg/Gz5XJcZJPAvnsATRrmh+qCpIMOCxAJ6m/kfYqnjx9E9qx3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN6B5+FVe4JG9x1YLb6iMoQE1/heMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDc2NjZkZjItZTYwZi0z
NzIwLTlmNjMtYjhlY2RmYjEzNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgA8EgMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcp+DF+QgpZ90NaF1g6GEfq+JvgvX65MBFAN99pxXTlXfw3R2SniT
yd81v+3lyEctuI0dTpBuPanm/293de9Ospt/r3Nb0WsW4t9e0Yh4G6jsHmKVxsvl
RtjWs6e6a1/5kygpZRZjDeie28rCrrtogpxvqxnYhrrZ0LfDdHOWQanpOAoNi7Bq
RUcSHvBwj9I6kg8owjyCzGPOkyv5xcxBrEi5/l8spA/KXWcey14oQ0pV4o1EnCI7
uJbyUgeUDZIIiFY3ECFV1Du1fTmZG1hUHVyE587ckDNkkpVezhgIt14o6M3PsQNU
qmA2Tor4L6MPsEZ7RloTTph42h7I3Iru9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:58 2025 by rpki-client