Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa
File:                     15f781a1-11c4-363c-886b-f6f07741b7ec.roa (raw, json)
Hash identifier:          URz6LhyudO9NJbm0S0JwAaOfWy+h6q9GVvt21gac4ug=
Subject key identifier:   BA:AE:FE:3A:57:57:91:C3:9D:45:38:E0:74:41:2A:6E:84:87:60:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF6DB927663BF4C0100840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     35994
IP address blocks:        2600:1406:ec00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:6d:b9:27:66:3b:f4:c0:10:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=ca8fffa0-8920-417e-af79-e0138a1676ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:54:71:a4:6a:2c:02:94:26:2f:b8:ae:db:
                    ce:17:9f:cf:76:68:ca:fc:39:25:7f:8d:55:e1:2a:
                    95:a5:67:fc:d1:70:6b:a2:3a:af:e8:ce:17:cf:f9:
                    78:a8:6a:af:a2:e6:33:7b:87:b9:12:b1:b2:84:21:
                    e5:a4:d1:1e:ca:4b:15:08:5b:43:84:1b:fc:dd:f3:
                    eb:57:ed:c6:16:a7:a8:f0:06:45:4a:52:d5:00:38:
                    05:3f:66:87:a1:17:f3:f6:9e:27:92:db:b3:dd:20:
                    2b:dc:71:66:49:4a:d2:7a:bc:9a:f2:a0:63:7a:f5:
                    e5:66:7e:b9:65:3a:0a:d6:35:35:f9:28:66:e4:b7:
                    ef:a1:60:c8:18:11:3c:2c:21:72:75:5b:e3:a3:ae:
                    93:d5:47:e3:49:2d:70:92:40:02:21:47:47:d7:6a:
                    8b:a0:06:65:74:73:69:01:8c:81:15:6b:bd:d6:aa:
                    81:39:62:0b:4a:37:b0:21:4c:24:b3:39:5b:b7:63:
                    f2:e6:2a:04:31:0b:e5:74:a3:50:16:27:72:41:35:
                    32:72:e3:db:48:2f:c9:33:09:38:94:07:ca:23:04:
                    39:10:c1:21:ce:12:5a:61:c2:98:87:86:1f:9c:77:
                    f0:9f:4a:17:ee:d8:6a:d8:f9:7d:87:01:56:fc:a7:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:FE:3A:57:57:91:C3:9D:45:38:E0:74:41:2A:6E:84:87:60:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15f781a1-11c4-363c-886b-f6f07741b7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:ec00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:20:fa:bd:1d:e5:54:7e:a7:83:e9:26:bb:6f:f7:8a:7f:
         2e:7a:eb:89:7c:32:48:d7:74:a7:9e:d1:b2:c0:eb:34:37:1e:
         9f:5f:de:12:3d:c9:3b:7e:5f:aa:33:71:30:4b:91:ec:62:53:
         0b:b1:4b:ec:14:d5:80:9c:5b:a4:92:25:27:27:42:bd:1e:ed:
         81:63:d1:2f:18:b2:bc:2c:59:ed:d5:73:1b:a1:37:23:76:9d:
         7b:24:ac:45:91:d0:a0:01:73:3f:a2:35:f4:fe:a4:2c:91:78:
         33:2f:60:d5:f2:87:a4:63:56:a6:cc:9f:18:56:b0:c6:96:fa:
         4f:ab:4b:57:46:5d:30:3c:37:8b:37:87:f5:d2:cc:83:06:51:
         4b:7b:b2:4b:9c:ff:46:e9:aa:db:88:81:e4:01:a4:45:cf:ce:
         6e:e4:9f:0b:3d:11:88:48:1e:4e:8f:64:a7:f5:f9:bb:84:f9:
         3c:f9:8c:0b:e6:8f:51:ee:3d:4f:29:23:d3:09:ad:8b:2c:a4:
         7b:43:b4:22:b1:29:59:4f:a2:49:78:82:cb:cf:4c:55:cb:0e:
         f1:73:a7:4b:8e:2f:58:07:43:87:94:98:f9:02:f3:27:49:91:
         3a:96:a1:97:cf:95:ed:eb:a7:0c:2a:2f:22:b2:71:7d:2a:55:
         65:4d:65:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz225J2Y79MAQCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
Y2E4ZmZmYTAtODkyMC00MTdlLWFmNzktZTAxMzhhMTY3NmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldBUcaRqLAKUJi+4rtvOF5/PdmjK/Dklf41V
4SqVpWf80XBrojqv6M4Xz/l4qGqvouYze4e5ErGyhCHlpNEeyksVCFtDhBv83fPr
V+3GFqeo8AZFSlLVADgFP2aHoRfz9p4nktuz3SAr3HFmSUrSerya8qBjevXlZn65
ZToK1jU1+Shm5LfvoWDIGBE8LCFydVvjo66T1UfjSS1wkkACIUdH12qLoAZldHNp
AYyBFWu91qqBOWILSjewIUwkszlbt2Py5ioEMQvldKNQFidyQTUycuPbSC/JMwk4
lAfKIwQ5EMEhzhJaYcKYh4YfnHfwn0oX7thq2Pl9hwFW/KcC1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLqu/jpXV5HDnUU44HRBKm6Eh2BJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTVmNzgxYTEtMTFjNC0z
NjNjLTg4NmItZjZmMDc3NDFiN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBuwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI7JIPq9HeVUfqeD6Sa7b/eKfy5664l8MkjXdKee0bLA6zQ3Hp9f
3hI9yTt+X6ozcTBLkexiUwuxS+wU1YCcW6SSJScnQr0e7YFj0S8YsrwsWe3Vcxuh
NyN2nXskrEWR0KABcz+iNfT+pCyReDMvYNXyh6RjVqbMnxhWsMaW+k+rS1dGXTA8
N4s3h/XSzIMGUUt7skuc/0bpqtuIgeQBpEXPzm7knws9EYhIHk6PZKf1+buE+Tz5
jAvmj1HuPU8pI9MJrYsspHtDtCKxKVlPokl4gsvPTFXLDvFzp0uOL1gHQ4eUmPkC
8ydJkTqWoZfPle3rpwwqLyKycX0qVWVNZV8=
-----END CERTIFICATE-----
Generated at Tue May 6 06:17:15 2025 by rpki-client