Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539e5330-a511-3ca1-9374-e81fbea7e62a.roa
File:                     539e5330-a511-3ca1-9374-e81fbea7e62a.roa (raw, json)
Hash identifier:          OpkTXQZtgAKamOdjzo+GP2fVpAqvACzSzIq908UnRnQ=
Subject key identifier:   D7:E2:F4:DA:41:AB:6F:BC:66:ED:F3:AB:35:D7:1C:58:EC:6A:74:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B2D9BBDE1EB240A19BA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539e5330-a511-3ca1-9374-e81fbea7e62a.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        2600:1406:d400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:2d:9b:bd:e1:eb:24:0a:19:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=3f3d0757-a079-4a93-989b-caea07db9d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:1f:9c:12:b1:54:40:ea:af:0e:02:5e:41:
                    8f:d6:36:ec:0a:0d:60:66:af:fe:33:6a:aa:e8:53:
                    5a:5e:de:92:cd:24:a1:a9:37:81:47:6e:61:70:5c:
                    01:68:9a:0d:2a:06:39:13:e9:8e:f8:e8:ae:99:d4:
                    28:d3:06:76:b4:81:62:e2:8f:3b:a3:59:51:79:38:
                    90:3b:05:77:b2:0e:e5:35:0e:0e:73:19:e5:60:19:
                    30:9c:4c:32:d7:06:eb:3f:4e:ab:47:73:7f:4b:83:
                    69:4c:b8:f4:6e:0e:e3:9e:74:65:9d:36:3f:eb:46:
                    17:49:b1:be:85:68:b3:ad:c5:a9:b3:ed:ef:69:d0:
                    66:cb:08:4c:64:93:4f:9b:12:7c:e2:6c:d2:79:af:
                    03:f9:e9:ce:a3:1d:16:0f:14:d2:f0:cb:09:d6:ab:
                    44:14:b9:ad:95:d3:eb:7c:2a:5b:fe:a8:7e:1a:0f:
                    09:1d:24:a4:83:a7:9d:d2:85:7e:0a:ff:56:23:17:
                    3f:d3:ff:8a:fc:b2:3a:fe:0e:90:9b:69:b7:52:cb:
                    dd:4e:99:e8:ca:bf:d6:23:bc:da:63:22:14:e8:7f:
                    00:17:56:be:28:00:13:92:ee:84:f5:e4:60:83:09:
                    f6:70:58:4f:50:73:05:13:55:78:b0:aa:7f:1b:d3:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E2:F4:DA:41:AB:6F:BC:66:ED:F3:AB:35:D7:1C:58:EC:6A:74:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539e5330-a511-3ca1-9374-e81fbea7e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:d400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:03:df:bf:14:6c:59:ef:d5:5f:32:97:6b:8b:f3:9d:fb:
         8e:45:de:02:c4:fc:e2:c5:f7:09:13:53:c4:1f:58:a8:2c:14:
         f7:e6:d4:6c:c5:af:66:f3:51:d2:b5:18:c0:44:ac:e0:c5:7f:
         86:b9:02:24:51:ca:44:59:87:dd:34:2c:0d:1d:f3:a4:6d:3a:
         7b:e7:22:dc:0f:62:24:95:19:6e:0c:20:02:b9:ac:2a:7e:f4:
         67:8a:2f:bb:fe:61:24:55:c0:78:05:f4:d5:f9:7e:f7:36:31:
         29:82:ba:8e:ef:6f:a1:3b:b2:6d:4f:34:e3:b6:2a:a2:c1:59:
         3c:24:ae:51:37:7e:ea:77:ae:b3:9b:ab:f1:3e:08:2d:92:59:
         b2:01:53:0e:1f:f6:83:2b:81:74:fb:9c:b7:ae:ca:35:11:73:
         20:f9:8d:86:99:ca:bd:47:e4:e1:45:b2:92:01:36:67:77:c7:
         ff:9c:93:b9:89:9f:17:b3:07:be:b3:46:79:f3:57:1f:2d:bf:
         d2:7f:21:56:47:14:77:4e:ef:26:f9:a7:4b:f8:e9:01:a8:9b:
         b1:1e:94:38:3c:46:3a:cd:9a:19:c5:0f:1d:19:9a:46:e6:ee:
         8c:b3:17:1c:b1:a8:23:97:21:da:03:37:b6:4e:21:97:dd:0e:
         c0:4f:0c:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOy2bveHrJAoZukAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
M2YzZDA3NTctYTA3OS00YTkzLTk4OWItY2FlYTA3ZGI5ZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTEfnBKxVEDqrw4CXkGP1jbsCg1gZq/+M2qq
6FNaXt6SzSShqTeBR25hcFwBaJoNKgY5E+mO+OiumdQo0wZ2tIFi4o87o1lReTiQ
OwV3sg7lNQ4OcxnlYBkwnEwy1wbrP06rR3N/S4NpTLj0bg7jnnRlnTY/60YXSbG+
hWizrcWps+3vadBmywhMZJNPmxJ84mzSea8D+enOox0WDxTS8MsJ1qtEFLmtldPr
fCpb/qh+Gg8JHSSkg6ed0oV+Cv9WIxc/0/+K/LI6/g6Qm2m3UsvdTpnoyr/WI7za
YyIU6H8AF1a+KAATku6E9eRggwn2cFhPUHMFE1V4sKp/G9PD/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNfi9NpBq2+8Zu3zqzXXHFjsanRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM5ZTUzMzAtYTUxMS0z
Y2ExLTkzNzQtZTgxZmJlYTdlNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBtQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSeA9+/FGxZ79VfMpdri/Od+45F3gLE/OLF9wkTU8QfWKgsFPfm
1GzFr2bzUdK1GMBErODFf4a5AiRRykRZh900LA0d86RtOnvnItwPYiSVGW4MIAK5
rCp+9GeKL7v+YSRVwHgF9NX5fvc2MSmCuo7vb6E7sm1PNOO2KqLBWTwkrlE3fup3
rrObq/E+CC2SWbIBUw4f9oMrgXT7nLeuyjURcyD5jYaZyr1H5OFFspIBNmd3x/+c
k7mJnxezB76zRnnzVx8tv9J/IVZHFHdO7yb5p0v46QGom7EelDg8RjrNmhnFDx0Z
mkbm7oyzFxyxqCOXIdoDN7ZOIZfdDsBPDMs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:09:54 2025 by rpki-client