Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826d913a-802c-3fc2-affa-c9c2f83bff0f.roa
File:                     826d913a-802c-3fc2-affa-c9c2f83bff0f.roa (raw, json)
Hash identifier:          guxfHDyBLE/nLkwNRcetYxcOB9EArucoYcx+S/r/PxY=
Subject key identifier:   1B:92:38:9F:87:21:67:85:29:EA:6F:3B:DB:1F:28:B4:3D:6D:AD:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2A2C45261FD2FDF304700B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826d913a-802c-3fc2-affa-c9c2f83bff0f.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1404:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:45:26:1f:d2:fd:f3:04:70:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=874a45ec-db70-492d-aafb-b47608488d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:de:4d:1a:58:ae:cd:b6:db:b5:9a:a6:4e:
                    6e:49:ce:40:9c:b4:4d:56:ba:6b:c3:8e:a2:29:35:
                    31:21:a8:5c:f5:d1:42:6f:6a:4b:42:3a:12:74:cb:
                    16:9c:4e:80:64:06:28:94:05:d8:f1:16:2b:10:4a:
                    81:33:6d:27:b6:1c:fe:0c:83:9e:fb:2a:7b:86:a2:
                    9a:aa:12:f1:78:f9:d7:b9:f3:b7:dd:94:ac:7c:48:
                    ea:08:c2:4a:54:82:e5:1f:46:5b:2f:62:a8:6c:19:
                    8d:45:57:83:ff:7e:3e:59:46:06:44:75:8e:ad:fd:
                    5f:af:bf:f6:f9:b6:4f:e0:29:d1:92:ae:6e:41:5f:
                    f0:af:a1:b7:d4:35:32:ca:55:8d:c1:49:06:27:f5:
                    01:9b:13:4b:38:63:93:4d:25:0c:86:44:03:da:34:
                    1e:cb:6e:d0:5d:fb:b0:ac:41:c5:de:c5:25:64:6a:
                    72:32:8e:7b:eb:c9:4d:3f:18:85:4b:32:12:02:05:
                    a5:b0:dc:47:9b:9a:f7:88:08:bb:7b:33:05:42:81:
                    79:97:39:5f:da:ae:5a:4e:c5:29:b3:62:ff:2c:b9:
                    66:58:b4:02:83:84:9c:31:16:fb:1d:09:45:75:c3:
                    dc:d8:45:08:00:96:2f:f3:66:ac:a8:d6:c1:2c:35:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:92:38:9F:87:21:67:85:29:EA:6F:3B:DB:1F:28:B4:3D:6D:AD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826d913a-802c-3fc2-affa-c9c2f83bff0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:7e:ff:5b:46:49:ab:92:6f:e4:ef:33:d5:5f:99:e9:8b:
         69:8b:62:b0:98:2e:fe:8e:a1:1f:02:5b:c0:d0:b7:33:d9:42:
         ec:73:0a:a0:5c:d9:ee:63:dd:ad:9d:06:3d:c3:17:f8:66:6c:
         59:89:92:65:1b:ec:07:f0:d9:ae:de:15:df:96:68:ac:7e:a2:
         e2:fe:c6:f9:c7:a3:fe:80:1b:87:a4:85:83:bd:2d:0f:9a:91:
         cd:72:ab:cc:fa:00:04:00:11:c4:bc:27:b9:f0:97:99:b4:01:
         57:87:e9:75:f3:ea:ee:bb:31:5c:0d:6d:43:4f:b8:bd:f6:ad:
         7a:98:29:86:97:5f:93:7d:95:e9:3b:f4:8c:38:8a:5b:00:b7:
         d9:2b:0f:e4:9a:77:10:65:aa:40:2e:81:25:d8:c4:e1:75:e9:
         50:73:dc:ca:f4:da:a8:36:6e:ef:e1:68:7a:d3:6c:db:41:eb:
         39:73:fe:9f:4f:7c:4d:d2:c8:af:12:50:6a:98:e8:39:04:d8:
         8e:2e:37:af:1c:9e:64:88:f5:0f:ff:ab:b4:61:4c:db:bb:fe:
         0b:76:b0:68:28:69:97:29:0e:f8:95:17:9e:53:50:88:1a:cb:
         6b:e9:a9:a1:68:25:0d:be:98:83:68:76:b3:0e:5d:b7:d0:7b:
         b8:b2:ab:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLEUmH9L98wRwC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODc0YTQ1ZWMtZGI3MC00OTJkLWFhZmItYjQ3NjA4NDg4ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyneTRpYrs2227Wapk5uSc5AnLRNVrprw46i
KTUxIahc9dFCb2pLQjoSdMsWnE6AZAYolAXY8RYrEEqBM20nthz+DIOe+yp7hqKa
qhLxePnXufO33ZSsfEjqCMJKVILlH0ZbL2KobBmNRVeD/34+WUYGRHWOrf1fr7/2
+bZP4CnRkq5uQV/wr6G31DUyylWNwUkGJ/UBmxNLOGOTTSUMhkQD2jQey27QXfuw
rEHF3sUlZGpyMo5768lNPxiFSzISAgWlsNxHm5r3iAi7ezMFQoF5lzlf2q5aTsUp
s2L/LLlmWLQCg4ScMRb7HQlFdcPc2EUIAJYv82asqNbBLDV9SwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBuSOJ+HIWeFKepvO9sfKLQ9ba01MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI2ZDkxM2EtODAyYy0z
ZmMyLWFmZmEtYzljMmY4M2JmZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBBgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACNtfv9bRkmrkm/k7zPVX5npi2mLYrCYLv6OoR8CW8DQtzPZQuxz
CqBc2e5j3a2dBj3DF/hmbFmJkmUb7Afw2a7eFd+WaKx+ouL+xvnHo/6AG4ekhYO9
LQ+akc1yq8z6AAQAEcS8J7nwl5m0AVeH6XXz6u67MVwNbUNPuL32rXqYKYaXX5N9
lek79Iw4ilsAt9krD+SadxBlqkAugSXYxOF16VBz3Mr02qg2bu/haHrTbNtB6zlz
/p9PfE3SyK8SUGqY6DkE2I4uN68cnmSI9Q//q7RhTNu7/gt2sGgoaZcpDviVF55T
UIgay2vpqaFoJQ2+mINodrMOXbfQe7iyq+c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:51 2025 by rpki-client