Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf16ff4-cba2-3886-931e-9f59c6de4aa1.roa
File:                     9bf16ff4-cba2-3886-931e-9f59c6de4aa1.roa (raw, json)
Hash identifier:          77Fj81P2MuCgx0XGGeH0lE5IPdLL+ajfP1ckJ3GzRpQ=
Subject key identifier:   E7:0A:FE:78:1B:D9:8B:C9:CA:23:C1:3D:A3:E9:3A:36:02:23:FD:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4970788417FB3EB307113900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf16ff4-cba2-3886-931e-9f59c6de4aa1.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        2600:1403:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:78:84:17:fb:3e:b3:07:11:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=ccf35ce3-0266-4eeb-a2cb-ffe1c383072b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:94:01:3d:88:c3:c8:71:80:33:94:66:15:
                    c7:e6:87:62:1a:07:93:ac:37:1f:09:4b:de:41:8d:
                    94:10:7e:15:9f:f4:cd:9e:f0:8a:a6:7f:1b:cd:21:
                    55:cc:fc:e3:43:b7:43:d0:2a:57:fc:ab:c9:ff:06:
                    02:b0:66:32:a8:78:cb:f4:99:8c:85:57:1b:80:9c:
                    02:74:94:f6:4a:dd:e5:e8:7e:7c:6c:47:c8:ef:b2:
                    5e:f0:a0:81:05:42:09:41:ba:47:af:b2:d1:53:c2:
                    f0:f6:2f:4b:d3:5e:a1:ce:b1:8a:42:a3:1e:bc:31:
                    1f:05:82:bb:26:5a:73:5f:c7:34:11:40:f0:e8:9b:
                    90:25:54:89:c4:68:6c:eb:d6:bc:93:c8:ea:e2:ae:
                    c6:2c:ba:4e:07:89:ab:a8:31:4e:b6:e4:22:87:59:
                    55:c4:e6:f3:a1:14:3c:1a:b5:f1:c2:66:1d:7f:d4:
                    12:82:73:04:d3:a1:33:e4:e6:52:41:37:79:38:6d:
                    6c:70:b4:70:3f:76:c7:0a:9c:56:8f:3e:47:9c:93:
                    b8:d0:d1:86:20:22:4d:56:17:e9:b1:2f:56:19:52:
                    9d:f6:c3:e9:d4:06:c4:d6:08:b2:ca:36:4e:8d:43:
                    12:21:42:d7:d3:9e:85:02:cd:83:ab:2b:ae:18:a9:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:FE:78:1B:D9:8B:C9:CA:23:C1:3D:A3:E9:3A:36:02:23:FD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf16ff4-cba2-3886-931e-9f59c6de4aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:f0:36:bf:b4:84:50:99:a1:31:7c:8c:1e:a7:80:84:cf:
         9d:3b:55:75:ef:51:0e:44:24:82:7d:bf:45:7a:4d:c2:85:a1:
         79:b1:94:66:77:7d:b7:04:54:9b:df:3b:bc:23:43:61:df:7d:
         41:c5:18:a5:3d:90:5c:2e:ac:d7:4b:83:bb:2e:f8:26:51:da:
         bb:d7:16:09:7f:03:e5:3a:ad:0f:e2:0c:05:59:fc:4a:c8:11:
         f4:9f:c3:d3:eb:47:a7:8c:6f:4e:7e:a4:72:82:f8:ca:7e:88:
         f2:07:16:9b:ab:ce:db:ab:62:32:85:70:ce:b2:31:e4:c5:ce:
         09:47:1c:f8:89:44:e0:be:3b:8e:39:79:8f:31:cc:e2:78:79:
         20:02:4b:b2:01:12:cd:fb:49:ec:a0:37:a4:90:a8:f0:36:46:
         46:41:dc:97:ca:ce:82:eb:45:32:96:eb:ac:7b:38:fc:e9:5b:
         91:fe:af:b6:11:b7:b2:07:42:32:0c:f1:84:2b:45:75:68:2b:
         46:0d:92:a0:b0:e9:78:66:6e:a7:cc:44:d2:52:4c:9e:3b:54:
         92:7e:23:21:d4:a2:4b:f8:5c:7e:3b:ed:9e:d0:22:6e:fb:45:
         f0:c5:ef:56:dd:9d:72:1b:e0:3b:e7:60:8e:1d:71:49:2e:5d:
         fd:15:6f:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJcHiEF/s+swcROQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
Y2NmMzVjZTMtMDI2Ni00ZWViLWEyY2ItZmZlMWMzODMwNzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeSUAT2Iw8hxgDOUZhXH5odiGgeTrDcfCUve
QY2UEH4Vn/TNnvCKpn8bzSFVzPzjQ7dD0CpX/KvJ/wYCsGYyqHjL9JmMhVcbgJwC
dJT2St3l6H58bEfI77Je8KCBBUIJQbpHr7LRU8Lw9i9L016hzrGKQqMevDEfBYK7
JlpzX8c0EUDw6JuQJVSJxGhs69a8k8jq4q7GLLpOB4mrqDFOtuQih1lVxObzoRQ8
GrXxwmYdf9QSgnME06Ez5OZSQTd5OG1scLRwP3bHCpxWjz5HnJO40NGGICJNVhfp
sS9WGVKd9sPp1AbE1giyyjZOjUMSIULX056FAs2DqyuuGKmFDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOcK/ngb2YvJyiPBPaPpOjYCI/2jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJmMTZmZjQtY2JhMi0z
ODg2LTkzMWUtOWY1OWM2ZGU0YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUA4QA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH+08Da/tIRQmaExfIwep4CEz507VXXvUQ5EJIJ9v0V6TcKFoXmx
lGZ3fbcEVJvfO7wjQ2HffUHFGKU9kFwurNdLg7su+CZR2rvXFgl/A+U6rQ/iDAVZ
/ErIEfSfw9PrR6eMb05+pHKC+Mp+iPIHFpurzturYjKFcM6yMeTFzglHHPiJROC+
O445eY8xzOJ4eSACS7IBEs37SeygN6SQqPA2RkZB3JfKzoLrRTKW66x7OPzpW5H+
r7YRt7IHQjIM8YQrRXVoK0YNkqCw6XhmbqfMRNJSTJ47VJJ+IyHUokv4XH477Z7Q
Im77RfDF71bdnXIb4DvnYI4dcUkuXf0VbxQ=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:27:46 2025 by rpki-client