Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
File:                     9d110f90-28be-3457-8e60-9861123cb715.roa (raw, json)
Hash identifier:          +pVZ/amD30cQ/X7OkHInAm/u5k9+WFQ60t9kdzu3qyQ=
Subject key identifier:   FB:0C:3E:9D:8B:F1:D5:C1:D8:FC:7B:23:AC:1B:F8:BD:DA:E5:E8:A5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF386347D7ECE7715ED600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     35994
IP address blocks:        2600:1406:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:38:63:47:d7:ec:e7:71:5e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=b8ca74ac-5e6d-4eea-95a1-f65498959e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:a6:85:c9:5a:ec:e1:2b:91:ac:80:b0:48:
                    ea:76:d8:d8:1b:ae:0b:c6:52:b5:10:e2:9e:ac:dd:
                    69:69:36:a7:fa:81:06:a1:e6:ab:b3:08:66:1a:17:
                    e7:d5:71:7a:e2:49:55:12:ae:d8:c2:fc:3f:0f:84:
                    27:21:8b:ae:ad:39:93:53:14:6a:d8:de:6f:2d:de:
                    86:bb:ca:93:5e:07:9c:9c:bf:e1:6e:fa:99:44:7e:
                    3e:98:39:41:8e:b7:64:33:b4:f2:7c:52:00:fe:03:
                    ac:c3:c6:10:1d:86:a6:8b:1e:11:cd:de:f8:23:54:
                    1e:9a:8f:b8:a9:22:60:a2:da:fe:df:15:10:71:22:
                    84:8d:27:5c:7f:a0:41:15:bc:a5:d1:04:f3:58:7a:
                    a2:3e:78:2a:91:9a:6a:03:00:dc:e4:41:0b:5b:8e:
                    3d:01:8c:54:4b:8f:61:dc:c8:de:e1:d5:eb:40:47:
                    e5:c8:98:f0:e8:fc:f9:53:29:37:bb:c5:7a:25:1f:
                    23:91:4c:4e:c0:26:67:27:f3:6e:19:72:3b:77:d3:
                    62:34:d2:fc:ca:24:08:d7:07:bb:da:4d:80:0e:4c:
                    db:9c:cb:3f:15:3b:0a:b6:2f:60:09:3d:f8:a8:62:
                    6e:fb:03:bd:ec:32:76:6e:a2:ae:28:cd:b8:0d:7f:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:3E:9D:8B:F1:D5:C1:D8:FC:7B:23:AC:1B:F8:BD:DA:E5:E8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:73:93:34:6b:47:6c:ef:ec:65:44:fe:18:14:03:16:45:
         4a:e9:d3:e9:a3:2d:76:c3:71:73:8a:68:19:bb:71:49:f6:2b:
         23:4f:af:58:4c:97:54:11:39:8e:58:da:ef:c2:97:55:0f:c7:
         2c:ac:f6:81:91:03:37:9f:22:d4:bc:c1:e7:e2:91:6b:7a:de:
         b1:3d:19:b3:a1:36:b6:8c:b2:fa:d1:d8:3c:bb:12:44:47:09:
         e6:30:f5:92:e6:69:b6:5b:af:e0:d2:c2:4b:f9:c1:53:cd:67:
         f9:56:a0:f2:38:e8:b8:07:d1:48:1b:8d:be:04:2e:28:46:0b:
         93:6d:75:43:32:9f:6b:02:2e:db:f9:6d:ac:08:4e:db:4c:eb:
         19:f7:01:da:e4:4b:d0:9f:d5:8e:68:7d:61:b0:11:6c:76:ec:
         28:92:56:d3:11:3a:cf:d3:67:22:0f:92:53:0f:a2:a7:10:e3:
         04:4e:d6:40:1b:b2:86:da:0f:cb:27:e3:0f:7e:2e:6d:c7:87:
         4f:ee:a1:09:8a:c7:dd:7b:dc:81:a5:01:5d:db:a7:7a:16:52:
         4e:76:be:99:55:ef:93:b6:15:d1:ef:c4:04:86:86:85:8f:13:
         b3:66:73:be:71:a6:a8:75:c8:66:ca:13:51:2f:2e:8f:ab:99:
         40:1a:01:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzhjR9fs53Fe1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
YjhjYTc0YWMtNWU2ZC00ZWVhLTk1YTEtZjY1NDk4OTU5ZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCKmhcla7OErkayAsEjqdtjYG64LxlK1EOKe
rN1paTan+oEGoearswhmGhfn1XF64klVEq7Ywvw/D4QnIYuurTmTUxRq2N5vLd6G
u8qTXgecnL/hbvqZRH4+mDlBjrdkM7TyfFIA/gOsw8YQHYamix4Rzd74I1Qemo+4
qSJgotr+3xUQcSKEjSdcf6BBFbyl0QTzWHqiPngqkZpqAwDc5EELW449AYxUS49h
3Mje4dXrQEflyJjw6Pz5Uyk3u8V6JR8jkUxOwCZnJ/NuGXI7d9NiNNL8yiQI1we7
2k2ADkzbnMs/FTsKti9gCT34qGJu+wO97DJ2bqKuKM24DX9ryQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPsMPp2L8dXB2Px7I6wb+L3a5eilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQxMTBmOTAtMjhiZS0z
NDU3LThlNjAtOTg2MTEyM2NiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHlrc5M0a0ds7+xlRP4YFAMWRUrp0+mjLXbDcXOKaBm7cUn2KyNP
r1hMl1QROY5Y2u/Cl1UPxyys9oGRAzefItS8wefikWt63rE9GbOhNraMsvrR2Dy7
EkRHCeYw9ZLmabZbr+DSwkv5wVPNZ/lWoPI46LgH0Ugbjb4ELihGC5NtdUMyn2sC
Ltv5bawITttM6xn3AdrkS9Cf1Y5ofWGwEWx27CiSVtMROs/TZyIPklMPoqcQ4wRO
1kAbsobaD8sn4w9+Lm3Hh0/uoQmKx9173IGlAV3bp3oWUk52vplV75O2FdHvxASG
hoWPE7Nmc75xpqh1yGbKE1EvLo+rmUAaAQs=
-----END CERTIFICATE-----
Generated at Mon May 5 07:26:50 2025 by rpki-client