Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa
File:                     9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa (raw, json)
Hash identifier:          0B9YcPDu2ABmZsWw3/ecQXugPK4mDH+9WK2xBOV78J0=
Subject key identifier:   F2:CD:9A:E1:CF:7C:D5:8F:59:84:6C:3A:D2:0D:15:94:CB:81:8B:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ADA9BD1164DE41152D6BB4C90
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     32787
IP address blocks:        2606:6c00:20d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d1:16:4d:e4:11:52:d6:bb:4c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=fab9d053-da78-4d92-94d4-42e40ec5b5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:ca:77:aa:8f:00:90:28:da:19:be:8d:64:
                    ab:b3:21:55:3f:94:c2:87:8f:75:22:c9:b6:4b:a5:
                    9d:8d:fe:dd:84:d9:7a:44:ff:b9:1e:87:fa:ae:f8:
                    7d:17:a0:af:37:99:18:d9:df:57:b9:fe:7d:0e:9b:
                    6a:05:c8:49:d4:7a:55:3e:fa:be:ae:27:f3:1e:e1:
                    35:96:91:bd:23:87:0c:8b:11:29:df:1f:5b:a0:19:
                    da:1c:1e:08:a5:bb:6c:9d:20:60:0c:7a:69:39:58:
                    41:1e:30:24:44:4b:e5:60:31:0e:e7:00:90:1a:7e:
                    24:57:4d:54:04:e0:2b:d5:e7:f4:59:5f:3b:25:5b:
                    fe:67:66:4a:fa:41:40:21:fb:a4:7e:a2:66:21:90:
                    d6:dc:f8:9a:54:bb:78:8f:98:d6:67:f5:2d:dd:54:
                    67:d4:c5:69:76:c3:94:5a:8f:6f:58:25:ac:de:8c:
                    15:b3:5c:2b:2d:6a:95:8c:e3:4f:c5:76:0a:45:3b:
                    70:ac:06:5f:41:5b:7f:b6:bb:08:a4:ff:a9:a9:9f:
                    09:3b:d6:aa:05:19:60:9c:a2:1d:7a:0f:6f:62:87:
                    a6:d6:df:df:f4:6f:13:36:1b:5a:4f:73:85:07:45:
                    3d:85:79:03:77:ff:82:26:fa:86:45:70:1e:45:48:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:9A:E1:CF:7C:D5:8F:59:84:6C:3A:D2:0D:15:94:CB:81:8B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:20d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:97:1e:be:9c:f8:46:13:19:b3:5f:02:24:70:ed:a7:fe:9f:
         94:c0:99:06:26:b2:f8:f7:29:03:ec:c1:ff:80:88:20:b6:62:
         8e:13:cd:4e:2e:4e:a1:50:0b:80:42:61:84:83:96:e3:7c:2e:
         6c:1c:62:40:0c:cd:43:0e:e7:3c:5d:89:34:f9:2e:ac:15:ef:
         57:2d:d5:a9:70:55:91:d2:5e:29:30:08:7d:89:98:40:ff:64:
         96:25:3a:94:97:e8:19:ce:28:54:53:95:e1:0e:5e:0d:48:b1:
         24:bc:ed:51:ca:18:ce:19:6a:a8:9f:5d:83:46:a5:d4:f2:3c:
         47:bc:f3:b9:2e:71:ea:4b:52:dc:fe:98:ab:5d:f3:86:58:64:
         53:ca:02:26:ba:de:5b:c4:95:0c:78:1a:e7:b2:45:40:b3:ff:
         56:a9:5f:82:0b:c1:13:0b:20:c9:6d:f2:24:e5:9d:d7:fc:10:
         a2:06:4d:c5:24:bc:e3:56:8d:b0:52:a8:4c:1f:07:c1:7f:58:
         67:9f:55:4b:8a:8a:d2:20:b0:a7:77:1e:16:9a:76:2b:32:c3:
         62:7a:ed:62:a7:28:6c:f8:b1:be:49:eb:cc:5f:f6:9a:a2:7f:
         10:57:da:7b:f5:eb:e8:83:d1:2c:6f:b6:36:ff:25:35:c0:51:
         9f:0e:36:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram9EWTeQRUta7TJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
ZmFiOWQwNTMtZGE3OC00ZDkyLTk0ZDQtNDJlNDBlYzViNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi7Kd6qPAJAo2hm+jWSrsyFVP5TCh491Ism2
S6Wdjf7dhNl6RP+5Hof6rvh9F6CvN5kY2d9Xuf59DptqBchJ1HpVPvq+rifzHuE1
lpG9I4cMixEp3x9boBnaHB4IpbtsnSBgDHppOVhBHjAkREvlYDEO5wCQGn4kV01U
BOAr1ef0WV87JVv+Z2ZK+kFAIfukfqJmIZDW3PiaVLt4j5jWZ/Ut3VRn1MVpdsOU
Wo9vWCWs3owVs1wrLWqVjONPxXYKRTtwrAZfQVt/trsIpP+pqZ8JO9aqBRlgnKId
eg9vYoem1t/f9G8TNhtaT3OFB0U9hXkDd/+CJvqGRXAeRUj+kwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPLNmuHPfNWPWYRsOtINFZTLgYt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQyMDViYjctZmE3Yy0z
Nzc5LTlkODgtZTZhMmUxODQ2ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAIN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADiXHr6c+EYTGbNfAiRw7af+n5TAmQYmsvj3KQPswf+AiCC2Yo4T
zU4uTqFQC4BCYYSDluN8LmwcYkAMzUMO5zxdiTT5LqwV71ct1alwVZHSXikwCH2J
mED/ZJYlOpSX6BnOKFRTleEOXg1IsSS87VHKGM4ZaqifXYNGpdTyPEe887kucepL
Utz+mKtd84ZYZFPKAia63lvElQx4GueyRUCz/1apX4ILwRMLIMlt8iTlndf8EKIG
TcUkvONWjbBSqEwfB8F/WGefVUuKitIgsKd3Hhaadisyw2J67WKnKGz4sb5J68xf
9pqifxBX2nv16+iD0Sxvtjb/JTXAUZ8ONi4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:12 2025 by rpki-client