Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2aa491d-6856-3e57-9bb1-a94841533257.roa
File:                     b2aa491d-6856-3e57-9bb1-a94841533257.roa (raw, json)
Hash identifier:          lR8s6MzZ8OZRdGcAUenROWss1fcwpjtRx2BqEoPdj0E=
Subject key identifier:   62:A9:74:F3:E7:ED:F4:40:A7:2D:C1:4E:94:14:91:2B:07:DB:CF:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E209E561559CADE419F0E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2aa491d-6856-3e57-9bb1-a94841533257.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        2600:1404:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:09:e5:61:55:9c:ad:e4:19:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c906f6d4-da06-4087-bec0-a16f5d404f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:3a:38:a8:75:89:91:a5:de:19:62:cc:ea:
                    1f:27:b9:4a:f9:3c:8b:e9:28:0f:92:8d:71:e5:95:
                    98:ed:79:a2:0f:bb:b0:65:e5:8d:3a:81:4b:b0:52:
                    29:1d:6e:dc:64:02:5b:be:12:63:58:e8:97:f0:dd:
                    99:c3:f4:ea:7f:6f:50:b2:a6:9d:13:a0:74:33:56:
                    38:b4:1c:55:a0:4a:58:c0:36:c9:73:63:5e:20:67:
                    fe:3a:fa:94:70:41:70:47:3e:9f:1d:a1:f8:10:99:
                    73:06:ea:a6:e3:37:88:e7:1d:60:4b:d3:0f:5f:f7:
                    c7:1c:2c:6e:e4:76:07:49:7b:8e:28:35:26:2e:80:
                    93:7f:b5:df:c9:1b:06:8a:7d:4b:e5:4d:84:4b:71:
                    5c:57:5c:70:8d:b1:a1:73:f0:c8:ae:a5:1b:75:40:
                    08:b8:cf:cb:be:5b:9a:07:bc:e6:ae:e3:45:b0:92:
                    24:9f:e1:7e:e2:9b:fa:3f:fa:ee:a7:21:08:14:af:
                    c4:46:6e:e0:e4:f0:55:e0:cb:de:fb:b5:70:23:ef:
                    e5:bc:91:4e:e2:f5:08:67:11:c4:21:87:5d:c8:6e:
                    d7:c9:b0:21:1c:20:b7:4c:60:b8:97:37:1d:c9:67:
                    e2:6f:eb:47:7d:6e:23:be:72:3e:b7:31:f4:82:9b:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A9:74:F3:E7:ED:F4:40:A7:2D:C1:4E:94:14:91:2B:07:DB:CF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2aa491d-6856-3e57-9bb1-a94841533257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:90:28:64:ca:bf:e8:36:17:79:c8:50:85:bf:eb:a2:38:f3:
         c8:eb:af:2a:7e:42:98:d8:13:c0:b1:4e:54:df:2c:9d:e9:be:
         83:e7:ec:d7:2e:05:7b:fd:73:6e:bb:13:a2:4c:cc:4e:fd:57:
         a2:fe:f1:2c:f9:8f:a9:ff:d4:a0:ad:77:9a:2a:63:7e:8d:a6:
         c6:4f:6d:21:e2:16:0e:6f:47:89:6e:bc:56:49:7c:10:0f:ae:
         9d:db:3d:1a:06:0c:6a:18:1b:fe:2b:d2:92:7c:cd:99:3a:0b:
         b3:ce:5a:33:05:33:7a:d2:1e:80:98:1d:2f:47:df:b6:1a:ce:
         10:41:7b:90:df:b0:0c:90:42:bd:d3:91:b6:8e:19:7b:fb:66:
         4a:d1:6c:73:26:f2:e0:e5:9a:13:83:2b:30:13:0b:97:97:df:
         23:18:bd:ef:79:80:0a:a8:7b:0a:7c:90:a3:31:8e:d9:22:f4:
         51:8f:ba:7a:59:94:07:30:a2:af:03:45:f6:d2:fb:42:85:18:
         9a:4a:85:6c:06:54:b6:b5:01:ad:13:f4:20:74:72:8f:d5:7c:
         84:e1:e3:4a:f2:73:88:71:08:76:73:7c:ac:08:ef:65:ac:48:
         9b:25:7a:57:ca:aa:6a:01:18:a0:68:76:e2:9b:e8:fd:4a:64:
         69:76:e8:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gnlYVWcreQZ8OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
YzkwNmY2ZDQtZGEwNi00MDg3LWJlYzAtYTE2ZjVkNDA0ZjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny46OKh1iZGl3hlizOofJ7lK+TyL6SgPko1x
5ZWY7XmiD7uwZeWNOoFLsFIpHW7cZAJbvhJjWOiX8N2Zw/Tqf29QsqadE6B0M1Y4
tBxVoEpYwDbJc2NeIGf+OvqUcEFwRz6fHaH4EJlzBuqm4zeI5x1gS9MPX/fHHCxu
5HYHSXuOKDUmLoCTf7XfyRsGin1L5U2ES3FcV1xwjbGhc/DIrqUbdUAIuM/Lvlua
B7zmruNFsJIkn+F+4pv6P/rupyEIFK/ERm7g5PBV4Mve+7VwI+/lvJFO4vUIZxHE
IYddyG7XybAhHCC3TGC4lzcdyWfib+tHfW4jvnI+tzH0gpvfuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGKpdPPn7fRApy3BTpQUkSsH28+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJhYTQ5MWQtNjg1Ni0z
ZTU3LTliYjEtYTk0ODQxNTMzMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBAAm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJSQKGTKv+g2F3nIUIW/66I488jrryp+QpjYE8CxTlTfLJ3pvoPn
7NcuBXv9c267E6JMzE79V6L+8Sz5j6n/1KCtd5oqY36NpsZPbSHiFg5vR4luvFZJ
fBAPrp3bPRoGDGoYG/4r0pJ8zZk6C7POWjMFM3rSHoCYHS9H37YazhBBe5DfsAyQ
Qr3TkbaOGXv7ZkrRbHMm8uDlmhODKzATC5eX3yMYve95gAqoewp8kKMxjtki9FGP
unpZlAcwoq8DRfbS+0KFGJpKhWwGVLa1Aa0T9CB0co/VfITh40ryc4hxCHZzfKwI
72WsSJslelfKqmoBGKBoduKb6P1KZGl26M8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:58 2025 by rpki-client