Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c71354e0-eba7-3e37-a0a0-6875b890c5eb.roa
File:                     c71354e0-eba7-3e37-a0a0-6875b890c5eb.roa (raw, json)
Hash identifier:          aqI0Ct0SCRVVhTeXUJlPI9xA4iDK/M0eNSdjeTHo0zA=
Subject key identifier:   56:14:43:6C:B9:79:59:17:0E:29:7D:10:5A:E0:3C:AF:60:94:62:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E9E4B3BD04963F5B5F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c71354e0-eba7-3e37-a0a0-6875b890c5eb.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     23693
IP address blocks:        2600:1417:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e9:e4:b3:bd:04:96:3f:5b:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=3ae6f7b3-9f03-40fa-86ef-1238177376fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:05:7b:6b:4e:0e:f4:73:4d:c4:e5:16:91:
                    1d:2a:c9:b0:f0:60:de:71:91:88:23:7b:fb:17:3c:
                    a2:1f:11:eb:6c:57:85:5a:fc:3b:47:c8:de:c1:5d:
                    e9:ce:2d:d0:3a:34:6b:51:00:dd:cb:ba:e0:68:d5:
                    25:57:5c:83:c3:8a:76:ca:f3:48:17:06:56:0f:ea:
                    95:72:5c:c1:6b:fe:50:b1:4d:b7:4d:77:cc:84:73:
                    9c:c1:6a:a0:78:27:67:3e:11:9c:06:44:2f:83:1c:
                    89:a2:aa:de:99:85:c3:de:fe:e0:6b:97:ac:44:cd:
                    a0:ec:a8:6b:3d:62:8e:a4:64:02:da:81:bf:49:74:
                    77:2a:15:c0:f3:d2:e4:1e:92:03:75:f5:fe:64:d0:
                    82:d9:76:51:ed:ea:8a:2d:cc:60:fd:38:02:8a:9d:
                    fd:8c:b2:84:1d:47:e0:32:62:b8:d5:f2:48:84:bb:
                    22:20:49:38:6b:eb:0c:ec:fc:0e:22:dd:4a:a6:20:
                    8a:1d:1d:a7:e3:e1:6c:b6:f8:72:24:f7:7d:1a:57:
                    9b:c4:3a:54:98:72:ae:0b:36:75:c5:78:ce:57:97:
                    4d:67:ac:bc:7d:66:a5:dd:a9:1e:c3:76:fb:37:45:
                    cd:5a:bc:7a:f8:36:fe:57:aa:4c:06:93:04:99:13:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:43:6C:B9:79:59:17:0E:29:7D:10:5A:E0:3C:AF:60:94:62:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c71354e0-eba7-3e37-a0a0-6875b890c5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:1e:c9:11:c9:c2:af:14:c8:5d:cd:ab:73:c6:80:4b:3c:
         98:2f:8e:ba:28:60:fb:ea:b8:90:86:58:d1:af:fc:3d:0f:4f:
         8a:82:35:23:fe:c0:c1:ae:df:4f:e4:ae:04:0e:ee:d1:22:29:
         02:75:2c:a4:5d:46:c9:1c:67:df:97:b6:80:7a:ba:b2:a5:c0:
         03:3e:c0:0e:dc:58:33:b6:fc:e0:3b:4e:6d:e0:b1:d2:a3:18:
         dc:5e:3a:14:35:11:17:fc:6d:58:18:43:0b:67:cb:ed:c8:e6:
         2e:4e:5b:56:f1:cf:5a:36:6f:99:20:6a:ad:18:db:fc:17:bb:
         9f:1d:59:9a:ed:06:78:fc:22:1f:c7:40:af:c3:a0:23:8c:26:
         b7:ac:7c:52:1b:b7:b3:ca:83:6c:38:7d:a8:04:65:82:22:33:
         1e:2b:de:f5:21:0e:46:04:5c:7d:66:07:00:26:44:7d:dc:cd:
         6c:67:28:df:50:53:8d:cc:9b:ce:b1:24:a7:c0:53:1b:1c:d6:
         fa:f8:ed:8c:8d:dd:03:7b:70:22:89:e6:fd:5f:76:fa:94:c1:
         90:26:a0:ce:83:16:ce:dd:53:be:71:95:f0:83:cd:3b:d4:a9:
         d3:dc:1c:23:59:f7:b7:bb:3e:f6:aa:77:de:e2:f2:f6:28:ad:
         08:c5:b8:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEenks70Elj9bXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
M2FlNmY3YjMtOWYwMy00MGZhLTg2ZWYtMTIzODE3NzM3NmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKQFe2tODvRzTcTlFpEdKsmw8GDecZGII3v7
FzyiHxHrbFeFWvw7R8jewV3pzi3QOjRrUQDdy7rgaNUlV1yDw4p2yvNIFwZWD+qV
clzBa/5QsU23TXfMhHOcwWqgeCdnPhGcBkQvgxyJoqremYXD3v7ga5esRM2g7Khr
PWKOpGQC2oG/SXR3KhXA89LkHpIDdfX+ZNCC2XZR7eqKLcxg/TgCip39jLKEHUfg
MmK41fJIhLsiIEk4a+sM7PwOIt1KpiCKHR2n4+FstvhyJPd9GlebxDpUmHKuCzZ1
xXjOV5dNZ6y8fWal3akew3b7N0XNWrx6+Db+V6pMBpMEmRPo7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFYUQ2y5eVkXDil9EFrgPK9glGLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzcxMzU0ZTAtZWJhNy0z
ZTM3LWEwYTAtNjg3NWI4OTBjNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF1AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE1DHskRycKvFMhdzatzxoBLPJgvjrooYPvquJCGWNGv/D0PT4qC
NSP+wMGu30/krgQO7tEiKQJ1LKRdRskcZ9+XtoB6urKlwAM+wA7cWDO2/OA7Tm3g
sdKjGNxeOhQ1ERf8bVgYQwtny+3I5i5OW1bxz1o2b5kgaq0Y2/wXu58dWZrtBnj8
Ih/HQK/DoCOMJresfFIbt7PKg2w4fagEZYIiMx4r3vUhDkYEXH1mBwAmRH3czWxn
KN9QU43Mm86xJKfAUxsc1vr47YyN3QN7cCKJ5v1fdvqUwZAmoM6DFs7dU75xlfCD
zTvUqdPcHCNZ97e7Pvaqd97i8vYorQjFuKY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:38 2025 by rpki-client