Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ab4907-d654-36a2-8410-361c9f303800.roa
File:                     d6ab4907-d654-36a2-8410-361c9f303800.roa (raw, json)
Hash identifier:          wfJtHuo2UXRzb9JLB0rFBtAlYkq61g3nM3GUgJu4udw=
Subject key identifier:   D7:24:2D:38:1C:2D:66:C1:47:C9:58:65:0C:7D:A2:FB:0C:DE:47:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081CA70A512856A746B90C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ab4907-d654-36a2-8410-361c9f303800.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1488:41c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ca:70:a5:12:85:6a:74:6b:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=2b4de6cf-dba5-44a9-aea8-4ff1dd97bca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:bb:68:6e:16:08:a6:c0:76:f3:fe:58:c0:
                    4e:99:ed:4b:92:0c:ec:66:5c:c5:5b:db:ab:48:71:
                    ce:29:c5:fa:56:8c:dd:71:f8:d1:06:83:59:69:30:
                    f5:13:77:9b:24:04:93:88:0c:db:04:b1:32:2e:26:
                    6c:74:ef:56:72:36:ac:01:71:11:be:aa:14:60:e4:
                    f3:a9:69:5c:d2:c3:55:44:57:c2:f7:6c:1e:1a:7a:
                    d5:99:68:35:cf:16:1b:e2:a4:6a:84:0d:50:a7:59:
                    74:7c:48:1d:52:b4:ac:60:08:2a:ea:38:14:9a:34:
                    bb:1d:5c:a6:a7:1e:ba:09:3d:fc:26:f9:51:25:34:
                    7b:b7:70:6b:2b:b8:d4:f8:6d:61:0b:69:bb:00:1d:
                    10:14:e8:07:70:5c:28:c0:a3:55:ed:4d:18:7e:26:
                    65:93:0e:cb:25:39:34:bf:39:3a:38:56:5d:bd:ea:
                    b5:21:4b:b6:74:fe:cc:19:7f:82:c5:7d:48:6e:c3:
                    37:a4:fa:4b:80:5a:e6:9e:46:1a:3b:eb:43:11:e9:
                    89:9b:78:c7:7a:d2:a9:72:4b:f6:59:95:f1:d0:de:
                    a0:c8:06:a6:a5:e7:a3:89:8f:03:5f:aa:3e:7c:f7:
                    1c:4e:3b:6e:67:3b:bf:59:56:c0:a9:9f:e1:91:19:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:24:2D:38:1C:2D:66:C1:47:C9:58:65:0C:7D:A2:FB:0C:DE:47:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ab4907-d654-36a2-8410-361c9f303800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:41c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:86:0d:df:97:e5:8b:60:42:72:dd:f7:df:dd:88:81:e9:
         2d:93:c8:72:51:3c:b1:64:b9:da:08:16:ca:c7:32:dc:10:6c:
         8c:78:ff:46:fc:83:76:62:e2:92:da:dd:59:17:c5:19:cc:dc:
         38:5b:94:32:7d:fc:34:fd:db:df:5d:c5:af:7a:15:a2:50:67:
         2b:47:f8:36:72:d1:89:c3:7e:1c:21:3e:99:b0:d2:91:41:65:
         f1:57:52:00:78:bc:b8:7d:9c:9c:dd:7d:97:27:ef:3d:15:0c:
         7f:8b:cd:b2:c0:c0:e7:8e:a4:26:eb:f9:25:c0:46:a4:49:4b:
         04:72:38:fd:c3:4c:98:4f:ca:b8:f1:d6:b3:ee:8c:03:36:a0:
         28:25:74:02:f6:51:b9:c0:b0:9f:ea:f9:d0:15:f7:5b:a5:17:
         8a:0b:ef:e1:a9:42:36:0a:01:dd:55:9b:b5:cd:62:fd:6c:d6:
         54:3f:df:b6:85:1d:81:e1:23:bb:20:68:5a:de:97:f3:ad:2e:
         14:ea:5c:52:cb:fb:84:58:f2:76:5f:82:9a:a7:2f:a4:be:ea:
         8d:56:ac:06:3c:bc:4c:2b:bc:5d:b5:40:61:80:1c:b3:fa:a5:
         82:09:d3:54:13:f0:2d:a4:92:95:5c:7b:92:dd:9e:0e:d9:b9:
         61:3a:0a:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcpwpRKFanRrkMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
MmI0ZGU2Y2YtZGJhNS00NGE5LWFlYTgtNGZmMWRkOTdiY2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurG7aG4WCKbAdvP+WMBOme1LkgzsZlzFW9ur
SHHOKcX6VozdcfjRBoNZaTD1E3ebJASTiAzbBLEyLiZsdO9WcjasAXERvqoUYOTz
qWlc0sNVRFfC92weGnrVmWg1zxYb4qRqhA1Qp1l0fEgdUrSsYAgq6jgUmjS7HVym
px66CT38JvlRJTR7t3BrK7jU+G1hC2m7AB0QFOgHcFwowKNV7U0YfiZlkw7LJTk0
vzk6OFZdveq1IUu2dP7MGX+CxX1IbsM3pPpLgFrmnkYaO+tDEemJm3jHetKpckv2
WZXx0N6gyAampeejiY8DX6o+fPccTjtuZzu/WVbAqZ/hkRlu/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNckLTgcLWbBR8lYZQx9ovsM3ke5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZhYjQ5MDctZDY1NC0z
NmEyLTg0MTAtMzYxYzlmMzAzODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACunhg3fl+WLYEJy3fff3YiB6S2TyHJRPLFkudoIFsrHMtwQbIx4
/0b8g3Zi4pLa3VkXxRnM3DhblDJ9/DT9299dxa96FaJQZytH+DZy0YnDfhwhPpmw
0pFBZfFXUgB4vLh9nJzdfZcn7z0VDH+LzbLAwOeOpCbr+SXARqRJSwRyOP3DTJhP
yrjx1rPujAM2oCgldAL2UbnAsJ/q+dAV91ulF4oL7+GpQjYKAd1Vm7XNYv1s1lQ/
37aFHYHhI7sgaFrel/OtLhTqXFLL+4RY8nZfgpqnL6S+6o1WrAY8vEwrvF21QGGA
HLP6pYIJ01QT8C2kkpVce5Ldng7ZuWE6Ctg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:53 2025 by rpki-client