Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbdc8275-abd3-3cf0-b0cb-c28e8f71219b.roa
File:                     dbdc8275-abd3-3cf0-b0cb-c28e8f71219b.roa (raw, json)
Hash identifier:          0L1pUPZv52WptckBE1iEzIDpdKc+0l5h7Vl7jQ7mUVg=
Subject key identifier:   D9:AD:23:28:63:5E:C0:BD:D2:25:53:D7:21:43:AA:4B:55:5C:E3:9C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC71121957E783A360DFBC710
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbdc8275-abd3-3cf0-b0cb-c28e8f71219b.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     63949
IP address blocks:        2600:3c19::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:21:95:7e:78:3a:36:0d:fb:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=15e0cd59-6747-427d-be22-76213c5f7e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:1a:4f:09:c7:11:97:46:2d:23:18:cd:c1:
                    a2:36:e5:8e:b0:2e:3f:db:e2:5a:cf:21:f5:01:a9:
                    38:27:70:4c:bc:1a:ad:94:ba:9f:85:ec:1a:c0:1e:
                    d9:22:38:a9:af:f8:0f:02:b0:a4:39:ef:5c:07:8d:
                    f7:91:8a:88:7b:ff:f6:73:93:7e:d5:54:b4:e3:5c:
                    f0:ec:97:68:1e:8c:6f:0a:39:8f:be:ff:90:9c:5f:
                    08:58:e7:ff:6b:d4:d3:5a:cb:fd:f6:75:b1:67:8f:
                    aa:93:20:65:c6:7f:f3:9b:06:d0:dc:b1:c9:14:be:
                    fd:12:ea:1c:ae:6d:d2:e6:3d:d5:e6:50:65:b8:07:
                    df:9a:1a:e9:59:0b:9e:67:08:ef:8a:53:10:0e:cb:
                    6e:8e:ac:e7:52:1b:70:44:ee:3f:53:e0:1c:a7:5c:
                    6d:58:54:8a:16:26:0f:c2:0f:61:9f:34:69:5b:d1:
                    e3:8e:d4:18:16:f2:0e:05:e1:3e:20:a0:97:59:b5:
                    00:3b:e8:6f:e0:09:f3:23:39:aa:fd:9f:ff:6e:9b:
                    76:a3:34:65:24:14:9a:d6:d2:d5:9a:81:de:e5:80:
                    55:d9:25:ed:ef:89:4e:38:64:c0:ba:77:00:b2:c8:
                    74:e2:4b:65:2b:60:c7:a9:5e:68:76:4c:c3:82:d6:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:23:28:63:5E:C0:BD:D2:25:53:D7:21:43:AA:4B:55:5C:E3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbdc8275-abd3-3cf0-b0cb-c28e8f71219b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c19::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0d:0e:fa:74:37:d9:6a:a1:ce:93:f5:ca:35:08:eb:bd:1c:
         2d:86:aa:b5:3f:f4:4d:7f:c2:7b:5a:2c:e6:c8:f9:7b:0f:1d:
         19:b5:59:f0:e7:5b:09:9e:a7:09:4b:f6:43:4d:a7:b4:26:c0:
         95:f6:69:c6:1a:21:bc:a4:94:9d:c4:eb:13:af:cf:fc:b3:ac:
         dd:0a:f7:0d:4f:0d:21:2b:8f:c1:47:99:68:96:7b:48:46:7f:
         33:f2:ec:f9:8f:10:6e:2b:59:0b:eb:3a:7b:e9:4b:52:68:e1:
         33:02:f9:78:c7:5d:df:d9:37:39:f7:a6:c9:69:46:70:9b:aa:
         e5:30:ef:57:b5:31:fd:2e:4a:a4:0e:5c:d0:d8:90:56:76:f1:
         21:f1:4c:49:c0:77:92:86:35:09:24:36:8e:fc:1c:53:0f:98:
         2a:9d:44:b8:c7:52:9b:ef:6e:11:68:e1:9e:e4:0d:dc:da:c3:
         5d:8b:fd:60:e8:63:4a:9d:ef:6e:68:23:52:d3:3f:d2:9a:12:
         0d:06:21:e2:0d:45:f8:2d:af:db:36:fe:a0:3b:6a:86:77:1d:
         ad:d2:d0:c3:75:88:4f:b5:94:e0:54:be:49:7d:fa:61:e0:75:
         1d:59:21:17:ac:b3:22:ba:54:68:59:12:bc:27:bc:bb:4d:07:
         5f:5c:d6:e5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErHESGVfng6Ng37xxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
MTVlMGNkNTktNjc0Ny00MjdkLWJlMjItNzYyMTNjNWY3ZTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknEaTwnHEZdGLSMYzcGiNuWOsC4/2+JazyH1
Aak4J3BMvBqtlLqfhewawB7ZIjipr/gPArCkOe9cB433kYqIe//2c5N+1VS041zw
7JdoHoxvCjmPvv+QnF8IWOf/a9TTWsv99nWxZ4+qkyBlxn/zmwbQ3LHJFL79Euoc
rm3S5j3V5lBluAffmhrpWQueZwjvilMQDstujqznUhtwRO4/U+Acp1xtWFSKFiYP
wg9hnzRpW9HjjtQYFvIOBeE+IKCXWbUAO+hv4AnzIzmq/Z//bpt2ozRlJBSa1tLV
moHe5YBV2SXt74lOOGTAuncAssh04ktlK2DHqV5odkzDgtZwmwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNmtIyhjXsC90iVT1yFDqktVXOOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJkYzgyNzUtYWJkMy0z
Y2YwLWIwY2ItYzI4ZThmNzEyMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgA8GTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdDQ76dDfZaqHOk/XKNQjrvRwthqq1P/RNf8J7WizmyPl7Dx0ZtVnw
51sJnqcJS/ZDTae0JsCV9mnGGiG8pJSdxOsTr8/8s6zdCvcNTw0hK4/BR5lolntI
Rn8z8uz5jxBuK1kL6zp76UtSaOEzAvl4x13f2Tc596bJaUZwm6rlMO9XtTH9Lkqk
DlzQ2JBWdvEh8UxJwHeShjUJJDaO/BxTD5gqnUS4x1Kb724RaOGe5A3c2sNdi/1g
6GNKne9uaCNS0z/SmhINBiHiDUX4La/bNv6gO2qGdx2t0tDDdYhPtZTgVL5Jffph
4HUdWSEXrLMiulRoWRK8J7y7TQdfXNbl
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:50:57 2025 by rpki-client