Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec840666-4c63-34cf-a576-1a892556b2df.roa
File:                     ec840666-4c63-34cf-a576-1a892556b2df.roa (raw, json)
Hash identifier:          Wk6oKP96FuytyLL7tAN/k0PGq/nrhssylTdCgnmhpaA=
Subject key identifier:   48:87:CF:55:B1:06:CC:1E:99:9F:57:C6:B4:E5:58:AC:C6:36:3C:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081BADD781706ADEC3F3838
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec840666-4c63-34cf-a576-1a892556b2df.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:140b:2e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ba:dd:78:17:06:ad:ec:3f:38:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=33ab383d-8590-49ff-9231-b99f496148c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:62:1d:4d:9d:12:a4:75:f7:08:34:5a:d0:
                    0e:da:96:49:c7:0a:f6:87:63:43:e3:91:33:45:ec:
                    20:f9:0c:fb:cd:af:c5:1f:9e:20:da:73:10:8c:b0:
                    6c:34:53:0f:0e:45:6c:f4:51:56:e4:d6:18:8d:8e:
                    33:34:52:fe:ca:43:2f:20:21:3d:f6:f8:f4:8f:ae:
                    34:58:5a:43:1c:0f:54:18:80:37:f7:47:50:37:a7:
                    0e:e8:a8:cb:46:6d:95:77:f3:ce:fc:af:09:a4:6b:
                    c4:ca:83:36:22:3f:5b:b2:49:0b:b2:66:b3:18:ba:
                    89:cf:a6:51:bc:a6:11:39:73:57:62:a2:ca:6c:ce:
                    a3:d2:f6:37:4f:11:42:fb:67:d7:0a:1d:23:93:4a:
                    f0:b3:96:9c:e8:15:5d:b3:4f:6c:c7:47:f3:55:a5:
                    ef:f3:2d:ac:4f:86:6c:85:06:fc:14:6e:1d:73:a0:
                    41:a9:e0:58:af:25:28:10:70:08:b1:5b:2c:5d:4d:
                    58:de:f0:48:82:4f:77:a2:1f:23:fc:de:91:5b:15:
                    25:e9:82:ff:91:7d:eb:fa:6d:df:a6:25:28:3f:82:
                    89:88:46:33:8e:07:6b:c0:a1:f7:18:35:50:df:fd:
                    3a:e8:ce:3e:df:b9:19:c8:29:dc:88:03:d8:eb:9a:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:87:CF:55:B1:06:CC:1E:99:9F:57:C6:B4:E5:58:AC:C6:36:3C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec840666-4c63-34cf-a576-1a892556b2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:2e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:d7:e0:80:03:01:57:e1:6d:6e:60:37:5b:66:3e:64:09:
         76:bd:1b:c5:63:03:f1:1d:71:6d:eb:45:07:55:29:85:ee:24:
         83:57:33:d7:d5:c4:81:3a:56:6a:18:ae:e6:e5:bf:cc:dc:a2:
         b7:ba:6f:3b:ea:58:44:26:9f:91:d2:42:8a:38:94:47:20:3d:
         56:86:27:75:7d:ff:1e:d0:76:11:0f:87:91:3b:1b:92:f2:02:
         64:93:3e:a1:56:20:4e:89:01:38:6c:d2:a7:38:16:32:c6:fc:
         c3:ee:d7:08:04:3a:89:b1:8e:5f:ab:f9:29:48:46:28:8b:32:
         33:c5:86:2a:4c:29:cc:e1:b8:ba:94:a5:e0:4a:a3:87:da:71:
         c2:23:aa:99:ec:5d:81:eb:e4:ea:79:02:3f:39:a9:98:14:64:
         8c:70:5b:9d:9e:95:a9:88:0d:71:50:1c:92:f4:b6:29:71:8c:
         78:58:09:3b:66:d8:35:63:27:70:d3:6a:ca:fa:8d:ea:d4:b0:
         bc:9d:05:71:b9:0a:57:82:60:fb:3f:f6:0c:79:e9:df:20:65:
         50:b2:56:5a:32:55:9f:8a:11:1c:9d:22:b1:4e:90:4f:9b:15:
         b1:e4:5c:4e:41:db:b1:21:a3:c0:65:ff:f8:8c:af:86:0c:c4:
         14:8b:e1:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbrdeBcGrew/ODgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
MzNhYjM4M2QtODU5MC00OWZmLTkyMzEtYjk5ZjQ5NjE0OGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJJiHU2dEqR19wg0WtAO2pZJxwr2h2ND45Ez
Rewg+Qz7za/FH54g2nMQjLBsNFMPDkVs9FFW5NYYjY4zNFL+ykMvICE99vj0j640
WFpDHA9UGIA390dQN6cO6KjLRm2Vd/PO/K8JpGvEyoM2Ij9bskkLsmazGLqJz6ZR
vKYROXNXYqLKbM6j0vY3TxFC+2fXCh0jk0rws5ac6BVds09sx0fzVaXv8y2sT4Zs
hQb8FG4dc6BBqeBYryUoEHAIsVssXU1Y3vBIgk93oh8j/N6RWxUl6YL/kX3r+m3f
piUoP4KJiEYzjgdrwKH3GDVQ3/066M4+37kZyCnciAPY65oK7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEiHz1WxBswemZ9XxrTlWKzGNjwOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM4NDA2NjYtNGM2My0z
NGNmLWE1NzYtMWE4OTI1NTZiMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCy4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAeq1+CAAwFX4W1uYDdbZj5kCXa9G8VjA/EdcW3rRQdVKYXuJINX
M9fVxIE6VmoYrublv8zcore6bzvqWEQmn5HSQoo4lEcgPVaGJ3V9/x7QdhEPh5E7
G5LyAmSTPqFWIE6JAThs0qc4FjLG/MPu1wgEOomxjl+r+SlIRiiLMjPFhipMKczh
uLqUpeBKo4faccIjqpnsXYHr5Op5Aj85qZgUZIxwW52elamIDXFQHJL0tilxjHhY
CTtm2DVjJ3DTasr6jerUsLydBXG5CleCYPs/9gx56d8gZVCyVloyVZ+KERydIrFO
kE+bFbHkXE5B27Eho8Bl//iMr4YMxBSL4eI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:43 2025 by rpki-client