Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa
File:                     f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa (raw, json)
Hash identifier:          yOIO4I4E8YefbiFVnGLRzZkeYEMI86DhoTDLu6wOfJU=
Subject key identifier:   FA:2F:50:54:E8:EE:62:85:4F:2E:2A:80:3D:BC:4D:F3:7C:55:6C:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0F225CF026F166EEB44B4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        2001:4878:c1e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f2:25:cf:02:6f:16:6e:eb:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9bf8e53d-fd5a-4c4b-a574-fdf88d60f120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:b4:19:31:df:c2:0d:52:10:e7:5a:16:f8:
                    88:53:6f:9f:5f:40:7d:07:1b:9a:b5:de:a9:10:ec:
                    bc:c2:2e:7b:ac:e4:af:78:3d:b9:a3:a1:54:8f:08:
                    f4:46:53:e0:ce:41:fe:8b:ed:97:ef:fb:9d:d7:43:
                    fe:c6:b6:36:d7:49:e2:a1:91:9e:2b:cd:98:98:07:
                    9e:fe:1a:a9:01:50:d4:d2:17:49:3f:bd:0f:67:82:
                    c1:be:67:4b:d1:7b:47:ad:6e:5d:7e:ad:ff:dc:15:
                    02:3d:47:c7:26:69:ef:a1:5d:ca:48:bc:52:56:05:
                    32:ca:10:62:60:f8:3e:03:96:f5:6f:78:f2:52:9b:
                    08:de:67:d2:1b:7c:c9:c8:70:45:be:95:15:a2:a5:
                    5f:f8:29:1b:c2:85:61:10:aa:05:3c:3e:58:df:53:
                    90:1d:75:c2:93:8c:17:3a:de:fd:77:fc:e7:20:fe:
                    f8:cb:b3:92:0d:1f:7f:0d:0c:39:f6:44:0f:b6:ee:
                    cd:c2:67:ef:82:86:10:e5:7d:dd:e9:ba:ce:49:35:
                    3c:35:e8:f1:38:d3:34:9d:6a:8f:b1:4f:e7:77:76:
                    c9:6b:9f:e3:73:1f:9d:48:85:b6:5b:fe:e2:7e:e3:
                    f2:9a:bc:14:27:5e:7d:08:1b:55:ff:f4:c0:f9:80:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:50:54:E8:EE:62:85:4F:2E:2A:80:3D:BC:4D:F3:7C:55:6C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c1e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:ce:57:eb:2b:a2:a8:c6:db:b8:3d:b5:5d:58:bb:0b:40:
         85:54:55:e1:b6:1e:39:83:12:b4:42:ed:11:cc:8a:1f:d9:eb:
         28:35:9c:2d:90:fb:d1:d3:32:8d:84:d7:11:2b:d6:71:df:c6:
         bc:a2:9e:b3:cb:7e:69:31:72:cf:c8:93:4e:71:1f:8b:8a:30:
         a4:76:40:24:da:f0:90:d9:04:a5:c2:fd:88:71:e9:d6:62:ef:
         3b:7e:7a:f5:8e:f1:23:15:89:69:ec:86:95:84:96:7c:e8:97:
         53:0b:bb:39:8a:44:31:2d:24:8f:0d:5a:ee:c4:e3:57:a2:d4:
         ee:2d:eb:40:11:53:3c:ed:28:c9:45:ca:b8:45:9b:fd:0b:68:
         82:dd:6c:6c:ca:1b:88:93:d0:28:b6:3f:a1:0c:53:b6:b5:6b:
         40:8d:f4:3b:1a:9c:b4:de:5a:0d:93:64:d7:ea:83:cc:1a:51:
         9b:3f:b7:8f:3d:32:30:cc:17:f5:8b:8d:dc:5d:90:3e:68:6e:
         08:e7:75:56:0a:c7:d9:79:46:0b:eb:e6:2a:c8:85:eb:1b:e9:
         fd:3e:bd:89:3e:50:6f:f6:cb:af:bc:cd:10:48:b0:b3:51:0f:
         47:fb:9f:dc:c6:52:ac:9a:7a:b2:a1:a3:6d:b7:0a:9a:7f:93:
         95:36:b3:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PIlzwJvFm7rRLQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OWJmOGU1M2QtZmQ1YS00YzRiLWE1NzQtZmRmODhkNjBmMTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5W0GTHfwg1SEOdaFviIU2+fX0B9Bxuatd6p
EOy8wi57rOSveD25o6FUjwj0RlPgzkH+i+2X7/ud10P+xrY210nioZGeK82YmAee
/hqpAVDU0hdJP70PZ4LBvmdL0XtHrW5dfq3/3BUCPUfHJmnvoV3KSLxSVgUyyhBi
YPg+A5b1b3jyUpsI3mfSG3zJyHBFvpUVoqVf+CkbwoVhEKoFPD5Y31OQHXXCk4wX
Ot79d/znIP74y7OSDR9/DQw59kQPtu7NwmfvgoYQ5X3d6brOSTU8NejxONM0nWqP
sU/nd3bJa5/jcx+dSIW2W/7ifuPymrwUJ159CBtV//TA+YCNQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPovUFTo7mKFTy4qgD28TfN8VWwZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJkZWYxMmUtNjZjMS0z
N2I5LThmYzgtMWJmYWMwZjY3YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIeMHg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFs/zlfrK6Koxtu4PbVdWLsLQIVUVeG2HjmDErRC7RHMih/Z6yg1
nC2Q+9HTMo2E1xEr1nHfxryinrPLfmkxcs/Ik05xH4uKMKR2QCTa8JDZBKXC/Yhx
6dZi7zt+evWO8SMViWnshpWElnzol1MLuzmKRDEtJI8NWu7E41ei1O4t60ARUzzt
KMlFyrhFm/0LaILdbGzKG4iT0Ci2P6EMU7a1a0CN9DsanLTeWg2TZNfqg8waUZs/
t489MjDMF/WLjdxdkD5obgjndVYKx9l5Rgvr5irIhesb6f0+vYk+UG/2y6+8zRBI
sLNRD0f7n9zGUqyaerKho223Cpp/k5U2s4c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:16 2025 by rpki-client