Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faf37316-01e0-3f6d-863b-c6834496ed88.roa
File:                     faf37316-01e0-3f6d-863b-c6834496ed88.roa (raw, json)
Hash identifier:          4tt/WhD41Jnr9oeduF12A6pRGCHJYaf/rYsdgKvDFt4=
Subject key identifier:   83:DD:74:8B:5E:0B:C9:81:96:3B:FE:70:8E:0C:C6:38:F6:CD:5F:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E20A97331C745296EAC640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faf37316-01e0-3f6d-863b-c6834496ed88.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        2600:1406:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:0a:97:33:1c:74:52:96:ea:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=62ad369c-b72b-4d85-8f4e-e63c11637bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:2b:5f:12:ce:5c:be:e9:75:ec:a4:ca:21:
                    5e:32:b4:53:c2:87:1a:8c:be:70:1a:86:17:b1:ec:
                    9c:af:33:93:49:0f:67:f1:e1:e6:3e:72:07:85:14:
                    c1:ce:23:e6:63:b7:9b:b5:8c:cf:49:cf:b1:a4:1f:
                    88:bd:06:7c:72:a7:db:59:42:7f:55:8f:c9:f1:dd:
                    34:3c:29:5d:b8:a6:08:f5:24:f1:da:46:22:91:71:
                    cb:ec:be:b2:63:07:dc:ae:07:68:00:d8:16:9f:96:
                    6b:33:b7:8a:44:b9:fe:e7:ef:88:e9:8b:53:e5:a2:
                    38:5b:84:aa:9c:07:30:4a:fd:ee:1d:8a:d7:33:5b:
                    e9:cc:20:e9:1b:4a:f3:ca:8a:54:1d:11:14:0a:da:
                    92:2e:bc:80:0f:07:2b:a1:6b:dc:20:57:6c:04:29:
                    e8:a8:8c:b7:77:c4:01:b9:31:b7:bb:a4:5d:a5:b3:
                    c4:8b:b9:97:d1:d4:c2:46:eb:c0:f0:69:08:05:7e:
                    64:9e:22:c6:ef:98:3f:64:3d:5f:b4:cb:3f:fd:dc:
                    98:fe:51:a0:50:71:e1:5b:f6:54:44:4f:9d:1f:28:
                    ff:48:b2:e2:73:d8:48:e0:11:33:3b:67:f5:58:4f:
                    a5:7a:57:c2:62:cf:aa:3f:30:58:55:30:af:47:33:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:74:8B:5E:0B:C9:81:96:3B:FE:70:8E:0C:C6:38:F6:CD:5F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/faf37316-01e0-3f6d-863b-c6834496ed88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:03:5c:48:b6:08:a1:69:40:b3:a2:c5:1e:0c:a8:6d:d3:
         06:00:2b:85:30:67:79:61:5e:e0:47:5c:34:5c:3f:54:ab:c4:
         c8:a9:58:4a:e2:91:90:69:09:80:c6:aa:38:42:cd:14:ea:3b:
         0a:26:4b:3e:23:7b:eb:b5:9a:c2:6e:8b:e8:8c:28:06:e1:7f:
         ff:54:03:54:79:7d:7e:72:be:a9:17:95:2c:5f:71:26:0c:cf:
         3d:cb:9c:1b:a6:80:9b:c3:fd:51:d5:6d:85:9c:5b:df:1c:2c:
         3e:37:fc:65:ad:89:37:7b:bb:2c:a5:df:43:be:83:b7:4c:2c:
         97:a3:0b:24:43:cc:71:81:f2:b9:d5:e3:62:e9:37:8c:91:0f:
         58:9b:5b:63:91:81:12:3a:0f:3d:a9:c0:c2:71:e9:90:69:c4:
         95:fa:bb:5b:e2:be:11:ae:4e:8f:1d:61:0b:8e:53:e3:86:6a:
         fc:cf:3e:5e:f1:84:8c:30:2e:54:7a:cd:0e:b6:37:08:31:3c:
         28:20:58:62:e0:88:2b:75:c2:7d:fd:9b:77:5a:e2:f9:67:8b:
         fc:1b:ca:79:f5:55:61:16:02:18:50:df:df:a4:95:a0:59:ca:
         e6:27:4a:99:93:07:09:94:6b:f6:c1:2d:ba:c1:dd:54:e8:ad:
         02:37:64:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gqXMxx0UpbqxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjJhZDM2OWMtYjcyYi00ZDg1LThmNGUtZTYzYzExNjM3YmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAgrXxLOXL7pdeykyiFeMrRTwocajL5wGoYX
seycrzOTSQ9n8eHmPnIHhRTBziPmY7ebtYzPSc+xpB+IvQZ8cqfbWUJ/VY/J8d00
PClduKYI9STx2kYikXHL7L6yYwfcrgdoANgWn5ZrM7eKRLn+5++I6YtT5aI4W4Sq
nAcwSv3uHYrXM1vpzCDpG0rzyopUHREUCtqSLryADwcroWvcIFdsBCnoqIy3d8QB
uTG3u6RdpbPEi7mX0dTCRuvA8GkIBX5kniLG75g/ZD1ftMs//dyY/lGgUHHhW/ZU
RE+dHyj/SLLic9hI4BEzO2f1WE+lelfCYs+qPzBYVTCvRzNVAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIPddIteC8mBljv+cI4Mxjj2zV/bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmFmMzczMTYtMDFlMC0z
ZjZkLTg2M2ItYzY4MzQ0OTZlZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF+OA1xItgihaUCzosUeDKht0wYAK4UwZ3lhXuBHXDRcP1SrxMip
WErikZBpCYDGqjhCzRTqOwomSz4je+u1msJui+iMKAbhf/9UA1R5fX5yvqkXlSxf
cSYMzz3LnBumgJvD/VHVbYWcW98cLD43/GWtiTd7uyyl30O+g7dMLJejCyRDzHGB
8rnV42LpN4yRD1ibW2ORgRI6Dz2pwMJx6ZBpxJX6u1vivhGuTo8dYQuOU+OGavzP
Pl7xhIwwLlR6zQ62NwgxPCggWGLgiCt1wn39m3da4vlni/wbynn1VWEWAhhQ39+k
laBZyuYnSpmTBwmUa/bBLbrB3VTorQI3ZL8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:40 2025 by rpki-client