Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa
File:                     12770fea-885a-3710-a35b-a1ab794c831c.roa (raw, json)
Hash identifier:          ctpCeooomTUMYiX47Lw3aYlTItWI1BqyHw+IJn14clQ=
Subject key identifier:   04:9A:99:74:88:83:DF:AB:86:A5:1C:43:40:A0:02:AE:4E:57:A5:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4BAD52C784163484A970B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     20940
IP address blocks:        2600:1405:e400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:ad:52:c7:84:16:34:84:a9:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f269c1d8-040d-43be-93b1-c4f4c97152aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a7:33:27:d6:06:d3:04:97:ef:3f:94:29:ea:
                    d3:f7:90:78:30:1f:5c:ac:62:9c:b0:6b:5e:ed:58:
                    c1:ef:7d:95:ad:27:f8:34:c7:65:cd:ee:89:3b:38:
                    bf:f4:cf:aa:7a:d1:e2:14:0a:bf:59:ed:cb:ca:5c:
                    db:dc:49:43:82:c4:b3:14:38:39:6b:14:2f:78:be:
                    0d:4b:e0:49:12:88:b8:62:60:2a:67:b1:ca:0a:39:
                    b3:71:60:7a:bb:5e:ad:fc:0d:a4:6a:2a:5a:35:f7:
                    87:30:67:0a:8c:75:e1:fd:55:3d:96:24:5b:de:ef:
                    17:88:56:02:8c:9a:6b:93:0f:d1:6f:3c:2b:1b:65:
                    39:39:dd:07:6c:09:bd:98:26:03:e5:35:de:32:87:
                    25:12:3f:b4:28:5c:e0:60:a1:fd:74:95:ee:3b:74:
                    a5:46:44:24:c5:ec:d6:f1:6f:46:26:e2:5f:52:7c:
                    30:01:69:4e:8f:c8:1b:0f:ba:d6:ca:79:82:87:44:
                    87:c1:4d:9e:8e:67:d7:e9:4f:d5:d4:28:36:3b:6f:
                    0f:60:c7:28:b3:0a:4a:db:dc:cf:dd:58:55:5e:dd:
                    d4:17:27:43:15:ce:87:3b:6a:7e:94:6e:30:a4:5e:
                    a7:73:59:a8:51:55:9c:13:6b:c9:2e:8f:87:be:49:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9A:99:74:88:83:DF:AB:86:A5:1C:43:40:A0:02:AE:4E:57:A5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12770fea-885a-3710-a35b-a1ab794c831c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:e400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:03:f8:87:16:07:22:1d:b8:6a:83:be:2c:4a:6b:2f:28:a3:
         0c:be:64:2d:42:3f:53:6a:29:bd:f9:04:93:f2:00:05:7a:7f:
         17:de:db:a0:3e:23:c4:92:77:f6:d6:e5:dc:d4:ce:4f:39:11:
         1c:9a:07:e8:e3:28:29:0e:6c:1f:48:42:af:74:c9:3a:1f:77:
         8d:c7:29:a1:a3:90:70:45:0e:03:e3:b4:f9:dd:65:16:96:f5:
         00:63:56:ef:bd:70:aa:4d:75:01:00:b7:ff:c1:ae:2a:7f:cc:
         1b:77:fa:bc:ef:17:e9:54:58:16:58:50:4a:3a:f3:82:ae:78:
         9a:df:fa:fe:c9:c8:28:8a:74:50:09:e5:ba:e0:fc:40:c1:6f:
         f8:8d:67:43:17:03:d1:41:c5:23:54:b9:2c:18:b7:4d:4b:1c:
         8b:86:12:b1:00:b9:fa:29:47:00:5b:14:b7:12:b3:ca:bf:2c:
         1a:6a:fb:3d:2f:f5:95:1d:ef:c4:6d:25:e7:60:fb:28:be:15:
         2c:c1:58:26:50:39:9f:4d:4a:3d:84:d4:af:2f:3b:25:b8:9d:
         f8:7f:61:49:6b:e9:d2:4f:b7:4b:92:60:de:23:d7:97:db:d3:
         2c:67:bb:58:78:9d:57:5a:b4:c2:51:2c:55:af:b2:c6:b8:7c:
         0b:ec:ba:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S61Sx4QWNISpcLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZjI2OWMxZDgtMDQwZC00M2JlLTkzYjEtYzRmNGM5NzE1MmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqczJ9YG0wSX7z+UKerT95B4MB9crGKcsGte
7VjB732VrSf4NMdlze6JOzi/9M+qetHiFAq/We3Lylzb3ElDgsSzFDg5axQveL4N
S+BJEoi4YmAqZ7HKCjmzcWB6u16t/A2kaipaNfeHMGcKjHXh/VU9liRb3u8XiFYC
jJprkw/RbzwrG2U5Od0HbAm9mCYD5TXeMoclEj+0KFzgYKH9dJXuO3SlRkQkxezW
8W9GJuJfUnwwAWlOj8gbD7rWynmCh0SHwU2ejmfX6U/V1Cg2O28PYMcoswpK29zP
3VhVXt3UFydDFc6HO2p+lG4wpF6nc1moUVWcE2vJLo+HvkmYmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFASamXSIg9+rhqUcQ0CgAq5OV6XQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI3NzBmZWEtODg1YS0z
NzEwLWEzNWItYTFhYjc5NGM4MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBeQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGMD+IcWByIduGqDvixKay8oowy+ZC1CP1NqKb35BJPyAAV6fxfe
26A+I8SSd/bW5dzUzk85ERyaB+jjKCkObB9IQq90yTofd43HKaGjkHBFDgPjtPnd
ZRaW9QBjVu+9cKpNdQEAt//Brip/zBt3+rzvF+lUWBZYUEo684KueJrf+v7JyCiK
dFAJ5brg/EDBb/iNZ0MXA9FBxSNUuSwYt01LHIuGErEAufopRwBbFLcSs8q/LBpq
+z0v9ZUd78RtJedg+yi+FSzBWCZQOZ9NSj2E1K8vOyW4nfh/YUlr6dJPt0uSYN4j
15fb0yxnu1h4nVdatMJRLFWvssa4fAvsuhE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:04 2025 by rpki-client