Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ee6bd01-7659-33b9-a114-906bec7a54f0.roa
File:                     2ee6bd01-7659-33b9-a114-906bec7a54f0.roa (raw, json)
Hash identifier:          SEYhJ82By7OShDlJVEuv+t3EwAC50rzzLKz9It6KTqk=
Subject key identifier:   9A:61:D3:23:CA:CF:D8:81:AF:E6:C6:FC:41:11:45:61:CD:32:C7:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B9E07A1B63BC845236742FA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ee6bd01-7659-33b9-a114-906bec7a54f0.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     35994
IP address blocks:        2001:4878:2055::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a1:b6:3b:c8:45:23:67:42:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=27c1e074-3ad8-45b5-9e1a-7b48485df5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:c0:ca:13:c0:6e:bc:41:7b:5a:0a:0d:83:
                    39:ef:e4:63:cb:bd:37:a6:44:18:2b:f8:bf:a2:7e:
                    d6:9b:db:78:68:08:5d:5d:5d:78:54:53:70:6f:d3:
                    ec:8a:c0:f9:42:55:a1:98:87:36:98:bb:08:5f:ed:
                    fb:f9:5b:81:d8:5e:dd:73:be:2c:05:0b:d8:f4:7f:
                    b7:91:44:76:e5:99:a4:25:e2:b7:13:2f:8b:5c:61:
                    43:7d:fe:b4:6d:77:3b:77:92:d6:ee:ed:d5:b9:d0:
                    71:e3:d4:b5:63:4a:2c:85:32:4f:04:91:94:77:54:
                    ea:ff:4d:bf:08:b5:27:89:06:99:58:0e:60:b9:7b:
                    38:9a:13:d3:ac:0c:dd:5e:82:94:68:91:22:32:7f:
                    15:14:7e:c6:14:e9:6f:99:c2:f0:b9:05:15:a0:d2:
                    7e:cd:2a:6e:72:91:ba:4f:bb:0a:0b:96:74:5c:fa:
                    d7:2d:df:ea:1d:37:47:67:64:7c:ba:8e:10:0a:6b:
                    be:0b:bf:c9:ea:fb:19:47:75:89:0b:bc:87:cd:81:
                    8e:78:45:8b:93:c2:8f:ff:70:03:f8:d3:fd:72:a5:
                    27:c0:a8:c7:27:78:b7:70:06:6d:d9:48:a0:30:ee:
                    00:ac:3b:f4:60:6c:e1:0b:7e:1b:bf:41:a9:ab:f5:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:D3:23:CA:CF:D8:81:AF:E6:C6:FC:41:11:45:61:CD:32:C7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ee6bd01-7659-33b9-a114-906bec7a54f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2055::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:df:5d:6c:62:ff:ed:89:b2:29:b9:ce:c7:92:c3:ce:38:
         5f:83:30:21:4c:06:1e:d7:88:b5:b3:f4:dd:08:ed:be:bd:49:
         a0:32:1d:f0:bf:f0:3f:11:c1:67:2d:7d:e0:16:bc:1b:8e:3e:
         af:a0:29:4a:e7:63:00:65:e8:11:50:f5:a8:18:27:51:8f:24:
         18:09:e9:55:ac:5c:88:27:c1:99:ff:55:cf:3e:cf:97:6f:ed:
         54:8f:af:05:87:ad:b9:61:65:cd:39:e3:28:68:0f:cb:cd:f5:
         a5:c1:34:7b:5b:d0:9c:3a:5b:0b:c8:3e:00:41:41:4a:28:2b:
         fd:70:11:54:84:15:84:57:c4:8d:2e:f4:9d:28:6d:77:54:d0:
         01:6b:87:a3:2e:e6:b2:4b:4f:8d:26:b5:91:a9:65:af:ea:da:
         61:a4:f6:26:8e:2f:9a:e8:d5:fd:9f:ed:df:99:2a:38:2f:32:
         7c:6a:5e:ab:1f:ff:b1:24:4d:47:1c:15:05:ba:77:9d:b2:94:
         30:bf:41:a6:b1:9a:a2:79:b7:e4:08:1d:87:4d:c1:13:4b:1f:
         c8:dd:33:ff:96:25:62:7d:2f:58:10:42:28:4f:79:6c:60:f6:
         50:b0:13:b2:ee:cb:a5:c9:94:f6:38:2a:57:80:36:48:46:2d:
         0d:b0:09:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6G2O8hFI2dC+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
MjdjMWUwNzQtM2FkOC00NWI1LTllMWEtN2I0ODQ4NWRmNWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQDAyhPAbrxBe1oKDYM57+Rjy703pkQYK/i/
on7Wm9t4aAhdXV14VFNwb9PsisD5QlWhmIc2mLsIX+37+VuB2F7dc74sBQvY9H+3
kUR25ZmkJeK3Ey+LXGFDff60bXc7d5LW7u3VudBx49S1Y0oshTJPBJGUd1Tq/02/
CLUniQaZWA5guXs4mhPTrAzdXoKUaJEiMn8VFH7GFOlvmcLwuQUVoNJ+zSpucpG6
T7sKC5Z0XPrXLd/qHTdHZ2R8uo4QCmu+C7/J6vsZR3WJC7yHzYGOeEWLk8KP/3AD
+NP9cqUnwKjHJ3i3cAZt2UigMO4ArDv0YGzhC34bv0Gpq/WVSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJph0yPKz9iBr+bG/EERRWHNMsfcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmVlNmJkMDEtNzY1OS0z
M2I5LWExMTQtOTA2YmVjN2E1NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCBV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADx2311sYv/tibIpuc7HksPOOF+DMCFMBh7XiLWz9N0I7b69SaAy
HfC/8D8RwWctfeAWvBuOPq+gKUrnYwBl6BFQ9agYJ1GPJBgJ6VWsXIgnwZn/Vc8+
z5dv7VSPrwWHrblhZc054yhoD8vN9aXBNHtb0Jw6WwvIPgBBQUooK/1wEVSEFYRX
xI0u9J0obXdU0AFrh6Mu5rJLT40mtZGpZa/q2mGk9iaOL5ro1f2f7d+ZKjgvMnxq
Xqsf/7EkTUccFQW6d52ylDC/QaaxmqJ5t+QIHYdNwRNLH8jdM/+WJWJ9L1gQQihP
eWxg9lCwE7Luy6XJlPY4KleANkhGLQ2wCdU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:54 2025 by rpki-client