Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
File:                     4d710879-5174-37a8-b083-a00e701de633.roa (raw, json)
Hash identifier:          75b7x4DOpz/VSDNBDurSva8GhadNNJWEiLIgq9PlhAA=
Subject key identifier:   8E:7F:BE:D7:7B:63:2D:CF:42:A6:C2:DB:32:A1:80:42:90:BA:63:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55E76E6D80E5FDE93C7CDE
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     8966
IP address blocks:        2600:1417:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e7:6e:6d:80:e5:fd:e9:3c:7c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=ba620fde-15b6-49de-ac00-7552b17e4fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:e0:4b:c8:aa:60:4b:54:b6:e5:c3:2a:96:
                    ef:84:18:b8:e7:62:05:28:7a:84:f5:88:0e:de:d6:
                    eb:82:da:15:a0:74:00:0c:61:40:e3:8a:d9:91:fb:
                    15:b3:60:e6:db:d8:40:69:8b:b9:4e:cb:dc:32:79:
                    05:ea:9c:de:d1:dd:58:ee:c3:93:40:0b:95:52:1f:
                    32:77:5a:74:f5:0f:f5:2a:84:bd:50:b3:42:ad:52:
                    b3:98:dd:63:28:03:c0:d4:ea:af:71:f2:29:d5:60:
                    45:56:c6:c9:cc:15:68:ae:64:77:c6:95:c5:09:41:
                    20:a8:96:a8:e1:87:3d:40:0d:c0:ff:53:c7:85:6d:
                    b4:08:23:fc:ad:c8:c2:6f:7d:88:12:1a:30:98:fc:
                    32:68:b4:9e:ee:08:fa:1a:2f:c9:7d:8d:16:02:20:
                    c4:67:94:39:e1:95:59:ec:82:44:89:f4:c2:6b:0e:
                    96:33:a1:84:7c:ba:ee:ab:19:48:2b:42:67:dd:57:
                    25:e2:fd:b2:00:e5:bc:af:82:9e:64:d4:7c:1a:52:
                    f3:a9:fd:bd:84:70:2b:db:7d:68:7f:75:e8:75:65:
                    7a:f3:5c:83:7f:f5:1e:d0:2e:82:0d:74:ff:dc:f5:
                    71:b5:45:9b:58:cc:09:86:76:73:9d:50:ff:34:28:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:BE:D7:7B:63:2D:CF:42:A6:C2:DB:32:A1:80:42:90:BA:63:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:32:a2:59:3d:99:7c:aa:42:64:ed:89:ab:cb:2a:cd:81:
         9c:eb:a0:59:ef:71:95:39:e1:29:62:a0:81:b1:e1:1f:50:39:
         c5:db:bd:94:d0:99:1e:ba:70:9f:df:74:b8:2e:57:b4:a4:b1:
         2b:c7:5e:24:65:47:a5:b9:fe:3c:a7:c0:e8:ad:66:80:bd:9e:
         fd:a1:61:fc:b1:0e:60:85:2e:99:cf:11:56:f3:05:6c:cf:95:
         45:9f:50:76:a9:34:9b:f5:bb:57:e3:43:2e:6d:ea:9c:04:ef:
         a8:be:ee:e9:8d:9d:1b:78:2f:bf:2f:0b:e1:37:59:02:a8:01:
         61:41:36:3e:36:1d:08:ac:09:22:2d:00:77:75:8c:8f:e0:41:
         da:74:0f:bb:12:66:f8:41:19:c8:91:00:08:df:18:21:f0:ca:
         10:6b:a0:4b:cb:a4:45:89:89:c7:ac:88:e1:a8:17:8e:19:0b:
         f1:c8:21:54:1c:6a:46:eb:3d:0d:a7:3f:94:94:e6:a9:f3:e3:
         c1:cc:26:23:ff:a5:b5:e8:7e:ae:19:2b:ab:e3:64:42:51:33:
         0e:eb:00:71:9c:bf:3a:93:32:be:d0:54:17:2e:26:f7:33:49:
         f4:1a:a5:f1:c4:78:e4:f5:2d:21:93:10:13:6f:05:84:b7:67:
         bc:7a:5a:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpsVedubYDl/ek8fN4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
YmE2MjBmZGUtMTViNi00OWRlLWFjMDAtNzU1MmIxN2U0ZmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7zgS8iqYEtUtuXDKpbvhBi452IFKHqE9YgO
3tbrgtoVoHQADGFA44rZkfsVs2Dm29hAaYu5TsvcMnkF6pze0d1Y7sOTQAuVUh8y
d1p09Q/1KoS9ULNCrVKzmN1jKAPA1OqvcfIp1WBFVsbJzBVormR3xpXFCUEgqJao
4Yc9QA3A/1PHhW20CCP8rcjCb32IEhowmPwyaLSe7gj6Gi/JfY0WAiDEZ5Q54ZVZ
7IJEifTCaw6WM6GEfLruqxlIK0Jn3Vcl4v2yAOW8r4KeZNR8GlLzqf29hHAr231o
f3XodWV681yDf/Ue0C6CDXT/3PVxtUWbWMwJhnZznVD/NChMgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI5/vtd7Yy3PQqbC2zKhgEKQumOJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ3MTA4NzktNTE3NC0z
N2E4LWIwODMtYTAwZTcwMWRlNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA42MqJZPZl8qkJk7YmryyrNgZzroFnvcZU54SlioIGx4R9QOcXb
vZTQmR66cJ/fdLguV7SksSvHXiRlR6W5/jynwOitZoC9nv2hYfyxDmCFLpnPEVbz
BWzPlUWfUHapNJv1u1fjQy5t6pwE76i+7umNnRt4L78vC+E3WQKoAWFBNj42HQis
CSItAHd1jI/gQdp0D7sSZvhBGciRAAjfGCHwyhBroEvLpEWJicesiOGoF44ZC/HI
IVQcakbrPQ2nP5SU5qnz48HMJiP/pbXofq4ZK6vjZEJRMw7rAHGcvzqTMr7QVBcu
JvczSfQapfHEeOT1LSGTEBNvBYS3Z7x6WpM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:36 2025 by rpki-client