Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa
File:                     57f690db-aed8-369f-939a-74e9d63e0142.roa (raw, json)
Hash identifier:          i0w0sGs6NVItl/ZZa8JRkKZmW4DTjguZLCNqBCQbeq8=
Subject key identifier:   9D:50:52:09:5E:80:95:4D:EA:25:49:A1:DB:15:7C:0B:04:17:EA:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB1925B71EE94D22C9F92C7A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        2600:1410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:5b:71:ee:94:d2:2c:9f:92:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=f7371168-6447-4ea5-8d1b-ddf627e9fb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:fe:da:08:64:46:d3:7f:28:59:25:ca:ac:
                    7e:36:e3:5f:3f:8d:51:48:f2:ab:be:1e:73:7c:bc:
                    f2:e6:2d:da:d9:94:00:38:30:4e:54:b5:85:0d:f1:
                    2b:0a:b4:29:97:88:64:00:09:cb:af:77:63:78:94:
                    30:ea:5f:3a:28:84:45:55:10:83:b7:76:50:f4:50:
                    7a:d0:f3:94:97:63:94:54:cb:a0:f0:a6:91:f8:1b:
                    b9:79:07:c2:6d:69:a0:75:cb:d4:05:b3:a2:e6:08:
                    7a:57:46:dc:63:22:eb:a3:68:24:40:55:0b:19:5a:
                    27:f2:a7:36:e3:4c:1b:37:8c:51:fd:23:c5:70:c9:
                    83:86:b3:65:aa:62:e4:13:3c:2b:fa:3e:72:94:f4:
                    de:3d:b8:c7:6d:32:e4:9e:51:34:42:d8:7b:50:d8:
                    96:2d:36:5b:01:de:9d:74:a9:63:41:39:06:f1:db:
                    29:a9:74:41:ed:73:fd:c6:0e:97:90:3b:96:d2:06:
                    7b:e5:bb:25:9f:0e:2d:61:e6:23:64:f9:f7:80:0d:
                    14:16:83:18:34:aa:e1:d3:0b:1c:60:bb:43:a8:34:
                    84:21:40:f2:22:07:fa:4f:3c:64:f6:75:ca:b7:dd:
                    60:45:33:7c:40:09:ac:ea:ad:47:f1:2f:0d:06:87:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:52:09:5E:80:95:4D:EA:25:49:A1:DB:15:7C:0B:04:17:EA:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:14:f1:0f:51:f8:b3:cd:e8:eb:ff:2f:b3:d3:49:76:79:
         95:75:35:3b:4b:4b:8e:08:1a:d5:74:08:9f:1e:c4:1c:06:c0:
         83:42:e1:4f:7a:8a:47:22:eb:09:4f:e3:2c:74:7c:4c:88:a7:
         01:87:43:eb:19:74:43:5c:47:c7:73:2e:c1:69:24:36:49:8f:
         04:d4:d6:47:99:4f:f3:a9:8e:29:98:0a:2a:eb:08:b7:31:b4:
         14:dd:fa:6e:d7:22:b3:87:0f:c0:ff:d9:2f:fd:e4:e1:c2:f8:
         88:ea:bc:1b:05:c7:e2:b1:a0:7b:72:48:98:41:cd:5b:b9:02:
         2f:e4:d1:b5:72:76:08:3c:91:69:a1:ae:6f:c2:35:9c:61:39:
         74:d6:e9:08:02:37:4d:b0:52:39:dc:55:07:3d:a3:a6:21:e1:
         37:03:15:61:b5:97:63:b0:2a:54:85:fb:c9:37:58:c9:03:a5:
         4f:06:30:2c:19:06:be:a7:f9:7e:0e:70:52:9d:34:68:59:40:
         c5:00:04:a2:cf:ed:fa:37:a7:5a:77:d2:0b:61:7b:2f:7e:ad:
         67:41:0a:e7:39:6b:ac:81:1d:38:68:c1:d0:57:07:c5:f7:80:
         93:eb:e4:06:99:c9:c5:eb:37:d7:1a:83:fa:77:f4:79:5d:41:
         ae:93:eb:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkltx7pTSLJ+Sx6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk
ZjczNzExNjgtNjQ0Ny00ZWE1LThkMWItZGRmNjI3ZTlmYjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmv+2ghkRtN/KFklyqx+NuNfP41RSPKrvh5z
fLzy5i3a2ZQAODBOVLWFDfErCrQpl4hkAAnLr3djeJQw6l86KIRFVRCDt3ZQ9FB6
0POUl2OUVMug8KaR+Bu5eQfCbWmgdcvUBbOi5gh6V0bcYyLro2gkQFULGVon8qc2
40wbN4xR/SPFcMmDhrNlqmLkEzwr+j5ylPTePbjHbTLknlE0Qth7UNiWLTZbAd6d
dKljQTkG8dspqXRB7XP9xg6XkDuW0gZ75bslnw4tYeYjZPn3gA0UFoMYNKrh0wsc
YLtDqDSEIUDyIgf6Tzxk9nXKt91gRTN8QAms6q1H8S8NBofAHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ1QUglegJVN6iVJodsVfAsEF+qpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmNjkwZGItYWVkOC0z
NjlmLTkzOWEtNzRlOWQ2M2UwMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUEAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3tFPEPUfizzejr/y+z00l2eZV1NTtLS44IGtV0CJ8exBwGwINC
4U96ikci6wlP4yx0fEyIpwGHQ+sZdENcR8dzLsFpJDZJjwTU1keZT/OpjimYCirr
CLcxtBTd+m7XIrOHD8D/2S/95OHC+IjqvBsFx+KxoHtySJhBzVu5Ai/k0bVydgg8
kWmhrm/CNZxhOXTW6QgCN02wUjncVQc9o6Yh4TcDFWG1l2OwKlSF+8k3WMkDpU8G
MCwZBr6n+X4OcFKdNGhZQMUABKLP7fo3p1p30gthey9+rWdBCuc5a6yBHThowdBX
B8X3gJPr5AaZycXrN9cag/p39HldQa6T6/I=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:44 2025 by rpki-client