Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa
File:                     7a186806-7d6a-3d91-b8be-da859cb2a897.roa (raw, json)
Hash identifier:          W76U+u0olw2RriAvn6cH5k4nOGg5abCROS2MR2Sfh80=
Subject key identifier:   38:06:D5:09:99:16:21:A8:38:F1:6E:3F:AD:8D:D1:6E:D9:6A:8A:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF69FBCE17EEAAFABBD240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1488:4082::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:69:fb:ce:17:ee:aa:fa:bb:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=dbddf062-429c-4cc3-b64f-5f172a79ee29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:77:e6:6e:29:fa:da:47:41:d9:1f:0e:81:
                    f8:64:4e:90:52:be:e7:8d:5e:fc:c4:60:90:a3:19:
                    6d:96:78:22:21:48:eb:5f:fe:12:ea:68:7e:fa:ab:
                    f0:18:48:f8:50:e6:72:4e:f0:cb:c4:ba:d3:f9:b3:
                    fc:35:e4:50:87:00:e5:2b:d4:83:21:91:b4:15:70:
                    0d:26:60:23:82:07:c1:81:dd:a7:fa:ac:0a:29:78:
                    cf:78:e1:81:88:01:8f:f5:fa:09:8d:25:50:55:7c:
                    48:1e:b5:5d:00:5d:4c:6b:b6:24:24:3f:52:c1:c6:
                    83:d7:b5:3f:a7:19:c7:1a:ea:5b:a2:73:8a:e5:da:
                    53:9d:47:c1:91:4a:d3:26:69:db:bb:59:cd:f5:cf:
                    d8:5b:7e:59:5e:ba:1b:9a:7c:8a:43:4c:0f:36:6d:
                    3d:49:ea:8b:be:03:4e:3b:43:13:98:38:c0:8d:41:
                    97:cb:9e:ed:84:d7:62:29:71:d1:cf:c9:c1:b0:7f:
                    c5:b8:f9:bb:e5:16:b4:79:06:25:aa:d1:8c:76:ad:
                    7b:8e:a5:0b:47:8c:3c:87:a9:99:d9:3b:10:39:3c:
                    f6:eb:96:10:21:af:7e:33:74:3e:9e:d3:eb:2c:b7:
                    58:f1:ad:69:20:4f:f8:68:94:e7:dc:d9:69:88:f6:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:06:D5:09:99:16:21:A8:38:F1:6E:3F:AD:8D:D1:6E:D9:6A:8A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a186806-7d6a-3d91-b8be-da859cb2a897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:4082::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:25:1c:a5:15:8a:96:fe:96:af:0c:46:d9:1d:ab:fe:50:ba:
         5b:24:04:fc:77:3c:90:4e:c2:4a:e6:d4:44:f2:13:65:4c:e9:
         0d:5d:5c:52:bf:0a:d4:06:91:33:b3:20:e5:7b:8d:d1:02:e7:
         ef:76:35:21:0d:79:4a:d9:db:fb:c5:c7:ed:9f:d7:7e:df:9b:
         9f:e6:20:5c:ac:8a:c0:34:5a:8e:4a:2b:cf:63:ba:c5:f1:7f:
         f3:7a:d0:1d:8c:da:ea:30:8c:3f:49:86:92:8c:c9:21:7d:d1:
         37:32:a5:28:a7:42:57:1d:52:c7:ce:c1:be:c3:ba:4a:f7:65:
         9c:42:84:29:2e:92:e9:23:da:64:e6:b7:21:f8:90:d3:2f:59:
         af:ac:1f:b0:87:57:be:5a:60:85:a7:d9:27:95:80:46:58:0f:
         5c:af:eb:6e:b7:9d:73:da:67:50:d9:50:c4:9a:1d:02:94:e5:
         90:0c:1f:ac:ed:dd:84:98:66:93:01:30:e1:7f:df:99:12:2f:
         69:85:36:24:7e:5f:4c:c3:79:48:67:97:3a:cb:2f:18:5c:c8:
         d1:f4:b5:60:bd:c8:df:51:77:e8:38:f7:33:c6:6c:40:9e:35:
         89:78:da:bc:7a:5e:e0:13:0d:bb:08:40:d6:ad:bb:bb:6f:9b:
         25:fe:8b:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz2n7zhfuqvq70kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZGJkZGYwNjItNDI5Yy00Y2MzLWI2NGYtNWYxNzJhNzllZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3F35m4p+tpHQdkfDoH4ZE6QUr7njV78xGCQ
oxltlngiIUjrX/4S6mh++qvwGEj4UOZyTvDLxLrT+bP8NeRQhwDlK9SDIZG0FXAN
JmAjggfBgd2n+qwKKXjPeOGBiAGP9foJjSVQVXxIHrVdAF1Ma7YkJD9SwcaD17U/
pxnHGupbonOK5dpTnUfBkUrTJmnbu1nN9c/YW35ZXrobmnyKQ0wPNm09SeqLvgNO
O0MTmDjAjUGXy57thNdiKXHRz8nBsH/FuPm75Ra0eQYlqtGMdq17jqULR4w8h6mZ
2TsQOTz265YQIa9+M3Q+ntPrLLdY8a1pIE/4aJTn3NlpiPaCwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDgG1QmZFiGoOPFuP62N0W7ZaooIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ExODY4MDYtN2Q2YS0z
ZDkxLWI4YmUtZGE4NTljYjJhODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiECC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIMlHKUVipb+lq8MRtkdq/5QulskBPx3PJBOwkrm1ETyE2VM6Q1d
XFK/CtQGkTOzIOV7jdEC5+92NSENeUrZ2/vFx+2f137fm5/mIFysisA0Wo5KK89j
usXxf/N60B2M2uowjD9JhpKMySF90TcypSinQlcdUsfOwb7Dukr3ZZxChCkukukj
2mTmtyH4kNMvWa+sH7CHV75aYIWn2SeVgEZYD1yv6263nXPaZ1DZUMSaHQKU5ZAM
H6zt3YSYZpMBMOF/35kSL2mFNiR+X0zDeUhnlzrLLxhcyNH0tWC9yN9Rd+g49zPG
bECeNYl42rx6XuATDbsIQNatu7tvmyX+i8o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:17:10 2025 by rpki-client