Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
File:                     8eecd044-53ce-3b54-9eab-44203b2334eb.roa (raw, json)
Hash identifier:          wRxvTUYLa1m6bnLFLC5JmtuSTsUmVoYnNTshrzT7vfY=
Subject key identifier:   B9:A9:EE:BF:0D:1F:9C:C5:22:AA:BF:56:1E:20:B1:E1:C0:CE:35:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB91BA29161BCE05D646D7FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     63949
IP address blocks:        2600:3c12:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a2:91:61:bc:e0:5d:64:6d:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=06b5feb9-5fba-443b-9a0f-1e2d54371129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:37:1d:b4:b7:65:60:61:92:49:66:e8:91:
                    79:f2:dd:97:00:4e:e4:9b:6b:e3:43:a8:43:19:3a:
                    a7:19:fc:e8:ca:27:0a:cd:50:09:4b:03:b8:85:61:
                    d1:9e:76:33:e4:13:88:2f:69:98:7a:1f:32:aa:99:
                    a3:72:6b:11:71:cd:c4:50:f7:0e:a1:be:c2:35:a8:
                    88:3d:54:91:4f:39:30:c3:6e:c2:98:8c:9c:13:60:
                    48:0d:08:fb:3a:39:e1:1d:1c:d3:57:42:d2:60:1e:
                    20:8d:c4:0f:cc:8d:bb:f8:e2:d9:44:fc:ee:4b:e2:
                    2a:98:c1:4d:68:27:5e:b6:d7:0e:50:55:5a:9c:96:
                    33:13:9b:db:52:82:d5:69:ab:80:8c:55:a8:7b:e9:
                    50:85:8d:d2:ab:1b:f2:d0:70:69:ec:b1:d0:44:20:
                    61:fd:4d:7a:3d:e8:79:dd:6f:84:e5:92:89:72:3e:
                    3e:19:59:51:be:20:40:a8:b4:07:f7:f2:15:a2:44:
                    66:e6:ca:38:72:ac:67:a1:51:1b:4d:c6:c5:2c:54:
                    bb:1e:48:20:3b:5a:9d:f5:e7:61:03:19:65:f8:86:
                    d0:2c:2d:14:a9:1d:26:bb:6a:21:e8:d1:c8:a1:4e:
                    73:e0:15:ed:6e:1e:8e:01:c7:4d:06:d8:2b:78:ce:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:EE:BF:0D:1F:9C:C5:22:AA:BF:56:1E:20:B1:E1:C0:CE:35:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8eecd044-53ce-3b54-9eab-44203b2334eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:0d:70:1d:cd:f4:75:06:68:bf:32:e4:53:e5:62:02:34:
         6b:36:33:63:67:76:14:3e:04:2c:11:97:e8:ab:4d:67:63:94:
         9c:d4:5b:03:8f:a8:23:dc:b8:a0:20:c2:0e:40:dc:64:b5:24:
         ce:dc:03:37:c0:87:23:44:4f:18:a1:66:5f:fc:67:f8:36:2c:
         ba:2d:b7:80:14:31:57:f3:aa:ce:bb:4a:66:13:05:88:67:f5:
         e8:a0:52:1f:42:ec:8b:a3:ba:72:2b:8e:5d:d0:0e:d5:2a:d3:
         0b:a9:86:ef:22:91:d5:1e:36:14:0e:00:7c:51:d6:b2:f5:5b:
         7b:25:13:38:a6:63:76:3a:55:3c:66:1d:70:c9:2d:30:f1:4b:
         b9:7c:ff:b9:3a:2b:a5:d0:62:92:c4:57:39:c5:a2:28:f1:ac:
         5c:99:73:e6:cc:93:d5:a6:57:a1:8d:e9:59:a4:f4:18:a2:28:
         a3:8a:1e:b2:02:50:40:0b:ed:e5:d1:97:d7:36:3b:d5:c4:36:
         8c:d6:c0:e4:8d:20:ea:46:fe:28:e6:d3:81:fe:4e:ac:83:95:
         ad:00:8d:e9:59:ad:ce:06:68:c9:75:49:8d:be:c6:2b:a4:57:
         91:d1:14:0a:bb:a7:06:f9:50:4b:3e:61:7a:f4:43:f1:c4:1f:
         d2:b0:c6:03
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq5G6KRYbzgXWRtf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MDZiNWZlYjktNWZiYS00NDNiLTlhMGYtMWUyZDU0MzcxMTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqo3HbS3ZWBhkklm6JF58t2XAE7km2vjQ6hD
GTqnGfzoyicKzVAJSwO4hWHRnnYz5BOIL2mYeh8yqpmjcmsRcc3EUPcOob7CNaiI
PVSRTzkww27CmIycE2BIDQj7OjnhHRzTV0LSYB4gjcQPzI27+OLZRPzuS+IqmMFN
aCdettcOUFVanJYzE5vbUoLVaauAjFWoe+lQhY3Sqxvy0HBp7LHQRCBh/U16Peh5
3W+E5ZKJcj4+GVlRviBAqLQH9/IVokRm5so4cqxnoVEbTcbFLFS7HkggO1qd9edh
Axll+IbQLC0UqR0mu2oh6NHIoU5z4BXtbh6OAcdNBtgreM5W9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLmp7r8NH5zFIqq/Vh4gseHAzjWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGVlY2QwNDQtNTNjZS0z
YjU0LTllYWItNDQyMDNiMjMzNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgA8EgIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS/MNcB3N9HUGaL8y5FPlYgI0azYzY2d2FD4ELBGX6KtNZ2OUnNRb
A4+oI9y4oCDCDkDcZLUkztwDN8CHI0RPGKFmX/xn+DYsui23gBQxV/OqzrtKZhMF
iGf16KBSH0Lsi6O6ciuOXdAO1SrTC6mG7yKR1R42FA4AfFHWsvVbeyUTOKZjdjpV
PGYdcMktMPFLuXz/uTorpdBiksRXOcWiKPGsXJlz5syT1aZXoY3pWaT0GKIoo4oe
sgJQQAvt5dGX1zY71cQ2jNbA5I0g6kb+KObTgf5OrIOVrQCN6VmtzgZoyXVJjb7G
K6RXkdEUCrunBvlQSz5hevRD8cQf0rDGAw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:13 2025 by rpki-client