Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa
File:                     b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa (raw, json)
Hash identifier:          4/R45QVsZz28xI0vXDKJbcNEg+sPOTlYmBo3Na1vEzw=
Subject key identifier:   B6:E4:5F:9F:6F:DE:9E:1B:4A:F9:C1:D2:0D:B7:81:93:9E:E0:C0:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB91BA21F06FF8FE7714AE780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     63949
IP address blocks:        2600:3c11::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a2:1f:06:ff:8f:e7:71:4a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=1757a506-ad1b-4a05-951a-319fb035441b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:e5:b7:77:e1:ce:b3:58:b0:9a:ba:86:90:
                    3d:18:bb:34:5a:41:c4:03:01:2b:de:e1:5e:40:48:
                    3a:66:d0:36:b0:87:c4:6d:8d:be:ea:63:6e:2e:9d:
                    2a:9b:b7:04:14:cd:28:ac:10:fc:ab:ff:12:63:2c:
                    ce:67:0c:16:7b:e1:f5:cb:c8:ee:7b:51:f7:8d:45:
                    63:55:71:07:df:5a:73:d2:ed:54:20:9b:8d:2f:da:
                    76:b6:72:06:52:7c:99:d1:46:22:10:33:44:7a:cb:
                    b8:a5:fc:af:da:f0:8c:df:75:d0:b2:f0:4c:e1:4b:
                    79:3d:74:2c:9e:9d:33:14:a6:cb:b7:8f:f8:fa:89:
                    bc:c7:a1:9a:f6:90:ee:7d:64:70:5b:97:eb:60:33:
                    e6:2c:16:30:be:03:7a:47:fc:7b:33:74:9d:ae:52:
                    9b:c5:dc:26:2b:3d:05:6b:6a:aa:b2:e5:07:42:00:
                    f7:0c:b6:0e:b2:cf:e0:00:d2:a4:a1:92:ba:f0:4b:
                    08:b7:f9:6b:4a:f7:70:a8:d2:e5:a0:c4:3a:77:10:
                    62:a9:bb:e1:0b:d9:57:d1:78:de:63:c6:7b:86:73:
                    43:99:9e:65:b8:ef:ef:d0:60:0e:11:44:8f:37:dc:
                    5b:4a:f9:0f:7f:38:6e:e8:f5:6c:3c:ef:a3:03:34:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:5F:9F:6F:DE:9E:1B:4A:F9:C1:D2:0D:B7:81:93:9E:E0:C0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b54a3ad9-cb34-3124-a2a2-76ed041173cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c11::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:68:fd:1f:bb:4d:94:7b:fc:21:e2:d3:18:7c:66:b8:aa:
         78:eb:5e:8d:72:59:4b:f6:4c:52:70:27:16:36:0c:bc:95:19:
         3d:70:f0:b3:fd:51:83:f9:96:3e:0f:1f:4a:79:c8:97:f0:d7:
         30:56:2f:a1:95:fa:1b:69:7b:dc:27:0b:55:3f:de:30:b2:96:
         ac:c3:86:02:28:b8:aa:07:fd:cc:ed:91:27:28:17:4c:74:84:
         f7:06:53:3d:f4:76:02:bf:d5:43:56:eb:5b:f2:48:24:3e:37:
         83:45:d5:10:be:df:c3:dd:90:90:f5:4b:b7:eb:f2:80:16:cb:
         91:55:45:8b:e6:d6:a3:d1:02:21:27:47:27:cc:63:8f:86:42:
         cb:fe:ed:8f:e9:69:1b:a5:03:95:90:6d:ac:2e:91:f8:6f:7e:
         e3:ef:2f:28:89:fe:f9:50:b8:87:23:ad:64:f1:43:8b:70:82:
         96:74:d5:00:f2:58:89:ba:cd:80:f0:ec:fa:b2:13:d1:cb:03:
         e7:e7:fa:e4:c0:f9:6e:d5:d0:dd:dd:7d:78:90:bb:76:a1:41:
         44:e6:3b:07:58:c4:94:71:ac:f4:f8:4a:05:b3:57:3f:45:0d:
         35:4b:d3:7f:04:66:d1:6e:e5:d0:7d:d1:89:6f:9b:5e:69:e2:
         13:d0:97:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq5G6IfBv+P53FK54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MTc1N2E1MDYtYWQxYi00YTA1LTk1MWEtMzE5ZmIwMzU0NDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoovlt3fhzrNYsJq6hpA9GLs0WkHEAwEr3uFe
QEg6ZtA2sIfEbY2+6mNuLp0qm7cEFM0orBD8q/8SYyzOZwwWe+H1y8jue1H3jUVj
VXEH31pz0u1UIJuNL9p2tnIGUnyZ0UYiEDNEesu4pfyv2vCM33XQsvBM4Ut5PXQs
np0zFKbLt4/4+om8x6Ga9pDufWRwW5frYDPmLBYwvgN6R/x7M3SdrlKbxdwmKz0F
a2qqsuUHQgD3DLYOss/gANKkoZK68EsIt/lrSvdwqNLloMQ6dxBiqbvhC9lX0Xje
Y8Z7hnNDmZ5luO/v0GAOEUSPN9xbSvkPfzhu6PVsPO+jAzTilwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLbkX59v3p4bSvnB0g23gZOe4MC+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU0YTNhZDktY2IzNC0z
MTI0LWEyYTItNzZlZDA0MTE3M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgA8ETBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4mmj9H7tNlHv8IeLTGHxmuKp4616NcllL9kxScCcWNgy8lRk9cPCz
/VGD+ZY+Dx9KeciX8NcwVi+hlfobaXvcJwtVP94wspasw4YCKLiqB/3M7ZEnKBdM
dIT3BlM99HYCv9VDVutb8kgkPjeDRdUQvt/D3ZCQ9Uu36/KAFsuRVUWL5taj0QIh
J0cnzGOPhkLL/u2P6WkbpQOVkG2sLpH4b37j7y8oif75ULiHI61k8UOLcIKWdNUA
8liJus2A8Oz6shPRywPn5/rkwPlu1dDd3X14kLt2oUFE5jsHWMSUcaz0+EoFs1c/
RQ01S9N/BGbRbuXQfdGJb5teaeIT0JeE
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:09 2025 by rpki-client