Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa
File:                     c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa (raw, json)
Hash identifier:          nUCSHN7fpSgdFFmSAohvD55ar+zcFGfXqRDXn9afexg=
Subject key identifier:   A2:69:F0:8F:50:BE:78:A0:55:CD:34:C0:4B:94:87:B9:06:D0:DF:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B7B0EF2C9ED392C2A6880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:2259::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:7b:0e:f2:c9:ed:39:2c:2a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=1b784b82-8bc4-4ff4-a752-20f218acac10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:ee:bf:80:47:f5:8c:7c:4a:ec:d9:03:21:
                    8e:4a:bc:98:d5:0f:3d:22:ed:fd:e5:8a:5d:b0:e4:
                    f6:2e:01:85:c3:b5:ce:96:1d:1d:a1:97:93:ed:61:
                    89:40:9d:d7:32:1e:99:4d:0b:3e:61:15:47:b9:e8:
                    ae:46:35:ff:8a:07:75:cc:b0:c6:19:9f:30:0d:4b:
                    90:9f:44:b8:78:a1:12:86:d7:22:a1:c7:96:e2:bd:
                    12:f4:eb:6c:51:73:64:46:84:73:c2:6b:32:54:4a:
                    fa:73:a9:67:35:45:9b:05:99:22:76:c0:b2:9c:6e:
                    31:2e:8f:a6:1d:c8:ca:e8:8f:99:91:e4:4b:5d:8d:
                    98:b8:3d:ec:51:82:55:0b:b6:91:67:95:dd:be:8a:
                    d6:d3:37:18:e0:90:9b:67:aa:9d:cb:e9:c1:38:c2:
                    1c:bb:9b:6b:13:c1:7e:f6:84:9f:10:5e:92:96:4d:
                    26:0e:17:36:0a:38:d9:31:d7:91:96:a6:c1:0e:bd:
                    24:72:b1:ea:f7:ff:8b:25:fa:95:1f:46:fd:78:d5:
                    6c:c5:b9:ca:0d:1d:23:c6:09:ea:a5:6b:ac:c1:ee:
                    87:00:22:d4:12:c4:b5:4a:79:81:a0:54:3e:6f:2b:
                    df:22:3e:9f:93:44:b4:05:ea:d3:f2:43:c2:9e:ed:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:F0:8F:50:BE:78:A0:55:CD:34:C0:4B:94:87:B9:06:D0:DF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:00:bb:8a:6e:d4:61:14:2f:3b:75:af:bd:4f:ab:c2:82:91:
         c7:86:a8:d7:d7:01:69:89:d8:3e:89:b8:d7:c7:6b:bc:86:ca:
         3b:fe:41:ae:06:ce:89:4d:85:09:0e:30:33:58:cb:8a:27:83:
         e7:c5:7e:32:cc:c7:35:5e:27:9e:af:88:4b:d7:10:ae:14:f9:
         49:2b:49:f0:3a:c6:a3:59:2e:02:55:b9:ee:5c:12:d8:6c:3d:
         13:42:e8:3d:9b:ae:31:ce:19:d3:64:dc:32:3d:a7:11:25:45:
         02:a9:cc:dc:8b:31:5a:46:f2:6e:ae:3d:4b:d1:91:d7:43:b4:
         61:56:de:a4:15:c2:39:67:33:28:d0:72:a8:16:68:56:fc:11:
         32:b2:56:00:77:83:d9:9e:67:a5:f3:81:5f:5c:50:a8:ac:18:
         eb:09:8a:5a:43:64:ba:08:7c:a3:ff:95:c7:a9:5d:9d:26:70:
         cc:d9:07:fe:13:25:e5:a0:d7:df:89:66:79:45:f0:9b:9c:3f:
         0c:a3:b8:00:2c:30:96:fb:e4:e3:4f:ee:6b:06:2c:28:d6:61:
         66:db:11:ff:50:71:d4:cf:a8:74:b2:5d:96:74:de:27:55:b7:
         8a:6f:e2:fa:0f:a5:2e:b0:78:f3:18:0b:1a:34:a4:31:11:47:
         d3:c6:fe:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S3sO8sntOSwqaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MWI3ODRiODItOGJjNC00ZmY0LWE3NTItMjBmMjE4YWNhYzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Xuv4BH9Yx8SuzZAyGOSryY1Q89Iu395Ypd
sOT2LgGFw7XOlh0doZeT7WGJQJ3XMh6ZTQs+YRVHueiuRjX/igd1zLDGGZ8wDUuQ
n0S4eKEShtcioceW4r0S9OtsUXNkRoRzwmsyVEr6c6lnNUWbBZkidsCynG4xLo+m
HcjK6I+ZkeRLXY2YuD3sUYJVC7aRZ5XdvorW0zcY4JCbZ6qdy+nBOMIcu5trE8F+
9oSfEF6Slk0mDhc2CjjZMdeRlqbBDr0kcrHq9/+LJfqVH0b9eNVsxbnKDR0jxgnq
pWuswe6HACLUEsS1SnmBoFQ+byvfIj6fk0S0BerT8kPCnu0fbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJp8I9QvnigVc00wEuUh7kG0N9nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU5ZGI0NDQtZTczZC0z
YTcxLTlkNDctYTE0Y2IyMWMyZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEMAu4pu1GEULzt1r71Pq8KCkceGqNfXAWmJ2D6JuNfHa7yGyjv+
Qa4GzolNhQkOMDNYy4ong+fFfjLMxzVeJ56viEvXEK4U+UkrSfA6xqNZLgJVue5c
EthsPRNC6D2brjHOGdNk3DI9pxElRQKpzNyLMVpG8m6uPUvRkddDtGFW3qQVwjln
MyjQcqgWaFb8ETKyVgB3g9meZ6XzgV9cUKisGOsJilpDZLoIfKP/lcepXZ0mcMzZ
B/4TJeWg19+JZnlF8JucPwyjuAAsMJb75ONP7msGLCjWYWbbEf9QcdTPqHSyXZZ0
3idVt4pv4voPpS6wePMYCxo0pDERR9PG/mo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:07 2025 by rpki-client