Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e3c3f5b-1439-3b21-b05c-55330315a9ef.roa
File:                     4e3c3f5b-1439-3b21-b05c-55330315a9ef.roa (raw, json)
Hash identifier:          +My/j9l6GAXrHJdQWpOP0unAOZWjbwSVa6AlE1BeH60=
Subject key identifier:   51:FD:9F:24:5E:A1:AA:84:FB:3F:3E:E4:28:A3:EC:0D:2F:CE:D5:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6DBB44F3E9EFB74BA0506B30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e3c3f5b-1439-3b21-b05c-55330315a9ef.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     12222
IP address blocks:        2001:4878:2173::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:44:f3:e9:ef:b7:4b:a0:50:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=21ba7bc7-4c16-4b0e-bcd7-25f6d2fb3c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:35:8e:e0:7f:ac:c7:2f:22:10:8a:a3:c8:
                    a4:0d:f9:52:10:62:1f:56:2f:f1:85:76:57:10:93:
                    51:3d:84:fd:29:8b:e7:29:cb:3c:b7:fc:aa:6f:62:
                    06:ab:af:e3:31:47:06:c9:8a:62:52:6c:ed:29:fa:
                    7e:a9:c0:45:c8:fb:29:bd:09:30:f8:5e:c3:a0:94:
                    c2:d7:9e:85:ea:c0:d7:27:a1:3f:1e:8c:a5:5f:48:
                    91:2f:fd:4d:bd:53:41:2a:6e:7b:26:30:be:a2:8c:
                    3c:41:13:0d:05:65:25:90:43:5e:da:6b:94:4d:bb:
                    e9:60:67:b3:c1:a7:b1:0b:19:18:f1:a9:23:9d:a9:
                    46:47:07:bf:82:27:07:b3:b4:65:59:b0:76:43:ad:
                    7e:82:29:19:99:e9:13:2d:ef:07:88:c8:2e:16:10:
                    9f:55:45:d2:b6:a4:df:96:ae:3a:0d:c3:2d:d3:78:
                    e2:f0:c3:ad:2e:e1:10:dc:62:ff:92:c0:f9:6a:43:
                    8b:60:97:65:1e:bc:6a:02:04:f2:8d:41:2b:6f:df:
                    e1:ac:97:ea:9d:5b:64:ed:10:09:8a:f3:81:2d:ad:
                    66:a6:17:f8:24:28:e8:6c:e1:f6:ea:98:10:fd:f1:
                    37:11:8d:bd:18:00:2b:ee:0f:e5:33:64:94:14:c8:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:9F:24:5E:A1:AA:84:FB:3F:3E:E4:28:A3:EC:0D:2F:CE:D5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e3c3f5b-1439-3b21-b05c-55330315a9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2173::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a2:4b:c0:7f:85:55:bf:35:2a:08:27:de:ee:9f:57:eb:27:
         dc:5f:f1:6a:0e:c5:be:0d:9d:69:ee:9a:8a:6d:76:27:b6:fe:
         c2:fd:d1:fb:e4:4b:f4:e8:91:a6:c3:2d:4b:8f:e1:ba:84:dc:
         72:10:b2:f2:7a:69:57:bd:3f:37:1d:b3:a6:cd:98:a3:eb:5c:
         20:af:24:f2:09:84:be:91:99:78:66:58:34:89:57:25:25:a0:
         07:94:5f:22:b6:e1:34:67:43:38:5b:07:4a:1d:93:96:48:73:
         0d:28:3b:37:43:1e:0a:f7:5b:71:30:c5:c2:11:64:b2:98:00:
         d8:b1:b1:98:69:77:63:25:0e:3d:9b:66:09:dc:b8:45:d0:8b:
         dd:71:85:23:d8:d6:04:00:10:62:1f:53:34:05:14:ed:fd:6a:
         04:bb:b0:ad:70:80:6a:d8:78:f6:3f:11:28:15:c4:b0:5a:40:
         06:5b:f3:d8:e1:5e:dc:66:35:7e:9f:8e:15:4a:ec:6c:bd:f1:
         c2:01:06:79:b4:20:3d:fa:3d:02:c4:fe:40:64:c8:59:e7:32:
         ff:1b:4e:d6:aa:a1:9b:a7:28:38:d9:44:91:b8:e3:6c:fe:24:
         3c:07:61:5e:c2:89:de:88:e9:dd:58:ae:8a:4e:35:ac:36:a1:
         af:0b:e1:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEptu0Tz6e+3S6BQazAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
MjFiYTdiYzctNGMxNi00YjBlLWJjZDctMjVmNmQyZmIzYzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUM1juB/rMcvIhCKo8ikDflSEGIfVi/xhXZX
EJNRPYT9KYvnKcs8t/yqb2IGq6/jMUcGyYpiUmztKfp+qcBFyPspvQkw+F7DoJTC
156F6sDXJ6E/HoylX0iRL/1NvVNBKm57JjC+oow8QRMNBWUlkENe2muUTbvpYGez
waexCxkY8akjnalGRwe/gicHs7RlWbB2Q61+gikZmekTLe8HiMguFhCfVUXStqTf
lq46DcMt03ji8MOtLuEQ3GL/ksD5akOLYJdlHrxqAgTyjUErb9/hrJfqnVtk7RAJ
ivOBLa1mphf4JCjobOH26pgQ/fE3EY29GAAr7g/lM2SUFMgwzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFH9nyReoaqE+z8+5Cij7A0vztW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGUzYzNmNWItMTQzOS0z
YjIxLWIwNWMtNTUzMzAzMTVhOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCFz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+iS8B/hVW/NSoIJ97un1frJ9xf8WoOxb4NnWnumoptdie2/sL9
0fvkS/TokabDLUuP4bqE3HIQsvJ6aVe9Pzcds6bNmKPrXCCvJPIJhL6RmXhmWDSJ
VyUloAeUXyK24TRnQzhbB0odk5ZIcw0oOzdDHgr3W3EwxcIRZLKYANixsZhpd2Ml
Dj2bZgncuEXQi91xhSPY1gQAEGIfUzQFFO39agS7sK1wgGrYePY/ESgVxLBaQAZb
89jhXtxmNX6fjhVK7Gy98cIBBnm0ID36PQLE/kBkyFnnMv8bTtaqoZunKDjZRJG4
42z+JDwHYV7Cid6I6d1YropONaw2oa8L4UQ=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:44:33 2025 by rpki-client