Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa
File:                     4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa (raw, json)
Hash identifier:          iUDshA19vqe9G1lZfsatQVj96KAtBek7fRPISOqQ7EA=
Subject key identifier:   DF:10:C9:8F:52:41:8C:A9:B6:9B:A1:BD:60:9E:3D:37:90:76:43:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E2252B0A2B46207AF51F1C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     12222
IP address blocks:        2001:4878:b048::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2b:0a:2b:46:20:7a:f5:1f:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c693e5f4-2cd8-471a-84d7-4e171318cbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:7c:96:21:c8:fb:a1:55:49:4f:70:d6:81:
                    68:fe:b1:a7:25:1d:98:d0:b2:0f:5d:f7:29:7b:1a:
                    11:be:4d:3e:d8:85:b3:ee:05:20:bf:2a:cf:52:da:
                    1a:69:ab:cd:a9:a3:61:4d:55:75:95:a6:3d:36:0a:
                    4c:27:0c:6a:27:80:08:3a:e4:b6:a7:88:b7:a2:45:
                    65:79:6e:10:ed:16:4e:22:06:94:13:5a:91:14:e2:
                    07:46:f3:97:76:62:b8:b4:47:22:c9:04:e2:90:1f:
                    8d:3c:23:f0:e3:64:b3:80:72:5d:e5:3c:a6:9a:8b:
                    9a:42:33:b5:90:8f:27:45:82:b8:7d:e9:7f:ac:3b:
                    63:bd:54:c2:12:a2:88:74:a9:36:18:d6:72:e8:06:
                    f8:0c:ef:cc:b7:7a:97:de:22:1f:37:b2:3a:a5:e9:
                    2d:10:b1:0a:7a:f3:22:d8:cd:1d:a9:e4:83:5e:fa:
                    ec:7c:2c:d7:14:4b:e4:70:8c:f3:f0:e9:5b:77:d8:
                    ca:be:aa:01:c1:76:a7:f2:af:cc:65:1d:5b:9a:78:
                    37:3d:15:6f:33:e9:27:c3:51:65:e9:27:66:4b:18:
                    f1:7c:b9:5e:0d:13:3d:6f:10:b8:8a:58:04:d9:31:
                    f2:63:a6:a1:74:60:f8:25:5b:7b:93:a1:8f:4d:e6:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:10:C9:8F:52:41:8C:A9:B6:9B:A1:BD:60:9E:3D:37:90:76:43:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:cc:c9:57:b1:52:03:a8:fe:f9:a8:97:9e:d9:f2:0b:53:
         17:65:ee:2f:2e:a9:7f:89:08:61:a9:61:16:ab:f5:bf:c5:7b:
         40:4a:43:e0:bc:47:f2:7b:67:77:5a:fe:90:06:a1:d1:a0:05:
         51:54:6e:5c:2f:d2:65:e1:fc:ca:ef:51:22:7e:66:71:b3:8f:
         b0:b0:28:45:79:26:ce:ef:4c:28:fa:01:a9:a1:43:57:5b:40:
         2e:6a:23:13:34:ac:72:c8:51:0a:fa:bf:c3:46:57:52:d0:6a:
         59:dc:85:05:82:97:d7:f8:bc:26:78:75:f7:04:b2:6d:cc:9f:
         f8:c6:d0:b1:f6:cd:5d:7c:92:53:3f:94:49:72:b2:1b:12:61:
         d8:58:37:9c:99:36:2e:f6:b6:6c:c1:90:41:e8:d9:40:9c:9a:
         b1:48:25:16:d9:22:36:26:a7:0a:d9:b6:90:ea:be:ed:da:d6:
         78:26:0f:7b:c4:4c:4b:25:8f:2a:67:5c:87:11:4e:ea:a5:85:
         9d:31:8f:64:2e:0d:4f:8e:7a:82:d0:21:2e:82:b4:22:7f:8b:
         2e:e6:0f:cb:85:a4:dc:28:b8:1b:92:07:65:01:72:ba:5a:38:
         dc:d5:e6:c1:c3:a6:cc:fb:f2:00:eb:51:65:a9:0e:7c:23:4e:
         1f:c2:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:14 2025 by rpki-client