Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa
File:                     4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa (raw, json)
Hash identifier:          XHBtsp4f8piigL8mlbuxwdF67u7ypckknmVa5vgsIck=
Subject key identifier:   F9:C1:3B:2D:BF:CA:FD:11:FF:60:06:B0:CC:B3:5F:99:5E:9B:0C:21
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC0AEC3328834150866080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     12222
IP address blocks:        2001:4878:b048::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0a:ec:33:28:83:41:50:86:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=0c439eb5-b3f5-485e-a01c-bf9262ee055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:ce:2b:0f:2f:9d:86:39:34:8b:d8:be:71:
                    96:ac:96:e9:58:0f:fb:59:06:52:e5:f6:d3:e7:d3:
                    27:06:48:c9:ea:67:fc:7d:eb:4f:00:7a:6b:0b:6a:
                    04:44:12:a7:d0:7e:88:24:31:e1:b0:ac:a6:3d:6c:
                    28:51:58:50:72:b9:ae:71:af:fe:78:98:ca:9a:ff:
                    93:cc:35:5d:64:99:5f:29:81:d1:5a:59:70:85:45:
                    24:17:7d:90:97:74:b9:4d:e1:ca:dd:15:26:26:28:
                    28:42:a6:6d:7c:4f:66:ff:7f:45:81:cd:db:c7:70:
                    6d:60:9c:af:d3:a3:29:bc:a4:cb:36:20:6a:73:b5:
                    34:37:12:58:7b:b6:f9:11:d7:36:56:1d:1c:cb:aa:
                    d3:64:55:33:81:e5:1f:2b:64:88:6f:8b:00:e3:2c:
                    e4:45:ce:ee:74:f4:81:91:8a:cd:58:c3:44:2b:04:
                    98:24:fd:b7:f4:17:64:b7:8f:f5:8a:6a:9a:8d:93:
                    15:de:36:bd:aa:f1:75:f4:06:22:69:5d:73:15:fb:
                    d0:1c:b0:33:85:b2:2d:48:ed:99:7c:df:13:c7:96:
                    d5:55:95:5a:e2:d1:2c:8a:19:a8:09:84:8b:ef:5b:
                    69:3e:2a:07:29:01:03:6d:0a:c1:08:74:ea:d8:39:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:3B:2D:BF:CA:FD:11:FF:60:06:B0:CC:B3:5F:99:5E:9B:0C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a7fc3c0-90a6-3c8d-aaf9-ebc34b26ef63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:26:96:85:5c:3a:20:d2:60:8e:81:c5:39:f1:26:25:3e:
         4e:fd:e7:38:76:ba:3e:52:5f:ad:5c:4d:0f:64:67:e9:11:3f:
         54:46:e9:4f:65:2d:84:e0:2b:30:a7:ed:3b:19:ab:ef:36:2c:
         49:f9:66:ae:bb:e7:e8:cc:be:85:1b:cd:32:c1:ff:7d:37:69:
         c9:dc:8f:5e:b0:68:b9:f2:1e:c3:50:eb:f4:57:8c:c7:f6:4b:
         5a:90:31:60:f9:4b:a0:36:63:11:0f:bd:fa:87:a8:82:dd:2a:
         83:22:3c:cd:b4:a7:41:4c:bc:75:9c:b6:e4:e1:0c:3d:e0:d4:
         6d:b2:a6:23:25:49:e3:00:7d:a6:15:29:c0:c5:69:a3:90:37:
         8d:10:b0:35:70:b3:d1:da:23:52:9b:5c:c3:5f:12:23:d0:37:
         d6:d2:4f:0c:ae:d3:f0:b8:6a:5e:3e:51:3b:de:f4:f1:a8:c4:
         6d:ab:63:e8:ba:04:51:2b:94:f7:68:a6:95:c9:be:bd:12:35:
         45:fe:ae:25:ff:13:d8:e8:2c:b9:0f:e8:8a:9e:64:98:98:6b:
         59:b9:ca:41:61:f3:97:5e:15:ee:fc:57:ae:3f:67:4a:28:62:
         a8:fb:4d:c2:59:e2:97:46:44:2c:ad:c4:13:27:77:42:95:77:
         bf:eb:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:01 2025 by rpki-client