Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4fb190-b62a-3712-9bbb-80dce60fdcdc.roa
File:                     4f4fb190-b62a-3712-9bbb-80dce60fdcdc.roa (raw, json)
Hash identifier:          sq3/yl8XFvwsr+AhXQYv8HMotEMVO2+0qN/0DyPKB5w=
Subject key identifier:   4D:39:AF:BC:52:B5:A0:BD:10:A8:F2:81:E6:AF:23:DC:6C:72:09:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E2251D0D09492E514535D880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4fb190-b62a-3712-9bbb-80dce60fdcdc.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     12222
IP address blocks:        2001:4878:c007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1d:0d:09:49:2e:51:45:35:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=7e34611e-7578-4bb2-bcc6-4c4ebe7a5da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:ce:b8:fc:31:4f:2d:30:96:29:8d:18:da:
                    3c:37:ca:64:83:9f:50:21:22:e9:a3:11:ad:f1:6b:
                    49:e9:ed:95:f3:23:39:60:e5:b5:d9:1c:d9:0b:35:
                    55:ef:be:7c:1e:81:18:c4:20:88:2c:37:e7:df:8d:
                    75:af:94:64:bf:3d:8a:e9:f0:42:59:a7:fb:16:aa:
                    46:f1:eb:af:bc:25:a5:58:c0:3c:c8:9f:85:dd:58:
                    b1:b9:81:a9:6c:bd:3b:33:02:e4:04:26:e4:12:2d:
                    52:04:5c:86:ee:1c:f5:fd:0e:ca:3b:5c:5d:b2:59:
                    cf:06:65:3b:be:c9:58:9e:03:ff:53:f7:3b:c4:67:
                    15:7d:be:c7:a1:a1:5a:b5:f9:4d:6b:06:da:82:29:
                    86:91:6e:d0:fe:ac:49:9c:b8:49:0a:d6:fc:a3:00:
                    0f:25:16:1e:66:c3:ef:d3:c3:2d:47:ae:3b:1e:13:
                    ee:19:ab:51:4e:eb:71:10:30:90:b4:25:25:20:05:
                    b1:03:24:dc:a2:3e:5b:73:6b:d2:37:d3:bd:57:93:
                    6e:70:40:8f:e2:84:e1:d1:ff:5b:93:66:8f:b8:60:
                    ec:f8:fe:5e:8a:fe:af:87:a6:c0:c9:71:a8:15:70:
                    2e:20:46:bb:71:d2:09:05:56:f2:b1:23:fa:7d:0a:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:39:AF:BC:52:B5:A0:BD:10:A8:F2:81:E6:AF:23:DC:6C:72:09:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4fb190-b62a-3712-9bbb-80dce60fdcdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:64:76:d8:a3:1a:f2:1a:91:19:f4:2f:0e:8f:42:f0:18:1d:
         91:24:df:c4:f5:11:a4:c4:f2:12:84:0f:e5:e3:60:40:4b:e7:
         3a:1f:13:4b:18:2c:18:94:48:cb:98:9f:ad:3e:75:99:db:24:
         df:6b:b3:72:9e:d4:41:f5:3c:0f:0e:22:b6:58:9a:9d:e7:02:
         a4:68:39:b3:36:b2:73:0b:b1:24:c5:12:00:81:05:a1:a0:ad:
         f3:2e:7d:39:13:4d:7f:5f:ee:49:fa:89:ac:81:af:8b:8e:a7:
         03:bb:69:a4:43:49:a7:2d:6b:62:34:fc:14:91:94:ec:3e:fe:
         11:23:db:ec:29:93:f5:cd:67:26:bb:28:ad:c2:4c:8b:b2:03:
         44:59:3e:87:26:f4:f4:44:97:48:bc:e1:37:a9:57:44:83:f8:
         59:16:56:e4:cb:4f:12:b3:cd:6c:ad:dc:69:c7:2b:79:4e:27:
         08:2b:7a:25:63:c7:12:3f:9f:3a:82:e8:d8:82:12:d9:45:d1:
         a9:36:35:5b:40:55:a6:f1:40:f7:59:82:2d:3f:ad:7d:d0:05:
         6c:98:16:b9:54:6c:28:a2:b4:7f:9f:8d:c2:68:d2:fc:89:55:
         32:af:17:af:f4:5e:af:dd:4f:08:b6:0d:10:24:db:31:65:82:
         0e:03:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:42 2025 by rpki-client