Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
File:                     78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa (raw, json)
Hash identifier:          Yts9qStO6i+zXhCygQ25KMDYFjqEJtgsjTB+geTj4FU=
Subject key identifier:   71:41:44:52:32:41:FC:BA:18:75:93:A9:E3:4C:B8:F2:96:28:C0:25
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FB070F99EA1FFF84F8D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b0:70:f9:9e:a1:ff:f8:4f:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=dfb2bbfd-eb29-41e1-b787-510b608afa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:f2:91:75:9b:38:22:50:f9:45:f4:63:0b:
                    de:79:76:09:ae:c4:4b:d5:40:3c:1a:eb:18:3d:d0:
                    91:3c:ee:33:cc:5c:fd:d5:fb:23:1d:f4:8d:44:14:
                    24:fa:40:01:a4:0b:47:16:64:dd:ce:7d:ba:d3:02:
                    1e:58:56:01:6d:0e:d2:a1:03:cd:20:61:09:9f:81:
                    db:0c:59:c4:db:5e:35:00:90:06:05:c4:19:a5:b8:
                    e4:44:5e:5c:87:7e:bb:d5:cc:74:cf:31:97:aa:63:
                    40:81:5a:fa:4a:4e:f6:0c:04:f8:38:67:09:81:54:
                    a7:10:28:e5:8f:26:0f:65:3f:b9:f6:db:7d:50:bf:
                    de:44:00:85:f7:70:c5:31:46:3f:05:66:bf:79:72:
                    ad:24:55:e2:ed:42:c9:69:11:27:22:8e:aa:04:9c:
                    1a:93:e3:9c:ab:24:63:a8:77:34:84:bb:33:fe:6e:
                    0a:80:8b:e3:92:fb:54:d4:52:a3:9c:fc:40:fa:cf:
                    80:e3:b9:13:31:0b:8d:04:83:29:d8:bb:9b:c8:fb:
                    e0:c1:34:17:0e:3f:21:99:46:4e:fe:ef:3c:b0:b1:
                    5f:6c:47:75:85:12:34:8b:d0:07:d5:52:9a:bc:63:
                    ca:47:8a:cb:24:dd:4a:26:ff:93:be:4e:5b:ff:9f:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:41:44:52:32:41:FC:BA:18:75:93:A9:E3:4C:B8:F2:96:28:C0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:41:4a:30:0f:9a:01:5c:75:4a:65:6d:0f:b3:f0:b9:49:e2:
         a5:2c:7c:85:a9:2d:5f:30:f5:52:5c:54:d3:4f:bf:13:18:b8:
         e8:61:8a:63:b5:d7:24:9d:7f:9f:9d:17:c6:56:8e:f8:1b:81:
         ba:aa:69:51:f0:8b:cb:d2:0c:62:69:7b:a3:6d:5e:ac:8e:db:
         20:09:2d:66:ab:6a:0a:06:96:41:db:3d:e0:bc:0c:fc:e0:8e:
         8f:3a:8f:ac:21:ea:bc:05:33:52:b1:35:b0:01:9e:2c:da:fc:
         19:5b:4b:87:f4:55:94:ab:72:31:28:ea:38:75:69:7d:a8:de:
         fe:d1:09:f2:f8:3b:e8:23:f4:ec:35:25:e1:17:9e:b7:e3:e2:
         ab:4e:4f:f3:70:f7:6b:da:4a:95:7f:77:4b:5a:b7:63:cb:c8:
         98:31:14:40:b4:7a:af:86:0c:6a:1a:2e:84:6b:82:b6:4b:6e:
         f2:b5:89:78:01:aa:1b:79:80:bd:30:56:5f:45:ea:ec:8a:c1:
         49:af:fc:ec:c0:1b:46:70:af:f6:c0:0b:39:0d:d7:49:4a:be:
         20:7f:da:1c:7b:9b:d4:9e:2d:b0:8b:4e:85:d4:4d:50:31:0e:
         81:ea:aa:19:2b:b9:34:bc:3a:71:7d:92:98:b4:40:51:82:5a:
         39:bf:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:29 2025 by rpki-client