Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa
File:                     7f99c6c9-de32-3f58-b267-db8dbf912d85.roa (raw, json)
Hash identifier:          ebiu1hppjIvQmPaSLEhgYbsk7/znIFFZYJzwIcSoqFM=
Subject key identifier:   29:0D:06:49:13:C8:59:D8:FC:9E:50:0C:7F:B3:E9:A4:86:71:D9:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FB8767375195577FFA0B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:4259::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b8:76:73:75:19:55:77:ff:a0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=473db78f-e9e8-477c-8054-863d0393e319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:19:4d:70:19:b0:b0:04:69:fc:55:dc:95:
                    d9:0f:04:e8:2b:b9:4e:07:5f:8e:2b:12:a0:18:e9:
                    c6:81:59:00:5e:12:19:72:44:91:f2:3f:69:d1:56:
                    ca:93:c4:2f:59:25:93:aa:02:e6:57:c7:aa:32:ac:
                    b7:62:5c:29:1d:6b:44:39:cd:16:c4:c5:8c:9c:74:
                    6e:c8:ff:6d:f3:ad:7c:af:71:de:d5:fd:21:ad:bb:
                    32:88:48:c7:c2:5b:93:f9:7c:b1:4c:f0:86:e4:89:
                    3e:4a:26:8a:fe:96:ac:bc:f7:d0:47:61:57:0b:e6:
                    58:49:2c:9b:1b:02:cb:73:f8:21:ce:42:89:4c:7f:
                    c6:e5:74:d7:65:43:59:78:de:1c:9c:04:37:85:5b:
                    81:b0:24:98:c8:05:10:cc:9b:b2:ef:1b:36:fe:40:
                    76:51:45:56:2e:b5:b7:8c:60:a2:28:e1:6f:2a:83:
                    ce:ff:83:c4:4b:f4:6e:94:41:22:ef:86:71:e1:8d:
                    f4:7a:8f:cd:74:13:12:e1:20:2f:6a:5d:9d:35:a7:
                    a4:a0:b1:1d:5b:6b:f1:b3:5f:9e:70:20:b8:ae:8c:
                    ff:82:2e:ef:0f:ce:0c:6a:1a:58:c9:56:c3:8d:5f:
                    78:69:2f:68:94:76:ab:4d:49:55:50:86:fe:c9:98:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:06:49:13:C8:59:D8:FC:9E:50:0C:7F:B3:E9:A4:86:71:D9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f99c6c9-de32-3f58-b267-db8dbf912d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:91:81:1b:ca:08:25:63:67:69:3f:c7:0e:df:c1:c3:4c:
         fe:25:09:dc:b3:50:5c:ec:a1:0c:e3:e6:29:3e:65:60:1b:6a:
         46:eb:ec:e3:1e:f8:89:1b:c9:ef:17:f2:3a:9f:d9:79:c8:1d:
         d0:d2:35:8f:4a:a5:a2:69:27:2f:fe:17:cb:96:ae:92:72:6a:
         06:1f:2b:6a:51:1a:33:11:da:cf:0f:1b:04:65:6b:2e:62:18:
         77:29:5e:19:3b:ba:96:59:20:f4:ca:fb:67:c4:08:c9:8e:88:
         b3:22:20:e0:c3:c4:1c:f6:22:78:b2:41:3d:4d:b0:22:88:98:
         d4:75:31:a9:2b:4f:4f:be:1e:1e:cd:bb:b4:b4:a6:2b:3f:32:
         f1:a2:38:cb:64:4e:3c:9c:11:f4:15:a3:3b:45:b1:4b:84:66:
         4c:16:7c:24:7f:5e:3a:99:07:d6:20:4f:db:46:4d:ca:d9:c2:
         92:75:f2:c8:2b:b7:89:07:5c:ef:72:2c:22:fa:c5:83:d2:3c:
         91:6c:d9:15:d7:f5:33:42:5f:f3:4a:0f:3e:ed:af:6c:2e:30:
         0f:d5:4d:6e:3d:06:19:4b:92:de:29:cb:0e:97:d5:7c:14:16:
         e4:30:54:5a:cd:5c:c8:4b:2a:a4:2c:57:79:25:5c:2a:3b:83:
         33:4e:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:17 2025 by rpki-client