Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a628d0f-7736-3e76-a1cc-216bee0820c2.roa
File:                     9a628d0f-7736-3e76-a1cc-216bee0820c2.roa (raw, json)
Hash identifier:          F1LmkApSOqI6L4EDH3Qe2o6Xp44IaIGkq4BhCJQYoPA=
Subject key identifier:   92:E0:F5:80:6D:50:9B:92:06:02:08:79:C9:42:BB:C4:8D:94:34:B5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FB50C157EEBD51AC68E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a628d0f-7736-3e76-a1cc-216bee0820c2.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:215::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b5:0c:15:7e:eb:d5:1a:c6:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=ac7cee69-9e2f-4818-8c1c-cb7572ac38d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:54:83:7a:b6:3d:1e:98:29:2c:9d:57:cb:
                    89:82:06:cd:c0:10:e6:e4:2e:dd:2b:31:f4:57:a0:
                    9e:27:f3:61:a3:79:16:b8:0e:e1:e7:ff:4a:6a:fd:
                    aa:27:d7:90:83:8a:f7:df:58:33:ce:4e:d5:b2:25:
                    b1:18:a7:e6:f4:b1:15:dd:51:e3:b8:78:fe:bb:d8:
                    d5:3d:6d:91:c0:05:0f:eb:95:0f:4e:e5:98:01:4d:
                    57:41:32:7f:c9:36:f0:1f:38:1b:c5:67:11:35:6e:
                    94:76:7d:49:92:6d:a0:2b:24:0e:1e:53:b9:1b:3e:
                    67:55:ba:d8:4e:6d:50:85:d6:7a:c0:b9:f0:81:18:
                    92:41:9f:03:9c:da:be:71:5e:c0:0d:be:94:96:6e:
                    be:64:78:5f:ac:68:a3:a2:ff:5c:8b:4f:e1:d3:8a:
                    9b:21:34:96:81:b3:5f:ec:5c:ea:91:48:bb:ad:b1:
                    62:f6:f5:e1:44:51:f2:3d:b3:16:16:2e:34:63:0d:
                    a3:3a:5f:2c:a4:93:80:5b:88:8d:63:39:72:79:9b:
                    dc:93:04:10:c3:03:c8:82:dd:dc:d2:85:36:44:2e:
                    c1:c4:06:9c:2e:09:1a:77:ef:c5:a1:7a:cf:c7:81:
                    7e:f5:65:95:9b:09:4b:aa:aa:95:ed:bf:f2:e3:80:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:F5:80:6D:50:9B:92:06:02:08:79:C9:42:BB:C4:8D:94:34:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a628d0f-7736-3e76-a1cc-216bee0820c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:215::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:ab:5d:54:4a:7b:69:19:3e:a9:be:d7:aa:af:4d:28:84:
         dd:c4:e8:f5:b9:d3:5a:cc:ad:83:d4:9d:9c:73:60:0f:a2:68:
         b8:24:ac:25:5a:4a:84:30:fb:de:cc:a4:d9:43:c9:b2:f5:04:
         76:64:49:95:85:40:1d:c2:dc:0c:77:64:f4:1a:be:25:44:ab:
         60:c3:d0:34:2f:82:19:48:2f:f5:33:a0:a0:63:63:14:ce:99:
         c6:e1:39:94:b7:cd:f2:3b:a8:58:de:97:ca:c5:fc:de:04:96:
         d3:93:fe:66:a7:3b:86:fa:25:4c:9b:7d:ac:cd:e9:da:ca:52:
         ee:37:8e:2b:61:80:8b:05:ab:13:09:8e:f7:2c:63:e3:53:64:
         72:2a:f5:d2:12:29:7c:55:49:3f:cd:33:a3:dd:d4:9c:1e:59:
         dc:24:33:99:ba:3d:c1:16:8f:b0:b8:7f:62:ae:f3:68:45:de:
         a7:a3:ce:a4:4a:bf:4c:2d:06:82:6f:77:13:09:bb:6e:6f:7c:
         bf:25:0b:2f:52:2e:d2:61:17:fa:3b:4c:2b:19:c2:7c:0b:a8:
         39:28:54:c8:59:40:34:bb:f9:d9:5a:a1:bc:11:8c:bc:2c:13:
         19:aa:d6:08:51:aa:55:2b:a8:91:25:9a:34:f8:2c:4f:4e:d6:
         1d:8f:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:42 2025 by rpki-client