Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9feba6cb-ae5d-3cd4-bc89-a9e2cc881310.roa
File:                     9feba6cb-ae5d-3cd4-bc89-a9e2cc881310.roa (raw, json)
Hash identifier:          wu/gIJ+kEO/X58+xWcf9cRrUunSGu0FevaXyLDMC8Y8=
Subject key identifier:   C3:8A:16:45:F5:82:C4:7D:5A:01:35:B3:77:62:72:2E:AA:AC:3A:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FD56B059C31FE90921780640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9feba6cb-ae5d-3cd4-bc89-a9e2cc881310.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     12222
IP address blocks:        2001:4878:2007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b0:59:c3:1f:e9:09:21:78:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=6d8005fa-07ae-45ca-b6e4-2f5b420de9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:78:27:b8:51:fd:4f:9c:d3:b6:d5:05:84:
                    74:22:a9:60:06:f1:38:cc:fc:8b:e0:de:a5:45:a8:
                    bd:86:d0:42:bc:50:83:0a:68:10:cb:b0:a2:a2:c7:
                    81:65:fb:96:37:3c:76:dd:0d:8e:f1:6e:ae:84:fb:
                    9f:e8:50:92:65:77:97:e4:94:6f:56:72:e6:4d:96:
                    93:cd:a7:9d:4a:01:a9:53:a9:0d:8b:3a:d3:00:b4:
                    d7:3b:06:dd:f9:68:fc:61:b5:fe:d3:04:12:de:ab:
                    6a:be:b1:3c:3a:13:df:1e:41:dc:8a:71:b0:af:94:
                    08:a8:3b:fc:af:34:c3:0b:ba:c3:a4:d7:85:f0:32:
                    52:f3:ce:88:dd:86:34:55:fe:f8:7d:cf:b0:37:26:
                    3f:e3:fe:ed:5c:f3:f2:58:c4:bc:10:df:12:e7:4b:
                    f4:a0:de:fb:ce:af:75:28:0e:c3:8f:9a:4a:00:1e:
                    d2:1b:40:b9:39:8a:d6:8e:d6:fa:0e:af:91:49:52:
                    e5:da:5f:1c:fa:88:81:66:78:10:42:b6:64:61:a4:
                    65:dc:52:37:fc:a5:f6:31:3b:84:5c:15:91:54:a3:
                    be:f6:83:ad:13:ff:e3:29:62:f7:fe:1a:43:84:e1:
                    50:a1:84:41:f7:e0:82:f8:8e:75:65:2c:fa:6d:3d:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:16:45:F5:82:C4:7D:5A:01:35:B3:77:62:72:2E:AA:AC:3A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9feba6cb-ae5d-3cd4-bc89-a9e2cc881310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:27:48:7c:6c:cf:fd:75:17:68:bf:5e:ee:31:75:bf:9e:02:
         76:6a:6e:a2:34:80:a8:34:56:d1:f2:1a:d7:c7:6f:10:2d:2d:
         c2:f4:11:b5:17:29:bd:56:f3:69:b2:c6:32:84:2b:0d:65:94:
         03:94:8e:bd:ed:f6:8c:c7:a5:47:20:fd:f5:8a:d9:bf:9a:94:
         16:9f:52:1c:df:f8:2a:2c:2c:8e:c9:5f:03:98:89:ed:6c:c2:
         84:d4:d3:45:f2:61:a5:48:38:44:a6:a7:cb:23:71:c8:d2:fe:
         d7:b1:ae:9c:7d:a7:aa:df:55:2d:ce:21:d5:62:05:8b:95:13:
         46:26:65:c0:74:3e:7a:43:c0:3f:b6:92:4f:bc:de:11:b0:22:
         9a:79:31:43:0f:c0:3d:81:3e:55:d7:5b:48:3a:33:9a:49:47:
         01:2e:b9:17:00:6e:52:11:9b:15:7b:c3:2b:af:ca:9d:92:71:
         c3:80:f3:75:26:61:47:bb:b7:41:7d:fa:0b:f7:73:d4:16:58:
         aa:f2:17:56:59:a7:49:a4:8c:8e:02:30:b1:b6:f7:2c:ce:3a:
         27:d9:a6:5e:fc:b2:34:6e:e0:06:6e:56:a0:3f:a6:ed:20:4f:
         d9:7b:53:4b:d7:c9:34:34:26:e1:c2:d9:4f:59:74:c5:76:ec:
         c0:d4:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:10 2025 by rpki-client