Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aec7523d-082b-3098-94ee-b19d43d10383.roa
File:                     aec7523d-082b-3098-94ee-b19d43d10383.roa (raw, json)
Hash identifier:          5wSvHzGVurS3K/pKSRTh+3CZG6EpYvPvkG3Z42LtbN8=
Subject key identifier:   FE:C8:CD:24:AD:04:F4:09:5C:1A:4C:0B:26:89:99:11:92:B5:34:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A6CD7FAC74B323218A000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aec7523d-082b-3098-94ee-b19d43d10383.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     12222
IP address blocks:        2001:4878:a261::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6c:d7:fa:c7:4b:32:32:18:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=43ea23e7-abd1-4cef-badb-45d8a199666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:01:b8:8c:85:ac:c0:a5:2a:58:0b:3c:10:
                    42:90:f2:c5:55:e5:7a:0f:9b:c0:85:f5:9f:58:2b:
                    61:2c:09:47:7d:da:da:ef:66:eb:f6:2e:ba:6b:24:
                    19:c7:f0:20:db:d6:15:b0:65:b7:15:3a:cd:f5:97:
                    c6:16:3a:fb:a2:22:4e:00:f5:02:a7:e8:db:f3:b6:
                    d4:cf:d8:6c:e5:64:10:10:eb:83:87:10:c1:ca:7a:
                    aa:bb:aa:8a:fc:2e:59:d0:52:64:58:76:32:d5:dd:
                    c0:b8:32:1d:c8:d9:a3:c2:13:ed:19:5d:cf:6a:ab:
                    c1:5c:e8:df:76:e4:b0:b1:c5:9c:1f:d1:9b:08:6a:
                    64:0a:3e:68:8c:1d:3a:2c:42:0b:ab:a0:14:2a:3a:
                    33:ad:38:d0:c7:63:79:0a:23:85:1d:46:1f:09:b9:
                    ba:46:ed:be:18:91:64:e5:db:e5:e4:f3:df:b0:93:
                    a1:39:c1:a8:84:a2:69:5a:06:36:2d:9e:98:d1:83:
                    d2:ed:e7:d6:3b:7f:b8:8a:f0:b7:27:30:b5:31:c8:
                    61:3f:ef:86:6a:ae:39:ab:59:84:b5:d3:6f:2e:e2:
                    1e:1a:eb:27:7f:39:ca:bb:86:60:2c:31:b6:52:04:
                    03:41:81:ee:83:b4:28:87:63:81:16:37:f8:5b:d9:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:CD:24:AD:04:F4:09:5C:1A:4C:0B:26:89:99:11:92:B5:34:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aec7523d-082b-3098-94ee-b19d43d10383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a261::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:81:80:cd:72:61:21:d7:ff:f8:c4:57:71:fa:5a:1a:86:
         f3:03:39:0a:e2:b7:16:72:d8:61:3d:f0:b4:7b:45:f4:83:f8:
         e4:94:ac:76:08:54:10:d0:50:0a:03:3b:74:03:88:10:7d:2f:
         bb:08:d8:5c:13:c7:e5:34:1e:06:32:15:64:1d:c7:e8:67:30:
         76:07:50:c6:f7:c6:20:4f:7a:c1:68:18:0e:2f:f4:40:98:1b:
         13:02:71:83:7b:41:bf:e6:33:46:02:29:6f:60:38:0f:00:8e:
         50:9a:ee:d1:cc:04:6c:5f:07:bb:97:19:53:6b:82:22:f5:8e:
         d9:29:57:59:c9:6a:8e:93:a9:c3:b5:22:1a:95:d3:2e:05:03:
         54:7a:0a:50:4a:72:f2:0a:36:c6:4a:59:57:4e:73:bf:a1:10:
         a3:87:6e:ca:55:16:0e:25:7f:b0:4d:b6:59:01:24:44:19:28:
         4f:04:42:0e:d5:0a:72:86:d3:41:7f:bb:dd:5a:f0:89:34:6f:
         f5:5e:52:b6:d5:d6:87:87:a0:4d:53:75:e8:da:7c:0b:65:28:
         cc:4f:f6:32:d8:45:91:30:f2:9d:24:8e:cb:0a:2b:5d:b2:67:
         9c:46:86:bb:2b:5c:4f:d9:3a:45:90:64:43:9a:cf:60:d6:eb:
         1e:d0:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:20 2025 by rpki-client