Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa
File:                     d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa (raw, json)
Hash identifier:          2ViRSoHc4C5zDRhVtUPNYTUg+cvV2bdPuy9r0maB5nQ=
Subject key identifier:   CC:2F:94:19:CE:1F:23:39:90:88:E6:BC:70:90:C6:F6:F7:88:C1:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FAE70B38993E1BEAC1A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:2102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ae:70:b3:89:93:e1:be:ac:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=1953085d-1134-4325-92ed-0909e568e598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:fe:ac:b4:b9:52:66:6b:83:cc:ef:50:09:
                    90:ec:ed:d2:8c:50:be:14:71:05:50:bf:2c:d5:ad:
                    90:ab:80:a4:77:1b:6a:df:d4:98:e3:24:22:32:d4:
                    e3:bd:4e:3f:b8:30:bb:80:61:3d:28:de:eb:67:69:
                    8b:d5:10:dd:b1:a3:c0:fe:d3:11:13:28:31:d9:09:
                    4a:f3:21:77:fe:33:85:bb:08:fc:7f:f7:ae:03:aa:
                    8b:96:0f:b5:2b:bf:2b:c9:7a:de:38:d4:c4:a6:be:
                    85:64:ae:9e:5c:49:c1:d9:8b:2d:db:fe:ea:41:39:
                    74:f1:1b:54:c9:0c:36:a3:2b:3b:24:85:e4:11:36:
                    63:b0:ef:8a:1d:30:46:ab:2e:14:c6:36:07:1c:9b:
                    9b:c7:e4:2e:84:36:b3:29:1d:93:49:a6:e3:a9:6e:
                    05:3b:27:7a:77:ff:f0:58:6f:6f:ad:34:6d:11:fd:
                    a2:b4:94:00:1f:dd:52:7d:d9:07:5a:2d:b2:e5:c5:
                    e4:a9:2a:49:b2:48:f9:73:e0:59:57:a8:4e:39:55:
                    7d:74:2a:09:84:dd:97:83:43:85:6e:43:70:9a:51:
                    77:c4:d2:90:7c:1b:52:7b:d7:7b:43:14:74:c5:60:
                    81:4d:30:45:4b:c5:53:26:7d:87:36:08:5e:f6:c2:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2F:94:19:CE:1F:23:39:90:88:E6:BC:70:90:C6:F6:F7:88:C1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0fd64c7-98a1-3c98-a664-6f232189d1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:ea:27:d8:19:00:2b:9f:b0:23:3e:0f:b6:b3:5d:94:ad:
         df:6c:34:2d:e0:49:0b:ba:65:b4:3a:06:8e:49:af:9d:c4:54:
         e3:1e:8a:07:ac:b6:92:22:c1:ad:44:6a:3f:0c:d9:41:e2:be:
         08:9a:77:b0:7c:60:7e:b3:94:93:76:03:e3:16:ae:b4:87:de:
         b0:30:bc:02:e1:e2:02:6f:b4:5e:a9:12:75:f4:8c:49:05:f3:
         b8:9d:8c:36:a5:08:7f:ae:7b:c6:cc:ae:76:db:87:5c:55:f1:
         41:67:51:64:14:3f:93:bf:e6:9a:c6:f4:3c:14:70:bb:6e:11:
         e1:70:96:c8:67:58:b5:85:b5:52:bf:a7:8c:d7:ec:42:7c:e3:
         16:6e:33:ef:57:fe:ca:6a:eb:82:ea:96:ff:03:02:75:71:bf:
         d7:eb:83:42:be:c6:78:a5:21:fa:3c:53:3c:77:1a:bb:9e:f7:
         83:7e:f6:70:04:9b:bc:1c:c2:70:e5:b6:27:b6:c1:57:ab:df:
         87:87:32:cc:85:b3:78:48:55:3b:d3:a7:27:be:87:66:09:20:
         a1:da:50:cd:e6:30:b8:bc:28:5d:1c:f5:e4:68:3c:c2:f9:51:
         19:f1:6b:2d:48:0e:ed:bb:0d:66:8d:79:70:71:21:b6:67:bf:
         9c:e6:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:07 2025 by rpki-client