Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1a5b73e-fd44-34a3-8407-459a1b5bf6b9.roa
File:                     d1a5b73e-fd44-34a3-8407-459a1b5bf6b9.roa (raw, json)
Hash identifier:          YgOApoU6WaeoY7Jp1Fdy4KkhkDPg5+tnmEo0gGNHf7U=
Subject key identifier:   2F:BA:4C:FA:F1:AC:5A:AA:87:9A:D7:0D:FD:8D:7C:82:5B:13:96:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FAF51B403CB8A25FA5F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1a5b73e-fd44-34a3-8407-459a1b5bf6b9.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:2321::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:af:51:b4:03:cb:8a:25:fa:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=763733d7-119c-4b87-ad8f-15ed0314d3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d2:b6:d0:06:70:fc:1c:3d:f1:9b:78:ea:d0:
                    07:d0:82:34:bf:58:cc:f8:64:e8:86:eb:69:8f:1f:
                    ec:a8:62:ab:c0:61:da:69:8f:cf:75:56:42:00:17:
                    ba:2b:b0:4c:f4:12:b1:fd:f1:7d:02:08:80:eb:a5:
                    43:20:c2:45:94:8b:11:a0:15:7c:fc:64:34:2f:a4:
                    22:8f:7a:49:f5:60:04:68:3f:76:ab:ad:44:b0:86:
                    20:d5:d1:c2:9b:14:01:2a:5f:b1:14:87:21:7c:79:
                    96:f3:56:c9:5d:f1:62:67:7f:2e:ac:f4:8d:34:db:
                    a5:2a:e2:2b:ff:9c:e9:19:ad:4b:1b:39:0d:a8:6c:
                    02:bc:b1:c8:c7:55:b2:29:68:4c:8c:87:2d:99:46:
                    4e:1b:8c:52:70:72:dc:62:91:33:77:f2:04:14:f1:
                    b8:8f:42:6f:bd:9c:42:6b:7c:ca:be:e1:ca:3c:96:
                    fb:c7:66:ea:6a:17:9b:d9:14:08:cc:83:91:7b:86:
                    c6:89:a9:4f:59:3a:c1:60:04:03:c0:03:18:39:92:
                    fb:1f:d3:76:7f:3e:27:ed:0d:1a:0a:95:05:37:a1:
                    97:d4:d0:a4:44:87:6f:61:3e:98:79:5e:90:89:0e:
                    c7:05:c1:08:66:4f:68:27:d1:4e:ce:2a:f5:6d:ef:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BA:4C:FA:F1:AC:5A:AA:87:9A:D7:0D:FD:8D:7C:82:5B:13:96:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1a5b73e-fd44-34a3-8407-459a1b5bf6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2321::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:95:a9:9f:df:3c:6e:c6:05:c2:3f:2a:25:be:f5:92:4c:
         73:64:e6:c7:2e:73:27:00:64:7b:ae:25:0d:58:5f:9e:53:0f:
         56:da:d0:7a:1d:50:90:b6:48:3f:84:8a:90:53:6b:46:38:ce:
         29:b0:24:09:d9:5f:76:ff:19:c4:12:f7:e0:3f:f6:4d:13:47:
         cf:d3:a8:60:4d:28:2a:f7:79:b1:52:38:0c:12:2b:00:02:48:
         1e:9d:7d:5f:93:24:41:b9:f8:10:7b:56:6c:c5:ea:8b:6a:2f:
         f4:a2:b3:72:99:76:a3:2e:ae:9c:83:d9:68:09:c7:01:ef:22:
         32:fe:ac:7d:e2:4f:f1:08:8e:21:d6:ce:d6:16:e5:dd:c9:11:
         d4:9a:a1:0b:92:29:ff:e4:8f:eb:64:92:0e:76:43:c6:7b:b5:
         98:33:95:3b:86:84:fd:dc:af:c5:4b:14:74:1b:b8:75:df:53:
         3c:91:d1:a9:0c:51:ee:c8:3b:ca:02:40:66:b5:ce:49:b2:a8:
         ac:00:d0:92:55:fe:c1:e5:98:56:74:c5:7a:3a:1c:70:26:8e:
         c3:fb:7d:aa:98:21:57:0d:86:8d:06:5d:9a:6b:8c:f4:92:33:
         59:fc:8a:e8:bf:f0:a8:0b:ba:4e:13:e1:06:9d:37:8c:c4:34:
         fa:ed:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:11 2025 by rpki-client