Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa
File:                     ddf1cf92-dff2-35a5-9ded-84719579877e.roa (raw, json)
Hash identifier:          cF2muTppSEEjj0dSW20ozhtBISWv55rdsjXkZEeuBwI=
Subject key identifier:   A4:5C:8E:89:8D:DF:F9:DB:58:41:AE:EC:C0:5E:57:82:57:49:02:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FADA9C2E1BC0011DF1500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ad:a9:c2:e1:bc:00:11:df:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=38be50c8-fb0d-4047-84db-225cea99eaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:87:c8:d1:69:8b:fa:3d:9a:4c:a9:81:43:
                    90:0b:30:44:89:76:25:72:64:fe:47:4c:7e:22:6c:
                    1f:b1:a9:92:86:89:3b:b5:c0:92:d8:23:7c:d1:a0:
                    be:19:fc:d7:86:77:d7:8d:40:3a:e1:08:fd:21:58:
                    04:79:ff:67:f8:62:60:88:e8:d5:43:d6:a4:cb:c5:
                    12:be:f1:1a:70:34:59:4f:c3:99:f5:37:53:c2:98:
                    3a:57:b7:ca:ec:fe:97:9d:ee:6b:58:90:ac:f9:b7:
                    8e:98:39:97:d6:66:67:81:7c:15:74:6e:c2:7f:a8:
                    8c:3e:74:e0:eb:f7:eb:d7:08:72:3f:5b:bd:e1:66:
                    1a:80:0a:9e:dc:8d:98:4f:ee:42:ff:74:e2:61:89:
                    45:4a:6e:a0:5f:a7:6a:39:5a:b8:ff:b7:75:a8:8e:
                    ea:d3:87:69:fa:ad:c9:e7:b6:2d:b5:7a:5e:f6:89:
                    d1:a6:1b:3b:08:c6:14:23:fd:e0:0f:81:16:02:71:
                    3f:f8:53:4f:0b:a0:4b:89:ff:af:76:0f:c7:b0:5c:
                    ed:72:70:49:4d:4d:b6:f1:fd:0e:30:a1:ff:c2:51:
                    22:e1:c0:7a:ab:05:d8:5b:d0:07:c8:94:d1:e8:2a:
                    ea:5e:96:e9:3b:15:cd:d5:e8:e6:38:4e:0b:15:49:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:8E:89:8D:DF:F9:DB:58:41:AE:EC:C0:5E:57:82:57:49:02:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf1cf92-dff2-35a5-9ded-84719579877e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:d5:f1:29:74:53:94:5e:25:c8:0c:b6:be:aa:8e:61:e1:
         1b:f8:77:38:08:25:bb:13:17:b4:c2:82:97:9f:a3:54:b0:26:
         6b:11:21:2c:f3:55:83:41:43:7e:4d:e9:50:5f:a7:ed:4d:10:
         d4:14:16:0c:18:c6:32:3b:13:64:28:b4:78:75:d3:68:f8:ac:
         53:32:3f:7f:11:ff:1a:e3:92:8a:b9:53:0c:ed:9f:93:7e:45:
         8b:13:52:60:74:b6:d7:a2:96:d2:d7:8e:33:18:d5:d6:05:33:
         79:21:1a:8a:15:c2:68:71:05:cf:f2:3a:d5:dc:82:5a:7a:7c:
         f0:0b:38:6f:8b:36:cd:8d:d3:f6:c6:42:94:29:0e:7b:ea:6b:
         b3:04:b9:3a:07:2f:c4:ae:4a:33:20:68:63:4f:a9:5e:03:71:
         0b:1d:95:c4:2f:11:df:a4:59:bb:a8:95:e5:be:6e:ef:03:17:
         28:83:e8:09:19:75:9b:8a:2a:44:98:fc:9c:94:18:97:ce:74:
         e3:fb:93:72:55:5f:01:70:7f:4b:24:b7:3e:d9:51:ef:69:53:
         c0:5d:a2:05:30:42:37:ab:4f:93:8a:c0:91:6e:68:dd:51:71:
         13:12:ec:1e:1c:21:d5:c3:56:e0:a1:c5:59:da:94:f6:55:8a:
         42:67:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:44 2025 by rpki-client