Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa
File:                     eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa (raw, json)
Hash identifier:          KWteS5+PXDwzgWlClD1S3C/+9BpzcAI4BTx8qPNe7JM=
Subject key identifier:   6E:CD:1F:B9:F2:D6:3C:44:A3:7B:B3:4D:B8:C0:4A:64:8D:3A:E0:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DC8FB7124F52F1A1E57A6980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     12222
IP address blocks:        2001:4878:2225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b7:12:4f:52:f1:a1:e5:7a:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=47fcb27b-b214-4aeb-b79b-e5ee0f962f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:ed:e7:82:8c:41:5a:a2:b3:c8:1f:42:20:
                    65:7f:24:30:aa:b6:8b:b5:06:4b:ca:f3:be:7e:23:
                    c6:d9:85:13:cb:ae:60:a9:9e:b3:0e:96:fb:e8:21:
                    30:c1:ed:31:40:0a:7b:b5:eb:65:dc:69:fe:b9:46:
                    55:89:01:62:7b:83:3b:4f:8c:a5:db:b7:70:f4:69:
                    62:3a:ce:78:4c:b4:33:ed:4c:97:5e:1f:4e:10:4f:
                    f7:09:31:34:a6:90:0c:3f:19:38:b6:27:43:20:9a:
                    79:c7:42:d3:d8:e5:3d:5e:1c:14:8a:91:64:ad:fe:
                    d3:d5:64:1d:54:71:14:07:14:31:a0:59:89:2d:74:
                    60:b6:d4:db:15:ec:f3:44:53:c3:7f:4d:98:98:89:
                    68:72:f4:d2:25:26:b3:c7:7d:2d:aa:02:3f:cb:6a:
                    ab:b8:f1:73:47:bb:b9:f8:cd:6d:1d:69:0f:c9:99:
                    65:56:da:6e:c2:46:e1:48:51:1a:0b:26:be:73:98:
                    fb:d9:7d:4b:75:bc:12:18:0c:37:40:57:1e:3f:7d:
                    69:49:e8:30:50:de:86:06:e5:fb:29:fc:c9:fb:8f:
                    3a:eb:0b:bf:de:0e:ae:5a:cd:aa:df:42:66:4f:01:
                    ff:44:94:6a:98:4d:ed:8a:2c:67:e1:6b:6c:52:d6:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:1F:B9:F2:D6:3C:44:A3:7B:B3:4D:B8:C0:4A:64:8D:3A:E0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:a9:77:9e:85:22:44:51:3d:3d:32:c3:64:b5:31:ee:08:
         45:f2:ab:8e:e9:63:31:74:dc:64:50:01:92:fd:b5:5d:e9:db:
         6a:60:81:f1:ef:6e:8a:2a:62:bc:74:5c:12:f5:e3:2a:3c:2c:
         38:ed:00:10:58:b9:90:14:9f:e3:21:e1:da:7f:7d:d4:05:e7:
         5f:ab:07:9d:85:19:70:47:53:90:01:0e:3c:91:9e:22:37:31:
         d8:dc:b8:fd:41:b6:fa:48:ef:36:0a:f3:f4:a2:f5:8e:38:e4:
         e0:f4:48:5b:e9:13:69:f4:e9:71:a5:ea:61:07:78:47:5f:2b:
         1c:00:55:ec:56:d0:7f:92:d2:e1:a8:f8:a2:9e:0a:7b:2d:42:
         a6:ec:54:35:bc:62:b8:f9:e1:5f:a2:17:e6:8b:39:fc:52:c9:
         45:66:a2:61:82:56:e2:c5:76:2f:6e:24:7f:68:4b:f7:32:a3:
         fc:72:4e:b9:4b:c4:2f:ac:07:4a:e3:b6:fd:41:ae:0d:81:8e:
         b5:42:cf:8a:a3:3b:0e:f1:85:b0:f9:d2:84:a2:ae:44:37:41:
         82:5c:c9:ed:65:8d:31:32:28:ee:ea:60:14:7c:89:12:3d:8f:
         58:5e:e0:dd:89:82:d6:e3:a9:a7:b2:38:3f:8a:81:72:b6:69:
         be:50:a3:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj7cST1LxoeV6aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NDdmY2IyN2ItYjIxNC00YWViLWI3OWItZTVlZTBmOTYyZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOjt54KMQVqis8gfQiBlfyQwqraLtQZLyvO+
fiPG2YUTy65gqZ6zDpb76CEwwe0xQAp7tetl3Gn+uUZViQFie4M7T4yl27dw9Gli
Os54TLQz7UyXXh9OEE/3CTE0ppAMPxk4tidDIJp5x0LT2OU9XhwUipFkrf7T1WQd
VHEUBxQxoFmJLXRgttTbFezzRFPDf02YmIlocvTSJSazx30tqgI/y2qruPFzR7u5
+M1tHWkPyZllVtpuwkbhSFEaCya+c5j72X1LdbwSGAw3QFceP31pSegwUN6GBuX7
KfzJ+4866wu/3g6uWs2q30JmTwH/RJRqmE3tiixn4WtsUtZiewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG7NH7ny1jxEo3uzTbjASmSNOuB/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWI5MGI3NTktMmMyNS0z
ZWE2LTg4YWMtYWM2NWRlNjU1ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCIl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMNqXeehSJEUT09MsNktTHuCEXyq47pYzF03GRQAZL9tV3p22pg
gfHvbooqYrx0XBL14yo8LDjtABBYuZAUn+Mh4dp/fdQF51+rB52FGXBHU5ABDjyR
niI3MdjcuP1BtvpI7zYK8/Si9Y445OD0SFvpE2n06XGl6mEHeEdfKxwAVexW0H+S
0uGo+KKeCnstQqbsVDW8Yrj54V+iF+aLOfxSyUVmomGCVuLFdi9uJH9oS/cyo/xy
TrlLxC+sB0rjtv1Brg2BjrVCz4qjOw7xhbD50oSirkQ3QYJcye1ljTEyKO7qYBR8
iRI9j1he4N2JgtbjqaeyOD+KgXK2ab5Qoz8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:25 2025 by rpki-client