Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12844530-3f6c-3c58-82c5-ef60a65e9ad6.roa
File:                     12844530-3f6c-3c58-82c5-ef60a65e9ad6.roa (raw, json)
Hash identifier:          OLr92PVE3jbYeraW2ML//lHsqlGJFbvNV+ZKaoILh2g=
Subject key identifier:   D3:DC:56:5D:0C:12:4C:92:33:16:39:A4:65:A2:89:03:16:50:68:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B9E07A3F3C27817F3E6687E70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12844530-3f6c-3c58-82c5-ef60a65e9ad6.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     12222
IP address blocks:        2001:4878:2010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a3:f3:c2:78:17:f3:e6:68:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=9b2057cc-90b9-4a56-b59a-149e369773cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:39:f2:9e:f5:5a:b5:0d:fd:69:22:a6:b7:
                    50:f3:8d:2f:da:4a:90:60:f1:5f:3e:14:de:a6:3f:
                    d2:14:f4:ee:85:ee:77:10:4f:45:17:df:4d:c3:c7:
                    70:f0:4c:a2:14:cf:6d:59:02:61:c2:e1:b0:2e:e5:
                    f8:ba:a7:65:e2:cf:c9:d4:5a:38:c9:6e:1c:20:d7:
                    13:ea:97:94:fa:63:2a:37:21:92:a9:22:73:48:00:
                    da:4f:41:8e:b9:06:5a:25:31:dd:40:2a:a4:bb:c9:
                    cd:99:51:44:fc:db:53:e5:da:c6:3b:15:26:71:45:
                    f6:bc:65:4b:0f:fd:55:b3:ec:a1:14:3d:3c:7d:ad:
                    d2:cf:e5:9b:4a:2b:65:a5:21:13:90:93:a1:8f:54:
                    f7:ab:69:31:2d:b1:26:a8:2c:a6:54:44:15:07:2c:
                    16:fc:04:a6:0c:58:40:23:21:b3:01:ef:57:b8:28:
                    55:b3:20:4c:42:90:09:4b:d1:05:f1:cd:ad:9e:a6:
                    de:08:3d:e2:a6:5b:e4:a0:c2:13:21:21:c9:c6:12:
                    3b:ad:c9:10:bb:f3:3e:65:59:fb:2a:59:97:e5:a8:
                    c0:24:20:3b:86:7a:26:2c:cf:e6:10:d7:6c:4c:5b:
                    2b:12:47:5e:ad:23:90:60:bb:fb:9f:04:ef:4f:16:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DC:56:5D:0C:12:4C:92:33:16:39:A4:65:A2:89:03:16:50:68:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12844530-3f6c-3c58-82c5-ef60a65e9ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:4d:bb:e5:05:59:77:b8:f9:b6:81:4f:fe:e9:e1:42:ba:
         fc:f3:31:d3:51:d4:ef:b2:59:ca:8b:af:52:14:63:82:00:09:
         84:ab:eb:10:50:f7:62:c7:44:ff:6a:e7:44:36:f7:ee:8d:c4:
         df:c6:4c:34:7a:34:29:c1:59:c4:63:f0:07:ad:1a:1b:cb:6a:
         0f:53:9f:e5:c7:17:16:e7:9f:57:95:4c:03:b0:a2:24:85:f7:
         d1:08:af:a1:ed:61:0f:be:02:cf:ee:47:59:b1:71:51:21:b8:
         e6:c8:72:46:6b:9f:0c:a5:19:99:93:72:7d:f9:62:3d:81:0d:
         fb:b2:f6:97:89:72:2a:1f:77:5b:f4:fc:4a:d5:d3:57:38:4b:
         43:43:0c:e9:ad:49:b6:48:7c:7b:56:4d:fa:d5:75:08:54:35:
         0b:fe:55:1b:d9:b7:c3:a4:cd:fe:85:cf:1c:bd:a0:9f:97:d4:
         84:a6:2f:b0:80:89:34:e3:cc:48:9b:01:cc:0e:64:2d:d1:b5:
         5a:d5:59:08:c5:58:bf:14:96:fa:64:25:13:55:fa:f6:72:8b:
         65:45:63:4b:c6:c3:0b:b4:97:48:58:14:a3:94:14:4f:42:51:
         e2:9c:65:a6:0a:f3:ef:d9:f0:3d:1e:08:cc:f1:08:de:de:9f:
         9e:eb:d8:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6PzwngX8+ZofnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
OWIyMDU3Y2MtOTBiOS00YTU2LWI1OWEtMTQ5ZTM2OTc3M2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpA58p71WrUN/WkiprdQ840v2kqQYPFfPhTe
pj/SFPTuhe53EE9FF99Nw8dw8EyiFM9tWQJhwuGwLuX4uqdl4s/J1Fo4yW4cINcT
6peU+mMqNyGSqSJzSADaT0GOuQZaJTHdQCqku8nNmVFE/NtT5drGOxUmcUX2vGVL
D/1Vs+yhFD08fa3Sz+WbSitlpSETkJOhj1T3q2kxLbEmqCymVEQVBywW/ASmDFhA
IyGzAe9XuChVsyBMQpAJS9EF8c2tnqbeCD3iplvkoMITISHJxhI7rckQu/M+ZVn7
KlmX5ajAJCA7hnomLM/mENdsTFsrEkderSOQYLv7nwTvTxYgmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNPcVl0MEkySMxY5pGWiiQMWUGgQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI4NDQ1MzAtM2Y2Yy0z
YzU4LTgyYzUtZWY2MGE2NWU5YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAPITbvlBVl3uPm2gU/+6eFCuvzzMdNR1O+yWcqLr1IUY4IACYSr
6xBQ92LHRP9q50Q29+6NxN/GTDR6NCnBWcRj8AetGhvLag9Tn+XHFxbnn1eVTAOw
oiSF99EIr6HtYQ++As/uR1mxcVEhuObIckZrnwylGZmTcn35Yj2BDfuy9peJciof
d1v0/ErV01c4S0NDDOmtSbZIfHtWTfrVdQhUNQv+VRvZt8Okzf6Fzxy9oJ+X1ISm
L7CAiTTjzEibAcwOZC3RtVrVWQjFWL8UlvpkJRNV+vZyi2VFY0vGwwu0l0hYFKOU
FE9CUeKcZaYK8+/Z8D0eCMzxCN7en57r2Cw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:14 2025 by rpki-client