Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317657dd-ffdf-33a5-b4f0-61019d560b6b.roa
File:                     317657dd-ffdf-33a5-b4f0-61019d560b6b.roa (raw, json)
Hash identifier:          Gn0ACk+R6J98GE9apn0ukg+3W+NqlkEjIvGmCyFPpXQ=
Subject key identifier:   66:EF:4B:06:37:AC:55:EB:74:7B:66:7F:4B:16:72:27:90:31:EB:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC0163A4327FF75D9377E5600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317657dd-ffdf-33a5-b4f0-61019d560b6b.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:a246::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3a:43:27:ff:75:d9:37:7e:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=25388b05-edff-4366-aeef-5616a91cd053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:d5:26:f4:ba:70:ce:23:a1:26:da:fa:6a:
                    54:fd:47:b9:ae:f3:17:b4:71:d9:4d:51:42:8c:2c:
                    54:be:5c:cb:53:1f:45:53:08:04:b0:b9:67:7a:77:
                    8b:4a:09:6f:78:2e:9e:a7:74:d2:39:c6:90:0e:01:
                    35:21:e8:7a:91:92:eb:ae:6b:e0:bb:e0:03:e8:72:
                    69:ce:69:57:31:8f:38:f7:78:49:89:d9:50:f7:f6:
                    78:ed:bc:3e:4b:fe:7c:a0:7c:16:e8:a2:e4:91:d5:
                    e2:92:0b:92:f5:ed:22:fa:17:01:31:89:2c:f0:f8:
                    d7:55:bc:91:02:bb:56:3a:fd:5d:a8:6f:b9:16:9e:
                    fa:b9:dd:69:8f:97:c2:af:70:2b:d8:ee:2c:5f:b8:
                    f1:a2:87:0b:54:1e:a3:b7:ce:a1:59:0a:6e:85:3d:
                    37:7c:35:ba:d2:98:c3:b9:ed:a7:cf:ce:1c:49:80:
                    41:73:db:60:0b:39:71:54:1f:0d:fd:ca:dd:4c:9b:
                    6e:fe:0e:46:ea:2f:ff:c1:67:7c:3a:fe:e0:65:3a:
                    8e:87:4d:08:f0:bd:5d:fc:ed:59:93:0e:8f:ce:90:
                    cb:54:cb:0b:a5:74:c6:52:4a:d2:bc:39:63:f8:ae:
                    07:ce:e3:c8:ef:27:08:61:2a:b6:b2:4a:9a:be:6f:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:4B:06:37:AC:55:EB:74:7B:66:7F:4B:16:72:27:90:31:EB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317657dd-ffdf-33a5-b4f0-61019d560b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a246::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:b2:dd:46:69:49:06:ac:7a:33:ff:26:fb:ed:aa:6f:4f:
         f9:17:26:3c:1b:a9:bd:15:97:a7:8d:15:97:5d:23:9d:da:76:
         92:93:77:cf:c4:bf:25:72:e9:e0:36:3c:8d:c6:62:19:ef:1b:
         3d:4d:d1:57:44:4f:16:6a:f2:bd:13:d5:0a:cb:c6:77:dc:82:
         85:c6:7b:a9:79:24:e2:0c:18:5a:10:38:ca:48:7f:e1:23:7f:
         fa:30:8b:ac:8e:f1:9e:7f:4b:85:45:4e:70:46:d3:ee:67:65:
         15:28:bb:0e:40:e2:3e:34:b7:d5:89:4e:72:91:87:d9:f9:52:
         c1:65:a5:07:c2:10:6e:98:ab:b6:15:2a:03:b8:22:dc:5c:8a:
         70:53:b2:f0:94:6d:ce:a4:be:13:0d:02:fa:fd:3c:74:9a:08:
         81:d9:4c:d5:8d:8f:13:6b:e0:ed:81:f0:af:f7:04:b7:14:aa:
         29:27:72:4e:23:90:04:80:a1:06:1a:0f:91:50:e2:ef:61:33:
         34:90:8d:5a:bd:f7:d0:57:e9:64:45:3c:a7:49:61:6b:c8:a8:
         04:0f:64:1d:f7:4f:bf:f1:72:95:c9:c2:21:63:ab:97:2f:3d:
         65:3c:bb:35:4e:4f:0a:be:ed:aa:34:5c:92:4f:50:8a:3a:c9:
         52:c2:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:54 2025 by rpki-client