Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331b7a32-e4ee-3316-a395-29cc9a4d86f9.roa
File:                     331b7a32-e4ee-3316-a395-29cc9a4d86f9.roa (raw, json)
Hash identifier:          6g98yMPO5uUHg25QrCgZdlyjrv8L0cl2AtwFc1sEjmo=
Subject key identifier:   5B:05:DE:75:89:22:15:49:F1:32:8E:0E:7D:BA:92:26:17:EE:94:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA0D2562A31963EC882EF4F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331b7a32-e4ee-3316-a395-29cc9a4d86f9.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     12222
IP address blocks:        2001:4878:8261::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:56:2a:31:96:3e:c8:82:ef:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=2314c7a4-9852-472b-8b04-77af79bb0c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:92:97:3b:23:0d:37:0d:53:70:31:fe:c3:
                    2a:cc:fe:ca:1a:74:19:22:34:4e:68:fc:58:33:f6:
                    5a:29:f6:dd:f8:c8:f3:5f:07:ed:35:8e:1b:08:d2:
                    f7:a7:93:c1:f3:56:bb:cd:49:93:72:57:2f:bb:ab:
                    fc:0e:6a:96:06:4b:07:77:9e:b9:46:c8:e3:69:c5:
                    89:1f:89:63:99:d4:83:b0:ef:35:c0:33:e7:03:2d:
                    64:f8:c3:e0:cd:c2:bf:fd:0b:21:ac:d1:19:ba:f4:
                    a2:6e:b5:78:4c:d2:19:5b:a2:9c:3c:46:9d:80:6e:
                    36:1c:40:ed:b6:40:14:6f:4d:61:cc:6e:09:60:f7:
                    1e:cc:55:f6:b6:d2:39:d9:79:c5:8f:24:46:07:35:
                    cf:06:6a:4a:4f:41:96:26:f2:9c:ac:9c:ac:95:90:
                    61:49:cc:d1:46:81:42:41:da:7e:06:f5:91:0a:8c:
                    b7:02:14:c0:3d:b4:9a:ee:39:d7:e7:af:77:01:b2:
                    42:ce:a1:c7:63:eb:84:71:e5:24:c2:9a:38:cd:04:
                    17:6b:cc:4b:90:f6:00:39:58:35:e2:6c:45:22:ac:
                    9e:80:8a:0c:01:91:fd:31:41:f4:dc:7c:3c:a1:f5:
                    87:31:fd:1a:3c:d4:81:89:50:33:e1:c6:e8:c5:1c:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:DE:75:89:22:15:49:F1:32:8E:0E:7D:BA:92:26:17:EE:94:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331b7a32-e4ee-3316-a395-29cc9a4d86f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8261::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:81:da:4b:7c:4b:1d:ac:4e:d7:8b:5d:6c:f7:2a:f3:1b:
         80:05:4d:e0:20:52:23:24:63:f6:88:7c:b7:23:3b:5e:1e:e0:
         c4:a8:36:92:aa:b9:1f:90:d9:28:f8:2f:20:ed:44:d6:d2:a3:
         55:f4:5b:0a:65:17:46:c0:16:40:dc:d3:4f:60:da:49:8e:67:
         0c:09:76:c1:d6:7b:f8:b5:f4:72:f6:e9:23:08:d4:37:3e:95:
         42:82:16:2e:6e:b4:6c:ed:8e:5b:23:45:4e:8c:8f:50:46:b6:
         ad:e2:42:7f:d7:c1:6b:87:57:0f:45:40:8a:98:5e:a2:50:b2:
         dc:ef:f8:fa:23:ec:05:9c:cb:e1:a9:35:b5:9a:5e:d5:b7:90:
         b9:c0:db:ec:90:64:a1:0a:48:21:03:9a:82:48:36:a5:f2:68:
         28:a1:ad:b2:d8:c0:ca:41:d2:16:ea:6f:de:d3:22:9c:99:2f:
         bd:89:31:81:72:5e:17:70:db:30:e3:4d:65:5a:b0:c1:3a:dc:
         ec:3a:31:d4:5d:84:d5:71:d9:51:72:9a:f8:32:83:fa:09:1f:
         f7:e5:c4:4a:9f:2a:29:94:74:4b:73:e3:6b:fe:91:b0:ea:8c:
         79:fe:df:be:c6:9f:6a:71:e8:6b:4c:7e:41:ce:ba:c2:41:8b:
         2e:48:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:26:22 2025 by rpki-client