Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa
File:                     4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa (raw, json)
Hash identifier:          rQyNkcsTRRcy83y/52/5G80jpMGnzZe8Kdk/rFgbVYs=
Subject key identifier:   8F:B1:96:AB:7E:FF:D7:7D:82:ED:74:D0:92:EC:68:5B:F6:CE:5E:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B8701826A0E635C02C880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:4225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:87:01:82:6a:0e:63:5c:02:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=aa559e15-1929-4542-be04-bae3a648385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:ff:ff:cf:64:e1:79:47:d6:0e:2d:6d:23:
                    8a:7c:f0:c5:23:9a:d3:f4:9c:07:98:be:cf:70:b0:
                    50:58:79:aa:e9:98:48:07:bb:a3:64:96:4c:47:de:
                    6c:dd:6b:23:0a:40:53:16:8a:47:6b:58:70:ab:28:
                    d3:b9:3f:62:05:51:e3:fd:bd:9a:0c:fe:9f:04:63:
                    7d:97:12:81:d4:31:b1:2b:ca:0d:d5:3a:71:50:26:
                    65:b5:56:01:d7:7f:db:03:13:48:4a:58:e6:60:7b:
                    a5:66:40:71:38:3e:9e:7a:d3:1a:b0:0a:99:7f:71:
                    62:3d:2b:d3:34:dc:b4:e2:78:16:49:11:65:de:00:
                    43:1c:78:72:9f:60:e2:af:3e:bb:41:66:95:33:2e:
                    ab:83:3d:6a:00:85:9f:9c:b8:19:29:32:d7:1e:85:
                    94:41:7b:52:5c:69:14:a3:f1:50:5f:d6:82:17:2c:
                    bc:73:b2:19:82:4c:7c:88:93:6b:a3:55:59:0f:63:
                    7d:64:fa:4e:17:a8:27:5b:1c:57:43:3e:e9:af:24:
                    8e:e4:29:ef:48:58:a8:d0:93:86:bf:7b:db:c7:44:
                    8b:40:f2:78:d0:24:5b:ce:0f:12:63:93:e6:77:13:
                    12:4b:1c:91:6b:6b:96:93:bf:09:50:f0:0e:06:95:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:96:AB:7E:FF:D7:7D:82:ED:74:D0:92:EC:68:5B:F6:CE:5E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4658cd45-8eaf-3e39-b7ec-5e1a18ea68b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:92:f3:40:e4:38:09:32:44:db:bb:15:b3:ea:c5:78:7e:
         05:ce:e8:f7:20:5d:f0:e4:cf:f5:c3:6d:b3:74:2d:8b:7b:0b:
         e4:b8:7f:91:ee:96:3a:26:32:ed:eb:83:e4:66:f1:70:88:a3:
         03:27:97:8a:b6:fa:6f:75:98:52:7f:3f:d2:63:40:19:81:2c:
         33:ff:96:57:b8:7b:e1:67:53:60:8c:21:36:6e:52:ca:58:84:
         41:72:21:8e:ad:5a:b9:34:ab:bd:81:ca:0d:4d:b0:41:1a:2e:
         bb:52:75:a0:5c:88:56:f0:0a:30:05:4c:7c:41:c9:50:af:ce:
         d1:50:2b:f0:ab:8f:df:04:10:c0:ef:35:a0:7d:bc:47:7b:64:
         c3:d4:92:2b:f3:bc:52:57:c0:6a:1c:38:cc:b0:24:d0:b7:04:
         ca:f2:6a:1b:5b:4e:d6:f4:2a:b8:0b:a8:7c:31:62:df:31:50:
         84:51:ff:26:b7:a4:ae:37:bb:72:ba:6e:52:49:99:82:16:71:
         7f:5c:61:3e:14:82:66:f4:2b:22:6a:9f:b4:8a:2e:2d:5b:05:
         cf:07:fb:f4:a9:17:ec:8b:f9:69:ba:c9:3a:bc:88:04:fb:08:
         1f:03:7e:ca:9a:e2:d0:75:8f:15:02:4a:6d:6b:c9:45:aa:e2:
         25:47:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:19:53 2025 by rpki-client