Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5360d7e2-e4ed-3be0-8077-55022539a0b8.roa
File:                     5360d7e2-e4ed-3be0-8077-55022539a0b8.roa (raw, json)
Hash identifier:          F6dXW39CPpGIr6d/NuHRIF0NaFf4VQtMfWkM6Sm3GPY=
Subject key identifier:   6D:52:D8:83:AD:1B:27:C2:F7:3A:64:50:BE:5A:30:3A:8B:29:95:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B78EF3E2689C24DD53D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5360d7e2-e4ed-3be0-8077-55022539a0b8.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:78:ef:3e:26:89:c2:4d:d5:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=87b929f3-7c75-4dd4-a070-08ef91431b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:3b:0c:ff:88:da:91:a8:09:7e:9d:51:1a:
                    3e:70:dc:b0:a8:7f:45:93:ff:25:c5:85:d0:ab:3b:
                    a2:bd:e6:a2:bd:c8:e8:0b:55:72:68:31:fe:00:9b:
                    f6:8b:ca:f0:11:4a:39:99:3e:e1:c9:8a:b3:94:ac:
                    07:b1:4e:a7:0b:c1:3d:a3:40:57:ea:58:fd:61:3b:
                    c8:aa:95:2f:7c:a0:ec:f5:6e:8d:ae:2a:be:80:6a:
                    80:47:09:9c:aa:12:49:a7:70:ff:71:bc:af:14:9f:
                    85:e2:65:23:e4:51:e1:df:78:ba:8f:b5:d3:51:27:
                    b8:28:70:6c:d5:ee:23:8f:03:ed:93:7e:c1:97:9d:
                    38:17:0e:4d:17:96:ab:de:28:3a:51:35:7a:95:dd:
                    11:cb:3b:42:6c:be:4a:62:b3:16:0f:d7:79:45:b7:
                    22:00:82:fd:fa:d5:ac:d6:31:cc:7d:4e:c0:9a:b9:
                    46:ce:4f:bb:b5:6d:10:01:9f:77:e5:6b:ac:52:fa:
                    23:87:d9:a8:c7:c2:bc:78:47:22:56:3c:17:21:b3:
                    fe:b4:74:95:6f:d1:26:f7:fc:d2:d8:1a:d5:80:45:
                    94:4f:c8:7c:1e:c9:9c:39:38:25:df:42:9f:bf:6e:
                    ca:a2:63:91:5b:a1:af:65:56:77:9d:1e:d8:18:c2:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:52:D8:83:AD:1B:27:C2:F7:3A:64:50:BE:5A:30:3A:8B:29:95:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5360d7e2-e4ed-3be0-8077-55022539a0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:35:05:18:8b:50:c6:50:ed:7c:8d:40:67:66:9f:23:dd:63:
         c2:2e:ca:34:4f:81:52:4a:0e:4a:df:20:de:08:a4:92:5f:86:
         13:19:c3:0a:91:2c:d2:75:12:5d:41:b4:dc:cb:5d:af:a0:ef:
         d0:b9:5c:73:43:55:81:96:55:25:b6:e4:4a:ae:f5:cb:29:c8:
         f9:19:d5:16:1c:41:95:52:a9:a4:1e:21:5c:56:c9:46:4f:1d:
         3a:61:4f:b6:d4:e7:8d:25:e5:7c:8f:b2:03:d1:33:8e:98:84:
         dc:d5:c4:c5:d3:30:74:b5:92:20:e0:ac:9a:a9:79:2e:25:47:
         53:30:a7:fa:51:bd:0a:20:7b:ec:9f:50:83:b5:07:a4:e3:ac:
         09:52:b7:d6:ba:0a:87:16:70:d2:ed:e5:a5:96:f8:94:99:64:
         26:61:65:da:b8:7c:4b:3b:7e:5b:ad:48:d8:6a:32:2d:78:4a:
         3f:69:5d:07:bb:26:27:43:51:7f:38:b8:98:ca:6e:2e:90:0a:
         de:83:9b:df:75:36:51:e4:d9:c2:9c:12:60:43:a6:f4:87:8c:
         87:f0:ae:d3:a9:4b:07:97:02:6e:f5:3b:39:b9:0a:c4:e0:89:
         2a:48:a8:28:a7:97:4d:b0:54:db:e4:42:b1:50:4c:28:d4:90:
         a8:c4:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:47 2025 by rpki-client