Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa
File:                     8be0b04f-9463-370b-8d93-9d314ada547c.roa (raw, json)
Hash identifier:          PCdYdLbX9BLlcuKPuuj4/4hJp1ivLGCAHMfmsAl0cIs=
Subject key identifier:   3D:53:BE:C2:92:8C:66:83:75:7E:FF:81:5C:A3:76:E2:3F:DF:0F:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B795B9DFC79AB6779C858
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:136::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:79:5b:9d:fc:79:ab:67:79:c8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=e5118118-ba1f-4492-abde-52cb7e8f9c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:6c:1d:d5:29:ce:73:7e:15:62:16:6b:49:
                    a2:91:46:84:d2:66:b1:47:98:65:54:32:39:d8:3e:
                    a0:05:96:c1:22:56:6b:c3:ee:95:c3:86:b7:9d:b5:
                    32:54:96:6b:a2:d5:36:0b:db:30:d1:cf:3a:aa:08:
                    76:e1:3d:e2:35:d7:68:29:db:68:43:04:7d:41:c5:
                    ef:71:81:ba:86:a9:d9:1c:b5:e7:fe:63:9d:27:e3:
                    8b:bb:54:95:c3:ed:09:1e:0c:1a:6a:65:36:5d:83:
                    82:c8:f7:54:7b:c1:73:76:90:4d:38:57:6b:3e:b7:
                    b3:08:0f:c3:c5:b1:f8:55:d3:b3:be:32:af:e1:c7:
                    f2:f3:45:56:f6:7b:81:7a:06:3c:6a:05:cb:e4:77:
                    68:f8:b8:4d:72:9c:0c:83:2a:a8:48:46:78:9e:77:
                    33:f3:fa:1a:4d:71:80:f6:63:07:b5:ac:3d:48:07:
                    a0:27:31:a8:51:6f:9e:25:39:8a:52:8d:31:f4:b0:
                    ac:68:72:c0:ce:bf:0d:a7:b1:92:60:2a:9d:1a:b2:
                    61:e3:41:cd:b5:90:6f:2b:d1:59:87:ea:a0:1a:8e:
                    9d:33:84:34:87:6a:25:7e:76:4e:c6:32:17:29:4a:
                    bc:63:f9:72:54:85:61:8b:67:2e:cc:e6:ff:a8:39:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:BE:C2:92:8C:66:83:75:7E:FF:81:5C:A3:76:E2:3F:DF:0F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:136::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:61:05:af:b2:82:42:b3:8f:59:2e:f7:a5:0e:64:de:3b:
         17:d2:e9:38:46:c7:ac:83:f4:ed:6e:77:9f:7e:cf:fc:9e:84:
         49:9a:99:5e:a5:67:10:53:81:38:b6:47:a2:82:cb:4c:b7:e7:
         44:f2:0a:fd:a8:23:f6:5c:3a:52:b9:cb:ef:77:0b:47:c7:36:
         e4:c0:fc:cf:3d:e3:3c:1a:f3:5c:c6:8f:fd:64:f6:44:0b:e5:
         84:07:46:7c:22:34:cc:8a:aa:fd:d8:58:d4:ae:c6:af:53:6a:
         c6:22:8a:8e:21:30:31:0e:6f:eb:25:3c:37:76:da:1f:f9:eb:
         0b:e8:cb:96:6f:54:3f:1c:a7:c7:2e:b7:28:36:ca:52:d7:ca:
         75:7d:26:52:3b:34:95:60:2a:84:10:cf:4b:80:02:40:49:a0:
         92:fa:bd:ce:05:f3:64:1b:96:1a:14:7c:78:76:74:37:14:2c:
         c0:2b:ef:54:b2:e0:ab:29:b2:f2:33:16:2c:48:c3:1d:ed:fc:
         7c:40:f6:31:a0:78:cd:4a:ab:ef:c8:0f:05:e6:49:b3:16:24:
         dd:ef:2b:3e:ad:bf:9c:85:22:7e:5e:d4:d2:2c:73:06:fa:86:
         24:49:51:7b:33:00:b3:49:d9:6a:fb:02:71:a1:5f:2e:89:34:
         8c:9b:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:34 2025 by rpki-client