Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa
File:                     8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa (raw, json)
Hash identifier:          rYQ5xe0y+BNO3sGgbbmuafLwo/CSRYxXUw+QNfvWvYw=
Subject key identifier:   7C:F3:A5:64:A3:A4:D3:C2:59:B5:E5:EE:6A:EB:E0:F7:E8:5A:B6:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B86D6A1B66421E7441B70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:4204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:86:d6:a1:b6:64:21:e7:44:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=3d4b11e1-0e76-421f-8652-7bba33a515fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0b:4d:25:a5:df:9f:26:3a:40:73:24:09:e0:
                    21:3a:ff:e1:fe:4b:75:2d:10:fc:da:41:ab:24:f3:
                    48:56:30:3c:c5:f9:e5:be:92:3e:69:64:c1:ea:14:
                    6b:f0:0d:ed:fa:bd:ca:f5:c5:1f:7a:4b:7a:cc:82:
                    b0:af:7f:ee:33:bc:64:5f:70:0f:fe:ca:b4:40:63:
                    cf:c2:d6:78:00:eb:2d:d6:4f:78:f1:4b:44:a2:3d:
                    a6:f9:e0:72:52:79:be:f2:8a:1c:3a:42:e9:b6:6e:
                    98:ea:e7:dc:f0:6c:64:75:a0:c8:b6:3f:4c:31:83:
                    d6:a3:fb:4f:63:f4:1b:7a:4b:a9:4a:f0:15:fb:af:
                    fe:61:b7:09:bd:d2:e2:ed:7a:c9:9a:fb:6a:1a:4a:
                    77:47:05:76:6a:d4:51:a5:82:cd:d1:ad:66:72:d7:
                    94:45:91:9f:36:88:b4:53:3b:67:b4:72:36:e7:60:
                    d1:a7:04:25:f7:0d:e5:b4:8a:fb:84:3c:09:b3:9b:
                    14:89:82:10:98:38:aa:07:50:7d:b1:f7:08:3f:a6:
                    93:af:e3:51:8d:fb:8d:91:77:e0:6f:f4:63:b9:54:
                    f7:25:33:3d:a5:82:44:5c:29:cf:e5:32:74:e8:0d:
                    e2:29:6f:07:32:94:cf:1a:3e:c3:27:0d:51:51:72:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F3:A5:64:A3:A4:D3:C2:59:B5:E5:EE:6A:EB:E0:F7:E8:5A:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:0a:ab:84:85:ba:6a:ed:2c:f7:35:32:07:19:42:bc:fb:
         fa:b5:c5:f2:45:ee:ae:97:47:23:be:e7:40:43:65:33:b4:62:
         af:1d:ae:b4:7a:96:e0:eb:85:4b:e2:d1:ad:d9:97:40:8c:2c:
         57:f2:bb:11:11:a9:ca:55:cd:a6:e5:67:65:31:ec:bd:f9:14:
         9f:74:48:be:e0:b8:89:b7:5f:d5:0e:e0:f1:3e:a8:17:2b:91:
         af:2e:11:b3:6b:20:c4:ed:a3:a5:7f:44:fe:92:2f:2e:e1:b9:
         60:f5:24:4b:ab:54:89:85:00:b8:4d:26:85:68:0f:c0:a4:77:
         e3:6e:1a:a3:1a:03:dd:cc:52:e4:98:ae:f6:5d:48:ae:31:08:
         4c:b5:6e:a3:02:68:97:39:88:34:a7:fc:e9:50:08:63:29:62:
         4d:c3:e3:ac:7f:a5:8d:13:f9:4b:a5:cf:24:8d:f6:ed:7c:a1:
         91:b9:75:d0:df:01:75:31:ff:65:b9:18:4a:d4:c7:f1:51:a3:
         45:08:19:10:41:49:33:1c:64:29:b2:6d:da:61:62:b8:59:4a:
         e7:b3:44:7d:75:81:6f:0e:22:de:52:5a:cf:95:64:3c:99:7a:
         25:be:75:ff:0b:89:63:6f:82:4d:01:62:cc:b6:86:bc:1e:00:
         e3:5a:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:55 2025 by rpki-client