Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa
File:                     b5547530-d068-384c-b287-935448e1ddad.roa (raw, json)
Hash identifier:          XKX85zCVb55Y1AtdCKI6bqHUfC1lw8CcPp7Cb3ICya8=
Subject key identifier:   47:ED:E8:37:EB:C3:88:CA:0D:BF:C2:8B:6B:AC:2D:78:34:55:82:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B82078D41A13C8B316480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:82:07:8d:41:a1:3c:8b:31:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b5bc2733-ce8e-4590-becd-3225e5bb174d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:50:42:fd:41:0c:0c:c6:0e:33:e4:2c:cb:
                    60:8b:95:4a:d2:0b:a4:78:26:c1:f0:e0:28:63:57:
                    fc:11:ba:45:8f:5a:26:bc:63:73:d3:c6:d4:31:2e:
                    74:1a:bf:24:5e:da:f2:fe:92:33:fb:49:72:63:9f:
                    48:1e:b4:dc:d8:98:1b:8a:d3:68:73:13:74:e3:7e:
                    6a:60:5c:9d:67:59:dc:db:52:ef:92:9c:97:87:bd:
                    b4:de:d4:00:95:28:02:1a:43:92:0a:67:a6:d0:cc:
                    e5:61:90:c7:dc:a9:51:8a:59:83:0b:6b:77:fb:3f:
                    93:82:2d:04:a9:5a:d8:2b:b8:51:dd:a0:34:dc:82:
                    bf:f2:4f:34:9d:b4:03:90:01:f6:1a:d9:32:19:7b:
                    6e:dc:11:3d:62:17:89:ae:c0:57:b8:78:c5:8b:8c:
                    da:eb:c5:57:e2:b0:65:dc:46:bd:ad:34:f5:66:d8:
                    7c:35:e0:b0:cd:fd:a9:dc:8a:8b:60:a2:5e:6c:fb:
                    c1:b9:83:9e:e3:43:8f:fb:29:5f:ac:6b:3f:38:a3:
                    af:59:95:03:2d:66:57:66:5c:9f:0c:fc:c4:1b:3c:
                    70:cf:01:c2:8c:cf:fd:0a:0f:b2:79:72:a3:aa:6b:
                    a8:69:61:a8:40:dd:a2:44:8e:63:dc:ed:26:36:e2:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:ED:E8:37:EB:C3:88:CA:0D:BF:C2:8B:6B:AC:2D:78:34:55:82:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:bb:f3:4a:af:01:2f:ee:ef:79:96:2e:df:0f:64:77:5f:
         8c:7f:68:04:39:2a:7d:dc:2a:ae:64:0a:dc:c4:24:81:82:32:
         39:6f:78:f3:39:fb:62:e1:4b:1a:a5:6f:9f:01:50:ad:11:0d:
         02:a2:59:e2:15:8a:75:75:ac:41:ce:30:93:2e:4d:e0:24:c1:
         82:55:60:4b:da:a9:d4:cf:cd:56:72:59:c3:71:a0:8d:da:ad:
         93:b5:e3:f0:d1:74:29:7e:8d:ed:2d:95:15:0f:db:b3:f5:f1:
         57:b8:e7:7e:93:da:ba:22:06:a0:0d:be:81:21:56:67:d1:8a:
         c0:7b:07:c5:ef:56:be:48:be:2f:1d:b1:2d:2d:06:23:04:c5:
         78:bf:3d:96:db:72:1e:1a:56:96:0d:ed:4f:e4:7d:54:78:20:
         f9:a4:c8:26:17:04:0a:5e:59:f3:3c:a8:f0:ad:c3:5e:5b:7c:
         6a:32:33:d0:75:4f:ad:e8:9c:5f:e7:c3:91:e7:f7:fe:ef:07:
         2c:1c:1e:63:1a:d4:ea:90:d9:50:05:d9:fc:c3:6f:c6:67:63:
         ee:e5:44:ba:9d:b0:8d:13:68:71:65:4b:07:25:0c:1f:40:8a:
         49:ea:21:84:7b:56:97:71:5d:8a:76:d4:4f:22:72:60:4d:bb:
         98:0f:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:31 2025 by rpki-client