Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa
File:                     b5547530-d068-384c-b287-935448e1ddad.roa (raw, json)
Hash identifier:          +4c/oNMNpR/SPckmTG4fjsTNtx3PZCXNENqtZAI9V/s=
Subject key identifier:   0D:89:D5:71:07:9B:17:3A:EF:F1:15:8A:AD:E6:A2:A6:45:F7:DD:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B9E07A1EE11110635B48F3040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     12222
IP address blocks:        2001:4878:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a1:ee:11:11:06:35:b4:8f:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=c94a629b-f90c-429f-a21d-f7752e03469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:91:c6:d2:6c:4f:9a:30:f0:be:f5:f6:71:
                    9c:4b:3b:2c:1b:08:3a:69:4b:95:bc:1f:e4:e4:49:
                    e6:5e:76:97:7e:39:8f:11:94:ce:4c:b4:4b:25:22:
                    ab:85:0b:6b:ff:42:e5:b7:01:b7:27:c7:e9:c9:6b:
                    7a:34:0c:ba:9b:c1:bb:14:17:91:b0:29:5d:83:3d:
                    e0:2d:dd:e4:0a:3d:c7:31:9a:5f:f6:ae:42:5c:92:
                    cc:af:ce:c7:df:a0:d6:3b:c3:58:ac:01:e8:17:8b:
                    44:90:58:2a:78:7a:2a:f2:07:d9:ea:26:db:44:fc:
                    4f:88:f1:5f:bb:fb:2f:1e:97:fa:d6:ba:6f:cd:41:
                    48:5b:42:c4:d0:88:45:9f:80:3d:10:b6:0b:34:34:
                    af:8d:c3:35:46:4e:e3:18:73:85:a1:74:46:fa:e7:
                    3f:6b:92:80:01:97:9a:ad:ea:1a:f4:cf:c5:84:76:
                    25:e6:f0:1c:3d:c2:3b:25:e9:83:77:e3:e7:75:2a:
                    2d:67:da:28:78:f4:6e:17:b5:2e:e0:74:8e:e9:94:
                    a8:f3:33:0d:22:49:db:6b:14:42:49:48:4c:71:01:
                    27:a2:d2:a5:a6:29:49:b0:9b:47:cf:d1:ce:bd:30:
                    ec:e9:af:ef:c4:b4:30:2a:70:3a:c3:71:78:90:62:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:D5:71:07:9B:17:3A:EF:F1:15:8A:AD:E6:A2:A6:45:F7:DD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5547530-d068-384c-b287-935448e1ddad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:aa:a0:39:a7:a4:92:48:bf:52:1d:9e:03:34:55:2e:e6:b7:
         6d:e1:b2:09:ea:2a:d2:3a:bb:72:4c:52:9a:93:37:a9:11:cc:
         67:51:fe:70:7f:4e:cc:d7:8c:86:69:f7:43:b7:51:c7:dc:f2:
         69:1d:c2:25:03:b9:ff:bd:b5:7a:82:48:0c:5e:0f:81:d9:13:
         0d:3f:b3:84:83:30:68:c7:4e:2d:1b:09:80:09:bb:84:4e:6c:
         87:0c:0a:74:d4:10:b1:60:c2:4b:e7:f0:7c:4a:ef:6c:b6:80:
         69:d7:fd:f2:68:01:26:95:c6:ac:4c:04:82:a4:1e:ac:f2:89:
         00:e6:4f:ff:1d:7a:2a:1b:08:e6:ca:ff:41:43:e8:63:56:a5:
         27:f4:08:be:11:fe:dd:9d:92:d3:a9:bb:a8:5e:5b:67:bc:10:
         0b:b2:0b:33:f2:ed:76:54:3c:cc:04:63:6f:6a:f9:62:20:b4:
         f7:99:80:39:e7:f5:2b:38:d0:c8:51:9e:7b:70:f9:be:15:24:
         e9:6c:19:b7:4d:26:ba:f9:5c:d9:fa:47:b7:eb:2b:0e:24:b0:
         f0:2c:5f:5e:78:b6:92:0c:82:bd:bd:c5:a4:4d:67:c2:ec:06:
         3c:ef:32:4f:de:7f:62:dc:a8:bd:3a:f9:47:da:56:78:87:92:
         de:17:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:08 2025 by rpki-client