Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa
File:                     cec742cd-4108-39e1-93e9-edf995db5279.roa (raw, json)
Hash identifier:          JmwjsFxWT9nn+d6sUXlIFz6B1X926y2yj8h1tZEjxN8=
Subject key identifier:   FE:E0:1D:FE:DE:EE:BD:A9:64:33:6B:AA:4A:80:40:E9:C6:67:5F:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B9E0799A195173168C7437480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     12222
IP address blocks:        2001:4878:37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:99:a1:95:17:31:68:c7:43:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=cbc48d0e-d57c-440f-b57d-9d4cfdcc8735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:58:b6:28:f0:d0:53:d9:5c:b0:f1:45:1e:
                    f3:50:a3:2a:cd:fc:0c:a9:53:f5:13:56:38:19:6c:
                    9b:fa:44:00:65:df:cb:e9:89:01:7a:cd:0b:8c:2b:
                    59:54:3e:80:8d:fb:97:2f:a1:32:8a:63:31:36:d0:
                    7b:7a:16:6e:fc:6a:e2:50:84:0b:40:67:40:4b:00:
                    0e:b2:49:ca:ed:68:5e:d9:ef:35:85:a2:74:f0:03:
                    46:60:f9:e0:b2:89:3f:82:89:f4:78:25:64:26:5a:
                    03:11:ac:b3:f4:f6:11:8d:e1:38:c6:f5:4a:f3:4e:
                    24:fc:32:58:15:93:1d:17:4e:a4:6c:1e:f6:fc:6a:
                    ba:4d:7c:fb:e8:5b:3e:b7:39:3c:dd:45:a0:9e:a1:
                    be:b3:a9:83:57:f1:ec:76:34:48:0b:4c:44:be:14:
                    ed:be:b2:f7:3c:a1:0f:78:1b:c9:a5:8b:46:56:81:
                    ff:a6:64:50:0f:5d:f3:90:7b:58:c3:d6:eb:1a:fc:
                    63:bb:a0:da:44:46:f9:ed:8a:bc:fa:47:f1:1e:99:
                    60:2b:52:28:b5:f2:c8:0b:72:5a:97:cc:0d:bf:9c:
                    14:0a:2d:19:07:a7:9e:ac:cd:4c:1d:f2:8b:72:4b:
                    f6:bc:96:f5:9d:68:35:ee:cb:74:97:bc:61:d3:bb:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:1D:FE:DE:EE:BD:A9:64:33:6B:AA:4A:80:40:E9:C6:67:5F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cec742cd-4108-39e1-93e9-edf995db5279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:76:c1:fc:d2:b0:37:6b:46:c2:e0:15:04:20:2b:df:c0:
         94:58:c0:35:34:50:c4:07:ab:58:4c:cb:7e:bd:25:8e:9e:80:
         73:bc:e1:9a:76:97:fb:cf:0a:98:6c:04:64:aa:b6:c9:ce:5b:
         a4:3b:5d:85:0b:df:2d:d8:e0:99:e4:a4:08:9b:c4:fc:ec:61:
         c6:ef:7a:41:4d:a9:5f:35:c9:e8:4e:6f:d9:45:6b:c4:0a:90:
         f6:9d:52:65:87:a9:ae:b4:fc:83:ec:33:aa:4c:29:7d:ac:8c:
         1d:62:ed:2a:97:ed:7a:60:ee:ec:de:9e:af:86:10:14:26:ea:
         0c:b5:7b:2e:db:04:d5:a7:8d:07:ba:91:f8:40:b3:7b:2f:63:
         8f:f3:8b:d7:be:4d:0a:d3:a5:fb:2e:7a:7a:e2:d2:fe:c5:7c:
         d6:01:e2:72:7d:77:31:c8:09:4f:9b:20:3e:34:ec:47:ec:e5:
         6b:99:88:f3:de:db:e4:1a:5f:df:40:ae:71:be:f5:9a:96:61:
         61:d6:75:b9:43:a7:bb:38:d1:b1:31:fa:da:59:cb:6a:6e:3f:
         2d:4a:87:53:fe:b2:00:4d:56:07:cf:cc:51:e7:c5:84:09:43:
         7b:d0:c7:0d:33:a9:1b:ac:b9:f5:01:b7:3b:44:a4:c1:12:2a:
         45:28:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:04:56 2025 by rpki-client