Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa
File:                     d9ff0c2e-878a-3253-8f86-4d25cba06841.roa (raw, json)
Hash identifier:          IXhD204XTr+JrACRmYsVNDC8HrJ14QrlUWK5cRVOkDI=
Subject key identifier:   F6:16:1B:81:D2:18:71:88:72:F7:A4:FF:21:A3:8A:79:E6:C2:AD:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B876C482AA5EBEAE8B800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:4347::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:87:6c:48:2a:a5:eb:ea:e8:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=474e966a-cd3e-42d9-8953-f4f61a9bcd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:9d:c9:98:04:54:17:eb:92:2c:c7:0f:a4:
                    5b:75:7e:ef:d9:a1:9f:b6:d2:e9:8e:80:22:c0:83:
                    0c:a2:d0:c3:92:e8:02:81:67:c4:ae:66:aa:82:81:
                    29:6f:b7:15:15:12:6b:71:ce:9d:1e:d6:e4:eb:a6:
                    40:8d:db:e9:32:49:b8:85:0b:60:25:52:80:a8:cb:
                    0b:a4:17:69:2c:00:a8:72:5f:cd:64:7a:e3:30:b2:
                    48:35:59:1a:85:69:d3:d7:d5:bd:10:32:45:9f:78:
                    f7:08:2f:5a:11:ab:0e:ea:a9:30:94:43:a6:0a:33:
                    86:d6:98:d8:b1:d5:7e:c4:c6:da:a4:f5:a7:ae:ba:
                    51:a5:06:4e:0f:d6:03:dd:c2:2b:3e:0f:fa:18:61:
                    05:47:00:3d:c1:2c:36:8d:18:60:c5:e0:8a:89:79:
                    e3:8c:80:85:93:26:2b:95:f6:0a:29:2c:e2:53:7a:
                    8c:6e:54:24:84:84:05:8a:08:08:3d:25:d7:b0:e5:
                    ae:a9:b1:22:fb:7c:0f:a3:f5:7f:11:cb:3b:b3:df:
                    9b:cb:02:f9:44:97:d0:84:b8:fc:c0:ec:7f:e6:7e:
                    42:07:91:ba:81:fb:3f:ec:f6:1f:13:ba:97:4e:64:
                    a1:61:4f:5d:d8:4a:78:d1:c8:15:b3:14:4b:03:94:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:16:1B:81:D2:18:71:88:72:F7:A4:FF:21:A3:8A:79:E6:C2:AD:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4347::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:94:e7:80:1c:af:41:bd:79:6d:f5:ae:a1:b7:04:a2:32:f0:
         42:17:90:80:28:e3:c6:99:b2:1f:90:60:24:f7:78:d0:e9:f6:
         2a:cd:34:29:4e:47:d3:90:15:ba:82:55:d6:7c:27:07:ae:4d:
         4e:10:55:48:ad:3f:f4:97:85:94:d9:90:53:25:df:30:65:21:
         31:fc:34:01:94:66:fa:7b:a5:f2:71:e2:42:fb:9f:2b:df:80:
         43:51:67:36:eb:5e:d3:9c:5d:df:b5:88:b7:0b:c3:da:bd:49:
         a0:1c:d2:f2:9b:1f:03:dc:64:a0:31:d1:8a:dc:30:64:bf:89:
         cb:8f:97:34:29:38:01:0f:e6:40:03:c8:b7:c3:0b:2e:89:31:
         97:c5:6c:ac:dc:53:5e:67:95:29:4b:ec:00:96:82:fb:eb:26:
         d1:68:a2:cc:96:a4:d3:08:ca:45:9a:35:3b:e0:78:39:b6:aa:
         31:b6:c0:cc:5b:d6:09:12:13:a0:a9:52:f8:6e:b8:56:ce:a2:
         8f:33:1b:6a:b4:e4:e8:59:98:ca:39:98:af:8a:e2:2c:b7:91:
         2f:e6:e1:bc:56:d7:13:af:44:f2:e0:3b:a0:fa:5a:11:bd:15:
         68:ee:a8:ff:3d:1d:89:e2:8e:2f:77:64:40:c7:11:7b:b5:a6:
         b7:0c:ed:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S4dsSCql6+rouAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NDc0ZTk2NmEtY2QzZS00MmQ5LTg5NTMtZjRmNjFhOWJjZDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZqdyZgEVBfrkizHD6RbdX7v2aGfttLpjoAi
wIMMotDDkugCgWfErmaqgoEpb7cVFRJrcc6dHtbk66ZAjdvpMkm4hQtgJVKAqMsL
pBdpLACocl/NZHrjMLJINVkahWnT19W9EDJFn3j3CC9aEasO6qkwlEOmCjOG1pjY
sdV+xMbapPWnrrpRpQZOD9YD3cIrPg/6GGEFRwA9wSw2jRhgxeCKiXnjjICFkyYr
lfYKKSziU3qMblQkhIQFiggIPSXXsOWuqbEi+3wPo/V/Ecs7s9+bywL5RJfQhLj8
wOx/5n5CB5G6gfs/7PYfE7qXTmShYU9d2Ep40cgVsxRLA5S85wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPYWG4HSGHGIcvek/yGjinnmwq1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlmZjBjMmUtODc4YS0z
MjUzLThmODYtNGQyNWNiYTA2ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeENH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSU54Acr0G9eW31rqG3BKIy8EIXkIAo48aZsh+QYCT3eNDp9irN
NClOR9OQFbqCVdZ8JweuTU4QVUitP/SXhZTZkFMl3zBlITH8NAGUZvp7pfJx4kL7
nyvfgENRZzbrXtOcXd+1iLcLw9q9SaAc0vKbHwPcZKAx0YrcMGS/icuPlzQpOAEP
5kADyLfDCy6JMZfFbKzcU15nlSlL7ACWgvvrJtFoosyWpNMIykWaNTvgeDm2qjG2
wMxb1gkSE6CpUvhuuFbOoo8zG2q05OhZmMo5mK+K4iy3kS/m4bxW1xOvRPLgO6D6
WhG9FWjuqP89HYniji93ZEDHEXu1prcM7XY=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:23 2025 by rpki-client