Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa
File:                     eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa (raw, json)
Hash identifier:          mAjK3553pYYUN3m9Ub8mlzPujrhDsPe568ntxBVJdro=
Subject key identifier:   C9:88:AC:75:1A:74:C7:21:F3:3C:7A:8E:FE:F0:6E:9D:B9:C8:68:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B9E07A4E59647A921ACA86600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     12222
IP address blocks:        2001:4878:2225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a4:e5:96:47:a9:21:ac:a8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=342c1fa5-b4a7-4f4e-93ab-3bd1f9dae523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:75:c4:1f:a0:59:04:a0:80:3b:95:36:e8:
                    20:c2:e6:c3:fa:05:5b:b8:75:32:2f:7c:0b:1b:9f:
                    9d:f8:1c:20:d3:02:5b:e5:80:b6:bc:8a:a4:9a:37:
                    f8:c3:35:3c:54:b2:4f:b9:1c:bd:0a:71:e9:ff:9e:
                    54:0b:ce:5c:51:ec:8c:33:12:d9:73:0d:8f:d8:a4:
                    77:2f:03:1b:4a:ea:79:58:40:d2:d1:1c:03:c7:e2:
                    8d:cd:22:71:dd:d5:03:77:d5:f9:0c:7c:98:7d:fa:
                    67:06:5d:5b:1f:fc:f3:e1:29:d9:b3:b4:bf:af:d2:
                    9e:fd:d2:ad:8c:04:8f:34:4e:4e:b2:a4:41:72:fa:
                    8e:10:9c:b8:2b:c1:a9:86:76:d8:19:95:3e:1b:5b:
                    04:72:98:93:d6:7e:58:66:98:22:1e:db:8c:f7:b8:
                    ff:00:7b:1a:60:2f:41:a3:e5:96:59:af:d5:75:03:
                    6a:78:28:5d:02:a4:5d:59:34:82:b3:cf:a5:d9:1e:
                    3e:38:43:4f:e7:47:98:85:59:0a:46:2c:84:fd:e3:
                    96:e7:90:81:f7:bd:3e:85:d0:b5:26:45:78:41:ce:
                    0f:4e:e6:54:63:54:de:76:3b:1c:d4:cc:79:a1:7a:
                    96:0f:1a:55:3a:35:9b:c8:40:91:76:0c:18:87:de:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:88:AC:75:1A:74:C7:21:F3:3C:7A:8E:FE:F0:6E:9D:B9:C8:68:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb90b759-2c25-3ea6-88ac-ac65de655e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:c5:18:d7:ab:94:97:41:87:3b:dc:50:42:32:eb:aa:c6:
         d3:9a:76:81:81:a6:04:29:6c:95:ed:2f:1d:09:bc:7c:57:56:
         92:11:6a:44:80:17:cc:4f:de:5b:a5:29:1f:e5:55:7e:58:e3:
         de:44:46:58:0a:aa:d1:d3:ce:20:32:fc:7d:87:2b:04:e2:7e:
         5c:aa:dd:a2:5b:26:71:b4:e9:c8:dd:37:eb:7e:22:b4:9a:e5:
         30:eb:cf:5c:5d:7e:25:a4:5d:d8:b7:fe:0e:c4:c1:30:7f:9a:
         57:ba:88:ff:34:43:f5:2f:4f:5a:9d:22:dd:50:0a:3b:6c:96:
         09:e3:02:dd:c2:fc:3a:8b:46:86:a8:cd:4e:48:a6:28:b8:02:
         2f:51:59:39:6b:b5:4e:dd:47:f1:6a:3d:4b:88:07:ca:46:ed:
         06:f1:b7:25:d1:ab:59:c2:18:0b:cd:4b:5a:a3:fd:c7:5a:69:
         5a:3d:9a:58:31:1d:c0:f7:2c:1b:5e:09:a0:2a:84:4f:37:b1:
         a4:7e:ca:dd:35:2d:3e:f5:70:7b:f7:0e:c6:6f:f4:39:10:5d:
         8f:63:fe:2d:8f:8b:91:b4:35:a4:01:85:79:61:89:08:65:aa:
         3d:a7:2b:60:e5:52:49:e8:8a:15:98:40:a1:86:7f:82:32:07:
         39:56:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:11 2025 by rpki-client