Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa
File:                     1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa (raw, json)
Hash identifier:          WPSZFixepsiz1uETTPzWnd7Eiz4ZR8tsniWIuyQ+Qe4=
Subject key identifier:   D6:39:F4:10:51:02:2F:92:80:61:2D:C1:38:1A:A9:4E:6E:69:EF:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC01639E925BF6E87D5EFDE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:a062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:39:e9:25:bf:6e:87:d5:ef:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=9fbc3ebe-54bd-4bdb-a50c-d792b1cb6265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:18:fa:8b:c2:5d:f2:19:4a:b6:b4:c0:85:
                    cc:0c:a8:5c:a5:ea:12:f5:a4:3e:47:dd:41:e9:3b:
                    39:0b:ea:3b:dc:d1:a9:20:35:c6:d5:aa:a2:98:00:
                    e2:54:c2:c1:24:dd:03:ee:0e:31:4f:5b:53:2c:f8:
                    7a:cb:c8:b2:6d:82:3e:3e:2f:14:4b:56:f0:e1:fb:
                    bd:8a:22:83:9d:8a:98:ee:83:87:e4:3c:3b:e2:ae:
                    58:81:9f:de:c1:f8:7c:c4:2e:65:56:b0:09:c7:6f:
                    65:28:25:d9:25:83:01:a4:a2:3c:73:c3:48:45:c8:
                    6d:f2:4a:f6:0d:cb:ab:95:c5:d9:8d:66:43:1c:54:
                    35:bc:63:93:4b:76:68:a3:f2:27:43:bb:a6:d0:ab:
                    83:70:cb:78:a3:0b:a6:e4:40:c1:4b:65:53:c6:cd:
                    a6:65:56:95:ca:39:ae:1d:90:4c:7a:72:09:07:1b:
                    07:1e:1c:18:b2:72:98:5b:03:cd:ce:e8:36:07:cc:
                    7f:2b:ac:2b:9e:93:eb:94:f1:19:e1:47:c6:c6:2c:
                    ba:91:81:b6:ed:54:98:93:a3:2f:a4:aa:b2:4c:fd:
                    7c:19:a7:27:4c:87:09:22:72:8a:68:a5:52:0f:1a:
                    dd:a7:a7:73:72:1e:d9:0a:43:18:b0:ae:56:e0:68:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:39:F4:10:51:02:2F:92:80:61:2D:C1:38:1A:A9:4E:6E:69:EF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:1c:3e:ed:c8:9c:c6:f5:6d:8c:d1:b4:c8:88:0b:bf:14:
         3b:38:6b:71:e4:34:68:3d:d7:1e:fb:7f:fb:7e:eb:4a:49:e7:
         70:40:34:b8:67:e2:53:9a:ae:24:df:c2:5a:06:bd:a0:d0:ae:
         a9:7e:e8:b6:61:4a:67:b6:d7:25:3f:41:d1:67:a6:a5:35:e1:
         c2:c6:67:c9:19:8d:32:c9:78:40:25:81:cb:b6:2e:ae:60:01:
         53:be:5e:e9:d8:77:85:e4:6e:9a:ca:01:24:36:ff:28:e7:6d:
         70:63:e8:2d:6c:00:3d:84:43:4e:fd:e3:9e:f1:d0:60:17:8b:
         ff:2f:ae:e7:5d:a6:e1:12:36:07:4b:79:40:58:96:ac:85:2c:
         63:52:05:89:31:53:06:cf:41:a2:c6:d9:ab:76:67:74:d3:c8:
         71:d6:b3:57:ff:52:90:5d:66:35:da:7a:49:da:03:40:66:c0:
         8a:ee:12:39:bf:93:3b:34:bb:bb:d7:09:af:5f:1c:03:9a:31:
         23:54:a3:03:fa:91:e8:b8:5e:d9:f7:42:f0:fa:bc:73:e4:b0:
         b7:99:93:ff:ee:ff:f6:f6:70:cb:2f:02:58:80:d6:bf:b1:5d:
         3a:fa:ef:71:98:46:df:e9:43:08:80:15:61:c7:68:76:30:1a:
         ca:80:de:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:43 2025 by rpki-client