Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa
File:                     287b076d-3e21-3f90-9ba9-8db660a003c0.roa (raw, json)
Hash identifier:          nRBTqIpXx69+bQF+BfIEmjKresenpinwhD7CSPJIy+4=
Subject key identifier:   44:A1:5E:03:B2:43:6B:D1:C3:20:30:A7:56:05:85:AD:66:45:32:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0F193FBE82CA0335A64F4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     12222
IP address blocks:        2001:4878:a322::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f1:93:fb:e8:2c:a0:33:5a:64:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=920e0a7c-07ce-4677-bd26-02f2f2af35d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:06:3e:67:2b:d2:0e:b3:5d:48:02:03:66:
                    11:5f:08:43:f2:90:9c:eb:02:0c:ce:6f:25:a6:6d:
                    ce:ce:20:1d:05:02:f6:3c:9a:68:cf:ea:19:5e:88:
                    1c:07:65:da:ea:4e:20:51:95:0a:16:5b:05:77:b2:
                    94:c0:d4:72:df:09:a9:a3:54:1f:87:18:09:9f:46:
                    5a:9a:79:6f:fa:74:36:13:82:1a:97:4f:68:05:ef:
                    c7:cf:65:36:6e:1f:9c:0d:3f:48:b4:f3:6b:c1:1d:
                    a8:3b:82:c2:70:b7:80:91:3f:86:74:e0:9a:52:a0:
                    e2:08:01:ce:77:80:19:d1:6d:af:e1:f3:f8:ca:ed:
                    21:e4:0e:30:f4:f9:16:28:e3:f0:25:2d:8f:52:d5:
                    70:d5:41:3c:d9:56:0b:01:bb:c9:6f:59:1b:20:7d:
                    9f:c2:7f:f0:84:a7:84:e7:e7:f8:53:8d:d0:82:20:
                    fe:15:9c:7c:7a:15:64:0d:a5:ae:48:88:0e:83:ca:
                    ab:95:39:39:59:9f:ea:91:f1:bf:e9:96:f4:cc:cb:
                    58:0f:ff:84:07:2e:ac:d8:2d:1c:fd:41:53:eb:17:
                    c6:21:7f:95:31:1c:d4:d6:0b:62:33:2f:a2:cb:cf:
                    f4:21:7f:3a:1b:38:58:0d:fe:f8:cd:df:d3:32:9a:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:5E:03:B2:43:6B:D1:C3:20:30:A7:56:05:85:AD:66:45:32:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/287b076d-3e21-3f90-9ba9-8db660a003c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a322::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:24:95:22:14:f4:87:02:30:d1:71:8f:8d:7f:8e:9e:88:
         07:a4:b5:ed:ff:02:07:1f:05:a5:70:4a:da:5a:1b:6c:4a:5e:
         d9:fc:8c:7b:be:73:20:99:08:af:9e:53:53:cf:cb:cd:62:db:
         7d:a3:3a:ad:d3:8e:4f:0f:2a:09:ee:d5:70:00:05:3a:55:af:
         db:d9:f1:4a:cf:7b:c7:3b:88:c9:36:00:44:e0:42:22:c0:5e:
         2c:c9:3b:67:be:50:44:a7:0c:2d:f2:d6:a3:72:68:6d:bc:6f:
         e5:6f:b1:ee:29:35:44:2e:89:4e:24:ea:84:d8:c8:24:bb:c9:
         78:48:d6:85:1a:6e:6b:25:bd:1f:b8:a7:07:92:55:34:fb:16:
         16:c6:f7:00:c4:71:f3:ff:49:9a:02:5b:c6:49:b5:36:6a:fd:
         88:a1:95:99:90:ba:00:4a:23:1a:4a:d0:13:f9:98:6a:94:49:
         36:b8:8e:6c:a4:21:70:1d:9b:cf:c8:e0:96:b1:42:b6:8b:e0:
         16:94:9f:da:44:c2:17:04:15:ac:2b:ce:e5:2a:e7:26:ba:de:
         d8:dd:12:73:e5:f1:ac:18:61:c0:01:5e:be:74:e9:9e:8a:65:
         98:ef:ef:38:30:0c:c8:72:7f:e4:14:db:67:fe:4f:20:7c:ba:
         e1:ef:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:53:21 2025 by rpki-client