Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea2e0bb-7fe7-3fb1-abe3-a3b4ff1775c7.roa
File:                     4ea2e0bb-7fe7-3fb1-abe3-a3b4ff1775c7.roa (raw, json)
Hash identifier:          n8yUD/keAsey55zy3l+R/BjnJt6l7LpzUjEeH9CuFSM=
Subject key identifier:   2C:9C:9A:C5:38:47:F8:DA:F0:D6:E0:51:FB:64:7C:A7:A7:39:E3:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC0162DFC8E7C2027EBCC83D4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea2e0bb-7fe7-3fb1-abe3-a3b4ff1775c7.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     12222
IP address blocks:        2001:4878:8220::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:2d:fc:8e:7c:20:27:eb:cc:83:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=4c947b8b-88f4-4ac6-85ef-bd9396dd2616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:9f:70:3e:a1:b5:07:cd:f4:86:81:c1:e7:
                    60:ea:5e:52:61:63:5b:ff:0f:cd:3b:23:f7:07:2f:
                    5c:78:e7:1e:77:04:6a:b2:51:02:51:7e:d9:23:05:
                    b2:e1:e1:78:a8:18:16:73:dd:3a:36:a0:08:bc:32:
                    3d:29:fe:b3:ad:de:2d:7d:24:19:8a:80:c4:5d:1f:
                    9b:5d:bb:07:5b:58:1e:00:ea:dc:29:63:0d:4b:97:
                    1a:76:74:d5:a0:4b:21:d9:6b:b3:c5:07:e1:3d:3f:
                    fa:b3:56:c1:e2:d3:92:d1:7c:31:2e:b7:56:0e:36:
                    91:a5:14:f2:a8:38:74:c1:5c:01:4f:6e:88:46:1c:
                    6d:6c:bb:dd:54:d6:8d:44:02:73:0f:d7:fe:91:cc:
                    dc:94:f8:75:a9:99:ed:0b:37:fa:22:20:08:37:80:
                    c2:0d:75:89:a6:cf:0b:0d:26:e2:28:ab:2a:9c:73:
                    33:86:eb:9e:1c:b3:4a:d8:06:8e:de:d3:f0:d1:98:
                    e6:31:f0:e5:76:bf:5c:d3:59:5a:14:80:65:53:d2:
                    a4:92:ea:8a:8c:56:d0:88:62:64:8e:ba:1e:6c:67:
                    89:01:0b:5a:7e:f6:eb:e5:a9:ee:09:29:af:64:1a:
                    d8:4f:de:63:c4:ed:fb:8d:3c:91:cb:4c:a7:6b:52:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:9A:C5:38:47:F8:DA:F0:D6:E0:51:FB:64:7C:A7:A7:39:E3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ea2e0bb-7fe7-3fb1-abe3-a3b4ff1775c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:51:1d:9d:7e:69:95:29:7b:48:3b:97:8d:c6:01:a1:4f:
         b9:c3:81:8d:11:0f:b2:d2:f2:c0:34:70:42:21:24:2d:9c:86:
         d3:b4:7a:57:1c:70:07:f9:26:fd:d3:9d:bf:4e:2d:80:aa:ca:
         ba:f8:00:e7:aa:d4:d8:a0:a7:92:65:c8:e5:c3:75:86:a3:21:
         95:12:b0:b4:45:2e:b1:b9:b5:13:1a:62:05:00:b1:05:66:1d:
         34:df:7e:2f:10:f7:c5:36:cb:89:cc:68:b8:36:e6:77:dc:96:
         b9:e1:ef:14:5b:c5:0c:8b:09:37:97:ce:96:39:4c:8f:41:09:
         33:ec:6c:19:77:00:5b:37:90:10:b5:a2:af:15:fa:7d:87:15:
         0b:c8:d1:6b:31:9d:c2:3b:6a:21:b9:87:4f:85:12:c6:55:de:
         2a:ab:13:5c:2e:f7:aa:d2:fe:04:34:85:80:8e:0c:ec:c6:24:
         d5:6f:0d:ac:a2:34:e3:4c:2f:51:2d:fb:d7:5e:f8:b3:e2:bd:
         70:7f:78:6f:4a:5c:9b:f2:23:69:3f:31:67:92:4a:1c:cc:e3:
         d5:b9:5d:96:d8:2e:9f:2f:30:6e:59:ac:71:76:91:a3:9a:64:
         89:c4:89:6e:7e:0e:c0:86:cf:53:d8:f2:d2:2d:c3:69:a6:93:
         ac:e7:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:55:58 2025 by rpki-client