Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
File:                     71d79ed5-be79-3077-ad29-924a1444f206.roa (raw, json)
Hash identifier:          bReh1o6hQb1nLAHdbZ8uuje5Wmf9+Dt3z+xzXsCSFMI=
Subject key identifier:   93:30:85:F9:1F:8B:BA:0D:1C:1C:EF:7F:51:A6:B6:EF:17:4F:CD:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0F46C9B5A26A5A480E600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     12222
IP address blocks:        2001:4878:c347::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f4:6c:9b:5a:26:a5:a4:80:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=5bea1eb7-317a-4591-84a3-bb94da2b54d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:d1:60:ec:ad:5e:eb:2e:60:31:48:38:f1:
                    73:cf:af:fd:77:94:b6:1e:ce:34:9e:23:38:c2:f8:
                    28:6d:a8:0e:aa:76:e0:cb:92:77:82:33:1f:80:9b:
                    25:90:31:cd:94:27:05:87:a1:f6:5c:bb:81:48:e0:
                    38:0b:91:eb:f8:71:7b:b7:f1:05:6e:50:a2:eb:22:
                    05:5a:06:9b:30:9a:1f:b5:6f:d4:b8:ce:e8:43:ff:
                    40:aa:94:8f:02:f8:6c:5c:95:f6:c9:25:25:df:47:
                    58:f5:02:ba:00:22:1b:e6:61:88:87:cf:89:94:58:
                    3c:b8:13:6f:9f:6e:d8:58:36:9d:6c:0f:ba:93:09:
                    ec:94:3b:f4:47:d4:a7:0e:ea:a6:77:d6:d1:99:33:
                    c2:c3:30:ee:40:5b:99:ee:b9:4a:b7:23:24:7b:4c:
                    6a:75:2c:db:6b:43:01:22:c7:61:b9:7b:9e:ab:00:
                    34:0e:e8:ad:2a:77:bd:c7:6f:3b:00:b1:22:91:18:
                    c8:be:67:e6:ba:4b:90:03:5d:32:0c:8d:3e:80:81:
                    8e:4a:d6:53:35:6d:08:f0:eb:58:81:e4:e7:11:b1:
                    1d:0a:1b:e3:ba:bc:5f:67:98:43:6b:df:8b:cf:34:
                    85:46:d6:d9:d9:68:8c:83:4d:04:08:ee:04:81:20:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:85:F9:1F:8B:BA:0D:1C:1C:EF:7F:51:A6:B6:EF:17:4F:CD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c347::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:fe:77:57:a0:fe:16:d8:60:92:30:68:0b:7a:b6:c8:49:
         a8:45:25:f7:77:3a:d5:0d:84:d0:7e:56:87:ca:f2:15:5a:8a:
         4a:e9:aa:dc:6a:91:32:6e:1b:01:14:b4:df:3b:12:b0:28:6d:
         0a:b4:f3:c9:69:1b:4e:1c:ec:be:96:c4:c5:5c:fc:ac:9d:ca:
         b9:f6:ce:97:c6:5d:ac:20:e6:79:19:61:b3:a2:2f:cc:33:67:
         95:9a:5d:fc:cf:ab:bb:c5:f4:3b:df:3c:cc:26:30:e7:cb:bf:
         2b:f0:6e:dd:15:c1:d5:7e:c6:89:a2:46:02:0a:b2:2b:12:91:
         54:37:95:31:87:54:c3:79:61:3e:b4:f8:63:7c:a7:6f:48:20:
         e1:87:b1:d7:b5:f9:28:0a:a1:d4:1a:8e:e8:8b:84:27:eb:59:
         84:8f:d8:03:d6:9c:5e:fd:ff:a5:40:c3:10:b0:0c:20:58:ca:
         36:bc:cc:36:b5:43:18:6a:84:ea:5c:a2:6d:b8:fe:5d:d8:84:
         8c:fa:cf:05:b6:76:6d:00:e5:a8:b8:f7:ca:7b:47:2b:9b:81:
         a2:e4:de:15:be:03:53:73:f4:57:cd:f3:c8:d5:95:73:93:c6:
         c4:4a:e9:ff:69:c8:ac:bd:98:34:7a:ff:fe:39:79:65:cb:5c:
         24:93:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:14 2025 by rpki-client