Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa
File:                     02061650-4205-329f-8437-e8718585f934.roa (raw, json)
Hash identifier:          JnNYNuwik0ufaH+CDiedEj5dTKo7Wp7+HITbxTzJwA0=
Subject key identifier:   76:58:74:AA:82:C5:71:54:9A:BA:A5:ED:E8:C6:F1:C4:01:E1:95:FE
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849CE9A6824377EF0DC7E980CC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:68:24:37:7e:f0:dc:7e:98:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=dccce563-d7e1-43de-b6c3-d512447de71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:dd:9b:1e:7a:8f:c2:ef:2a:d3:05:80:74:
                    e6:7a:56:03:62:f5:29:cb:5f:35:c0:96:fb:58:41:
                    3b:40:e0:a0:f8:3c:c6:65:06:24:c1:9b:1a:14:2a:
                    3a:c0:5b:4b:b6:c7:d8:41:82:29:d9:c5:90:8f:9b:
                    96:f5:7c:c1:5c:a0:f4:c3:cf:eb:e6:a1:fa:4a:01:
                    24:06:67:13:35:d5:e7:e9:0d:07:ec:0a:21:d7:5a:
                    ee:5e:dd:f7:d5:a7:90:12:31:0a:45:c6:d2:dc:19:
                    e9:d8:22:3b:b4:5b:f8:71:f2:d1:85:37:29:b3:f8:
                    2e:8e:47:82:5a:a1:ae:95:5f:07:00:f9:46:51:c0:
                    ae:82:f0:df:e6:8c:46:37:2f:a3:99:97:65:05:97:
                    43:27:83:76:6c:b3:4a:3b:ce:54:b2:ec:94:54:15:
                    17:70:e2:8b:30:74:39:31:0b:61:5d:f9:53:7b:f8:
                    ce:37:f2:f7:c5:58:d8:48:d4:71:91:16:4c:71:08:
                    e8:d2:1b:9d:c8:b7:43:ab:26:8f:a6:c7:5a:ef:32:
                    34:55:2a:f6:6c:aa:10:8b:de:ec:40:d0:34:da:57:
                    01:eb:c4:be:e3:43:33:da:d2:8d:06:ad:09:d4:00:
                    ae:7a:b0:f6:bd:4b:40:46:5e:15:f4:6f:3f:1e:ee:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:74:AA:82:C5:71:54:9A:BA:A5:ED:E8:C6:F1:C4:01:E1:95:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:dc:6e:c6:3b:c2:b8:9f:87:4f:10:59:5b:a0:d3:fa:e9:
         29:ee:7a:9b:86:c9:93:29:5d:5f:5d:af:b5:a4:f3:a3:11:93:
         ab:64:6c:79:e4:9d:4e:bf:f9:5b:f5:d4:c1:1a:af:64:37:5e:
         b3:cd:cb:ce:a9:77:fb:fd:7b:fc:73:c0:47:73:10:cb:ff:9c:
         7a:61:ef:d4:17:b4:ee:40:5e:a6:59:4e:f4:c0:f3:c8:2a:d3:
         d1:a8:d5:62:5f:49:b4:59:fb:8f:6f:d5:d9:fe:01:b9:85:df:
         ab:87:81:b3:e5:ba:01:06:5e:c6:a6:6d:da:a6:c1:31:e1:7d:
         c8:a6:56:96:8d:55:bb:f1:75:eb:c0:71:9f:cd:d1:43:76:af:
         25:ae:42:a5:95:ee:eb:99:5a:6b:db:f7:af:39:4e:2f:a2:91:
         9d:04:d5:c3:44:9c:7c:1c:8d:e1:68:68:96:be:46:39:b3:42:
         5e:33:e6:08:86:e4:f9:3a:ba:b1:ae:d1:1b:de:79:73:08:e0:
         e5:8e:d9:a4:a3:c0:c3:a6:07:5b:96:a8:10:d9:d4:2f:11:f5:
         31:0e:fd:f8:a1:e2:10:1c:88:67:30:97:af:63:fd:c1:53:b1:
         55:e5:0d:18:0e:54:b4:7f:0b:36:b3:db:9a:95:dc:76:c4:c7:
         75:29:26:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmgkN37w3H6YDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
ZGNjY2U1NjMtZDdlMS00M2RlLWI2YzMtZDUxMjQ0N2RlNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfbdmx56j8LvKtMFgHTmelYDYvUpy181wJb7
WEE7QOCg+DzGZQYkwZsaFCo6wFtLtsfYQYIp2cWQj5uW9XzBXKD0w8/r5qH6SgEk
BmcTNdXn6Q0H7Aoh11ruXt331aeQEjEKRcbS3Bnp2CI7tFv4cfLRhTcps/gujkeC
WqGulV8HAPlGUcCugvDf5oxGNy+jmZdlBZdDJ4N2bLNKO85UsuyUVBUXcOKLMHQ5
MQthXflTe/jON/L3xVjYSNRxkRZMcQjo0hudyLdDqyaPpsda7zI0VSr2bKoQi97s
QNA02lcB68S+40Mz2tKNBq0J1ACuerD2vUtARl4V9G8/Hu4C+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHZYdKqCxXFUmrql7ejG8cQB4ZX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMDIwNjE2NTAtNDIwNS0z
MjlmLTg0MzctZTg3MTg1ODVmOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAui3G7GO8K4n4dPEFlboNP66SnuepuGyZMpXV9dr7Wk86MRk6tk
bHnknU6/+Vv11MEar2Q3XrPNy86pd/v9e/xzwEdzEMv/nHph79QXtO5AXqZZTvTA
88gq09Go1WJfSbRZ+49v1dn+AbmF36uHgbPlugEGXsambdqmwTHhfcimVpaNVbvx
devAcZ/N0UN2ryWuQqWV7uuZWmvb9685Ti+ikZ0E1cNEnHwcjeFoaJa+RjmzQl4z
5giG5Pk6urGu0RveeXMI4OWO2aSjwMOmB1uWqBDZ1C8R9TEO/fih4hAciGcwl69j
/cFTsVXlDRgOVLR/Czaz25qV3HbEx3UpJpI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:55 2025 by rpki-client