Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa
File:                     168d0712-652c-3b31-887b-e8dec5e2fc2d.roa (raw, json)
Hash identifier:          YGzCwm5GySfBqfGQjqSrGcWwJwGIQUZO10nn6/iNEWc=
Subject key identifier:   ED:4E:AC:6F:B1:EB:E0:7B:A1:A9:F0:3A:0A:CB:3D:61:C4:11:57:83
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849CE9A62AB7464C8097802AE80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:62:ab:74:64:c8:09:78:02:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=73f67244-4820-4bf0-bfb5-f6968cafb0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:ba:03:58:10:cf:2e:0a:88:13:b4:40:df:
                    45:af:39:da:61:2a:ea:46:c5:23:b2:64:4e:17:1d:
                    36:35:b3:13:92:76:ba:ae:bb:38:3a:5d:31:27:c3:
                    f6:f2:a3:2c:8a:ca:60:38:21:40:9b:58:b6:2c:e5:
                    a7:f1:1f:47:55:e7:b9:c2:5c:2f:92:16:44:cc:cb:
                    28:0f:75:f7:07:b0:c2:a2:d9:e0:c6:8d:dd:22:e4:
                    2c:f5:38:02:a4:fd:0c:81:26:6e:32:26:ca:0c:ae:
                    e5:e6:cc:1d:1e:36:cf:8b:b2:eb:67:f3:3d:65:85:
                    8b:a2:68:de:74:ed:79:af:af:c7:8a:12:20:86:2c:
                    ae:80:50:18:63:25:08:9a:91:3b:3c:1e:38:dd:34:
                    e1:b4:de:17:b4:35:ed:1e:91:e3:01:dc:37:6b:5e:
                    d6:24:1e:ba:68:29:34:5a:aa:47:53:66:01:37:3a:
                    f9:ce:43:b6:8b:8e:93:cf:d6:b2:4e:ba:ea:54:0a:
                    54:33:ac:54:6b:85:45:1d:98:3a:e9:48:88:e4:37:
                    2e:31:79:55:a5:3d:bb:7e:f4:97:6e:a1:ba:71:2f:
                    7a:86:41:db:78:2b:a9:8a:4d:dd:c6:ff:73:f6:dd:
                    f3:3d:22:fb:87:45:85:34:54:9a:7c:c7:14:50:dd:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:AC:6F:B1:EB:E0:7B:A1:A9:F0:3A:0A:CB:3D:61:C4:11:57:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/168d0712-652c-3b31-887b-e8dec5e2fc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:94:fe:95:fd:a5:cf:ba:75:ab:e1:7d:d3:db:8f:72:d1:
         b3:1a:bf:0c:c3:41:75:5b:0a:3e:ca:19:c9:04:e1:6f:c7:01:
         08:c0:66:83:4a:47:da:a4:4a:26:e8:86:1d:e7:a5:e5:29:e6:
         01:17:31:e0:e2:af:7a:e9:8b:de:41:07:82:12:28:d6:ce:99:
         fa:a5:db:5d:1d:2a:13:76:9a:f8:97:5c:5e:47:9e:58:4f:d0:
         39:c5:b1:00:ad:1e:b7:92:29:4d:46:3b:7c:36:89:bc:ac:b2:
         5b:cf:7f:fb:a6:32:bf:cf:fc:17:fa:50:82:6e:3d:cd:85:99:
         5e:53:23:a7:41:91:40:5b:ac:f1:89:c7:b6:e3:37:1b:15:7f:
         30:82:e4:07:ae:69:ad:d9:15:6d:df:81:da:68:2d:3f:43:f9:
         8c:4f:2f:40:fa:66:64:62:3a:0d:4d:65:8b:d3:4a:7f:10:7d:
         91:a8:cb:fc:d5:d2:f6:76:ec:bd:86:f1:23:63:31:b4:79:cb:
         21:1f:7a:26:56:ec:fb:63:02:6b:84:b6:f6:ba:7f:de:bf:6d:
         22:3b:1b:0b:73:36:9b:df:c0:ed:ee:be:47:b8:42:69:70:42:
         96:ce:fb:e6:16:63:5e:7e:ee:d1:71:c5:b2:d1:fc:d5:14:16:
         e0:18:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:51 2025 by rpki-client