Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
File:                     212b7173-baeb-33dd-9326-2a6b0e137290.roa (raw, json)
Hash identifier:          Nxb1dnkquWmjy2HvYQTiBJHMptbFC4J1cXduBPlWb2M=
Subject key identifier:   46:BA:83:06:AC:B8:85:DD:C9:2C:FF:23:F0:93:76:5D:11:E6:B9:52
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858498E648CEA83A865144F83FE00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:f201::/48 maxlen: 48
                          2606:bc40:f202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8c:ea:83:a8:65:14:4f:83:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=682a7dd1-4b14-48d1-a63f-2578774e437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:0a:43:31:a6:52:92:53:b3:31:42:7f:e0:
                    3f:37:54:d4:8c:39:48:1c:0f:f4:de:c7:b1:fa:05:
                    54:de:5e:4c:d8:30:7d:0a:12:73:3b:43:23:8e:bd:
                    8b:a4:28:62:7e:14:e1:07:d4:45:a0:4f:de:86:d0:
                    83:ff:bb:10:29:43:57:54:8b:33:24:c9:c9:ff:d2:
                    90:9b:05:5c:d2:23:6a:c4:08:bb:ac:e2:f2:8b:01:
                    96:b9:27:0b:87:71:0e:47:27:ae:5d:88:48:a7:a1:
                    bf:48:ae:e6:fb:73:c5:40:7a:54:15:85:18:30:7b:
                    9d:98:56:dc:a0:0a:73:f1:99:ac:fb:e3:34:44:29:
                    fb:94:c7:f3:5d:06:c5:9a:5d:c2:31:bc:7d:f3:7d:
                    46:a3:9b:c9:0a:d1:a8:12:d0:80:30:38:29:7e:04:
                    70:c8:3f:6a:72:d4:46:98:f4:ae:7a:de:3a:14:ce:
                    ef:e2:0e:df:4e:01:ff:4f:54:bc:2d:13:2f:44:b6:
                    a0:9d:4d:72:66:e1:9c:86:80:e1:56:b2:01:17:9a:
                    7b:1d:a8:89:f2:8c:57:58:1c:56:4a:a5:01:68:61:
                    fa:63:69:e9:de:c9:64:66:88:d9:02:30:bb:5e:35:
                    c3:43:e5:ae:b6:d7:36:42:be:be:a7:2d:dc:4a:f1:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:83:06:AC:B8:85:DD:C9:2C:FF:23:F0:93:76:5D:11:E6:B9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f201::-2606:bc40:f202:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:b6:4c:1e:4d:4e:f4:49:9e:44:d4:c2:2d:cf:38:8f:e5:
         a3:d8:f6:20:cd:8b:dd:95:fc:bd:23:74:e4:81:dd:99:94:5e:
         82:1a:8e:ec:ce:3a:1d:68:82:f3:0e:c9:a9:7b:7f:74:84:8c:
         cf:80:93:8c:04:5a:c5:ad:5a:a4:62:44:07:ff:66:b4:64:ac:
         67:58:29:ee:94:10:31:f6:4e:f4:55:d5:38:83:32:fa:3f:b0:
         09:4f:b0:cc:d9:5e:e9:4b:b3:fe:fd:b5:30:55:67:ae:83:0b:
         d0:b6:8c:1b:8a:e9:0d:88:14:f7:91:d2:26:a9:a0:3a:df:84:
         c1:ad:92:59:82:5c:bf:44:67:be:06:75:1a:df:bb:6b:ba:0e:
         8a:7c:74:1b:23:b7:af:12:b0:ad:4e:63:25:fb:d2:4c:39:58:
         e0:97:82:cd:fc:93:b2:73:64:59:80:a6:6e:4a:c2:dc:15:bd:
         19:15:15:3b:02:0f:55:92:d1:bf:02:d1:25:50:bd:0c:b7:bf:
         7c:de:22:2e:39:41:0b:38:0d:66:a6:44:a1:a1:17:54:a2:04:
         3d:42:2c:44:69:d5:7c:57:d8:16:cd:26:3b:e5:aa:e7:bc:f0:
         8e:be:df:dc:97:ce:b9:b2:4d:b0:39:d9:94:06:49:a8:83:b8:
         16:ec:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:08 2025 by rpki-client