Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
File:                     2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa (raw, json)
Hash identifier:          sLKwQJuFn/DO1bw8IFj8vUBphGmIwr4x62A7QH6gvBA=
Subject key identifier:   A2:3C:FF:F8:A2:5C:0D:6D:0F:DF:B2:3A:91:23:9A:B9:83:3A:C8:A8
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858494733E5DF36C4B9E62AD69600
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e5:df:36:c4:b9:e6:2a:d6:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=d72c3f0d-0a21-43cb-8a9f-ea3ee6f42a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:de:26:c3:cd:c9:3d:8b:c3:9b:a7:b2:e2:
                    7f:9e:ad:0a:fe:3d:4f:82:82:c8:0e:d2:7a:19:18:
                    66:11:4f:03:24:04:0a:4f:7b:67:87:85:fa:9a:45:
                    58:7a:25:fc:7e:35:22:ed:63:4a:01:88:b3:57:4a:
                    58:e5:39:6f:1d:18:67:39:95:db:d7:65:bc:67:96:
                    0b:bb:f3:48:8a:bf:e4:f0:7f:d4:36:e2:e1:72:82:
                    2e:f4:5e:d5:fe:3d:f8:60:17:3b:82:e3:01:e7:1e:
                    b4:57:93:5b:3e:b4:28:01:4d:b0:b2:0d:c3:0c:c3:
                    d4:d4:5a:db:13:c0:cb:48:74:6f:67:15:24:b2:d7:
                    a1:81:26:19:0b:0b:4b:ed:f6:0a:25:67:c4:bc:82:
                    fc:c2:5b:60:ae:cd:21:c4:3d:35:e7:28:92:aa:4a:
                    d0:e9:9b:6f:72:18:08:5c:9f:a0:25:fa:bd:c8:80:
                    a0:0d:d6:66:d7:cc:ae:a6:c2:e0:5a:5a:1b:7e:5f:
                    e9:d8:8e:6f:91:65:e3:ac:90:8a:62:b8:24:4f:87:
                    f2:b9:de:bd:d8:72:14:d3:dc:01:f7:67:74:32:3f:
                    02:eb:5d:10:d8:57:e0:d4:2d:b6:51:ca:ea:55:17:
                    c4:f5:be:30:9f:55:41:aa:99:08:b8:0e:b4:81:1f:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:FF:F8:A2:5C:0D:6D:0F:DF:B2:3A:91:23:9A:B9:83:3A:C8:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:49:09:df:bf:ff:9a:51:56:88:9c:e2:cd:0b:b3:78:c1:27:
         ca:5f:05:01:b6:15:ad:ee:58:86:1c:a0:4f:ad:32:9b:a4:d9:
         ce:cc:b3:76:cb:a3:dd:e5:b5:78:91:30:af:50:ac:f6:55:1a:
         96:fe:52:78:83:a8:84:bd:6a:f5:30:08:29:30:51:b7:82:c3:
         13:4e:58:d5:ab:5d:0b:30:ed:98:fe:62:e6:cf:f4:12:51:1a:
         20:35:40:13:b6:03:ea:e9:a4:21:1d:95:26:05:26:f6:eb:ad:
         2a:54:12:e5:9b:85:98:46:08:11:77:98:32:4d:a4:b9:86:37:
         79:f1:57:00:45:38:fe:d4:2e:89:a9:09:88:a7:6b:1b:db:67:
         d5:36:c9:80:9c:cc:f6:87:ab:c4:95:21:30:7c:b9:dc:c1:c9:
         d1:7d:e5:9a:43:c0:9f:31:9d:68:07:5e:0f:42:d2:41:e2:c8:
         0e:90:ab:4d:1a:57:1c:0d:f6:1f:f8:f7:fe:e3:39:cf:68:b7:
         dc:ec:c4:e3:2b:90:e3:8b:a2:6b:0e:8d:a3:20:14:72:61:0b:
         fa:b6:cc:a1:52:9e:fd:63:5a:3f:3a:bc:f2:c6:c2:ef:1c:97:
         21:da:c8:34:61:79:4a:a3:62:9f:07:5d:03:05:6c:b6:98:24:
         84:bc:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:58:21 2025 by rpki-client