Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
File:                     2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa (raw, json)
Hash identifier:          keLklTGZqxiZ/3vDtXIWIY/YEWCS3IIWjLc7qxdO+88=
Subject key identifier:   56:D4:2C:B7:9F:E2:27:95:48:54:BB:E0:DE:0C:98:7D:6C:EC:44:D3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849CE9A681596B8D8FB5E8ED4C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:68:15:96:b8:d8:fb:5e:8e:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=fd1ee746-003e-4a00-80ba-33fb8989e703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:ee:dd:42:f1:e4:21:71:61:b9:be:f2:d7:
                    90:be:6c:26:4e:1a:96:70:3e:42:60:7e:25:f2:48:
                    98:ec:2e:38:a1:e9:b0:38:88:bd:4c:3c:aa:a2:2d:
                    05:27:23:fa:cb:22:10:c1:78:d0:c5:26:71:33:f1:
                    a8:a4:ad:35:dc:3e:c3:c8:74:27:16:7e:89:2c:f5:
                    3a:41:88:49:c8:6b:dd:64:4e:ac:40:84:33:c3:6a:
                    1b:18:8f:0e:b4:19:bc:96:c9:0e:91:87:a4:64:43:
                    c4:57:f0:6b:ac:d4:bb:f4:0a:1a:16:4c:5d:e3:69:
                    a6:3c:2c:f0:fa:71:34:01:36:03:bf:1f:9a:d7:5c:
                    b5:f0:ae:21:76:2d:0a:ad:86:19:f1:f2:57:65:37:
                    9d:95:0a:10:e1:4a:8b:4f:e6:f3:b5:ce:28:36:eb:
                    a6:2d:b5:fc:cf:b6:a4:10:86:c0:c8:89:65:c8:3e:
                    e1:83:ca:1b:53:cc:fd:de:3f:a5:ce:01:b5:26:db:
                    1e:ba:63:58:5e:51:54:36:d1:44:63:89:2d:b3:59:
                    9c:d2:8e:3a:0a:f5:22:86:72:76:bc:11:42:1e:8a:
                    c0:6c:66:9e:a0:35:20:10:0b:9e:fa:bc:f7:36:01:
                    03:d4:4d:5a:0f:76:8f:8d:0e:48:c5:28:1a:9f:6e:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:2C:B7:9F:E2:27:95:48:54:BB:E0:DE:0C:98:7D:6C:EC:44:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b1:32:15:c9:b3:9e:ca:fc:79:3c:b6:29:4b:b1:f6:34:ce:
         d0:cf:63:7b:55:99:80:8a:d6:a3:8a:c1:2d:75:9d:ea:9d:80:
         b8:53:bb:d3:f3:c6:9f:55:de:40:f8:01:af:7a:b3:ff:98:7f:
         ed:17:7a:ff:01:65:5a:eb:ac:44:a9:18:24:05:68:c5:6d:85:
         5a:b2:86:dc:8d:60:6a:a8:c4:dd:61:16:39:2e:92:8b:9d:e4:
         93:15:53:5d:96:31:5d:ff:f1:1a:00:b3:fc:6b:ff:e0:42:f8:
         03:58:aa:16:b7:54:95:e1:46:4a:5d:e5:97:b0:ab:df:2c:8e:
         24:5a:1b:ce:17:6b:37:9c:67:05:f3:68:10:b0:81:86:91:7d:
         9e:54:1a:35:13:51:93:42:80:46:19:7d:a5:10:46:6b:74:89:
         cb:31:bf:69:82:37:d4:67:f5:a2:46:a5:21:00:f4:f2:f7:99:
         a8:fa:aa:d9:d4:c1:0e:0e:cf:b2:3c:52:09:25:11:7e:65:45:
         e6:64:c6:99:1c:42:ee:3c:01:20:64:09:68:05:e5:f4:0e:de:
         bc:e1:d5:fe:c1:75:f9:3a:0a:0b:80:2a:9f:82:ca:3e:b9:81:
         93:55:4e:ae:fa:cb:fc:b2:88:03:df:10:6f:7e:b3:c2:bb:f5:
         d8:98:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:06:47 2025 by rpki-client