Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
File:                     5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa (raw, json)
Hash identifier:          SubqsxqIlehZKzkmkbtenfWUCKB9SiQRIuQDT+0YNlk=
Subject key identifier:   C2:B3:1B:BB:00:CD:30:8D:8E:BE:FE:CB:79:A0:C5:12:FB:B4:42:0D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849E7BA822E5DDAD78BA3358F00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     20253
IP address blocks:        2606:bc40:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:82:2e:5d:da:d7:8b:a3:35:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=fd1a14ba-1484-4c97-a28a-25a068b7d0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:4b:0f:ac:68:dd:8e:5a:ab:57:81:99:e2:
                    4b:10:9c:15:66:10:c3:82:92:02:14:39:fe:c3:4d:
                    83:85:da:43:73:d8:0f:37:56:8f:fc:da:3a:46:6d:
                    01:d2:b7:cf:5a:0e:d9:e6:9c:8c:d7:1a:1b:77:c8:
                    11:ba:a4:8d:63:f7:3e:44:5a:0c:ae:66:1e:3a:20:
                    dd:73:4e:32:17:b4:15:6b:d3:0e:1b:33:03:e3:7b:
                    6c:4d:6a:40:e8:69:46:6a:e1:a1:67:b4:80:c5:a3:
                    33:1c:47:93:37:f3:2d:a4:3e:79:38:2c:c8:e9:23:
                    f4:23:43:42:cb:9e:25:22:4e:2c:01:a7:f2:95:bf:
                    3d:fd:db:15:8e:a9:e1:ee:45:a7:40:77:ac:f1:ff:
                    c2:ce:15:66:13:f7:87:46:6c:54:80:9f:58:68:17:
                    ec:a4:51:c2:fd:4a:9b:9a:b5:41:76:1c:4e:66:14:
                    18:02:51:8c:26:19:8c:fe:2b:d5:4b:4c:b1:79:e7:
                    76:55:d4:8e:29:87:00:c3:fc:9a:81:fb:a3:d7:aa:
                    af:d9:cc:a9:65:51:30:b0:e8:bd:d8:8e:29:5f:49:
                    3a:12:81:58:0f:b9:29:52:dd:3d:e3:25:ed:79:c6:
                    fa:89:d5:c6:e3:37:c3:d7:76:fc:6f:c2:fa:f2:d0:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:1B:BB:00:CD:30:8D:8E:BE:FE:CB:79:A0:C5:12:FB:B4:42:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:f6:d0:fd:9c:9d:af:24:42:45:48:1c:f6:ef:68:34:4a:
         0e:ba:54:c3:95:28:c0:f3:cf:f2:c0:cb:ae:45:3a:18:1f:51:
         f2:4e:18:31:85:16:5f:5c:51:e9:1b:67:94:0f:11:92:40:4c:
         e6:6e:9c:9a:08:dc:f4:5b:51:4c:6d:26:e9:de:0c:a6:13:a7:
         eb:67:61:63:f4:95:ff:6d:89:a5:2c:38:4f:a6:76:df:b9:9f:
         50:d2:9c:7a:f7:a0:26:c5:b1:ef:c5:d5:57:26:30:30:46:ea:
         f7:18:36:73:fa:40:6c:d9:29:94:ed:bd:51:c9:47:09:4d:dc:
         54:20:00:ba:d8:79:97:59:d4:55:af:4c:70:29:33:3d:5a:ec:
         51:f4:1e:1d:00:94:ce:1c:bc:4b:17:9b:56:b5:b6:84:e0:79:
         c8:9b:d3:e4:4b:83:da:fb:07:15:4e:60:0c:1a:9c:4e:9d:41:
         da:d0:80:ca:9f:7c:95:10:20:e1:a1:b0:6b:27:cc:07:2f:ef:
         7f:e0:ca:e5:45:73:8e:6b:34:78:c5:7a:bf:de:71:b1:98:b9:
         07:2f:84:49:94:67:32:ce:83:3a:4c:44:c7:04:47:74:cf:e7:
         c3:6a:11:7b:4d:fe:68:78:f5:7a:d5:a1:0e:cb:76:aa:2a:31:
         87:c2:3c:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnuoIuXdrXi6M1jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ZmQxYTE0YmEtMTQ4NC00Yzk3LWEyOGEtMjVhMDY4YjdkMGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo1LD6xo3Y5aq1eBmeJLEJwVZhDDgpICFDn+
w02DhdpDc9gPN1aP/No6Rm0B0rfPWg7Z5pyM1xobd8gRuqSNY/c+RFoMrmYeOiDd
c04yF7QVa9MOGzMD43tsTWpA6GlGauGhZ7SAxaMzHEeTN/MtpD55OCzI6SP0I0NC
y54lIk4sAafylb89/dsVjqnh7kWnQHes8f/CzhVmE/eHRmxUgJ9YaBfspFHC/Uqb
mrVBdhxOZhQYAlGMJhmM/ivVS0yxeed2VdSOKYcAw/yagfuj16qv2cypZVEwsOi9
2I4pX0k6EoFYD7kpUt094yXtecb6idXG4zfD13b8b8L68tDafQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMKzG7sAzTCNjr7+y3mgxRL7tEINMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNWVkNzU1NTEtZThjOC0z
ODE5LWE0YmQtODE3ZTczYWM5ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFLj9tD9nJ2vJEJFSBz272g0Sg66VMOVKMDzz/LAy65FOhgfUfJO
GDGFFl9cUekbZ5QPEZJATOZunJoI3PRbUUxtJuneDKYTp+tnYWP0lf9tiaUsOE+m
dt+5n1DSnHr3oCbFse/F1VcmMDBG6vcYNnP6QGzZKZTtvVHJRwlN3FQgALrYeZdZ
1FWvTHApMz1a7FH0Hh0AlM4cvEsXm1a1toTgecib0+RLg9r7BxVOYAwanE6dQdrQ
gMqffJUQIOGhsGsnzAcv73/gyuVFc45rNHjFer/ecbGYuQcvhEmUZzLOgzpMRMcE
R3TP58NqEXtN/mh49XrVoQ7LdqoqMYfCPMM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:12 2025 by rpki-client