Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
File:                     61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa (raw, json)
Hash identifier:          D5lVFpGPFR+a8yU7GNkvPDfsAWjSN8bvO1U8U1rKtqw=
Subject key identifier:   50:BF:1A:76:D5:67:7F:00:BE:6E:0B:18:F7:F5:D5:87:43:17:9F:6F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849E225390F637543D4295BCD00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     20253
IP address blocks:        2606:bc40:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:39:0f:63:75:43:d4:29:5b:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=7ce678f8-3c90-455b-8231-d7771869f87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:64:74:4c:cb:13:e3:be:b5:76:9f:09:2e:
                    67:fc:61:2b:20:6a:ea:81:1d:b9:00:bf:56:96:a4:
                    a8:05:12:e2:59:08:d6:1e:f9:44:d3:71:a1:90:e0:
                    8c:b0:b4:f8:d4:96:59:ef:51:97:08:b8:d4:2d:bb:
                    53:7c:11:9d:6a:40:d2:f2:1c:51:62:64:e9:ff:b7:
                    71:0a:8d:01:86:a4:1b:1a:76:69:5c:a8:5d:b5:29:
                    a8:d7:c2:4b:a1:e2:9f:03:50:43:ba:83:8c:56:32:
                    e5:66:4f:9f:42:3b:b4:23:14:f6:00:a0:25:c2:a6:
                    fb:9d:8a:42:91:cf:e0:a7:5a:3f:e8:7b:f3:23:9d:
                    db:12:d2:77:71:d2:a9:7d:6c:46:5d:48:00:32:d9:
                    69:2f:4e:0d:8a:bb:09:c4:f7:ab:f6:70:45:52:e8:
                    89:0d:27:94:03:36:1a:87:8d:c2:d3:cc:ec:1b:0a:
                    a8:b5:92:21:a2:95:11:7b:b0:70:fb:42:3b:cc:06:
                    28:8d:e6:94:e8:37:7d:40:09:c4:11:61:b0:5a:08:
                    8d:07:96:c3:30:df:96:08:82:c5:3f:47:18:71:ef:
                    e9:d7:57:4d:4c:53:81:5d:b9:88:d1:fe:46:d5:df:
                    98:bc:81:2c:26:c7:91:7c:16:9c:21:19:d5:25:3e:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:1A:76:D5:67:7F:00:BE:6E:0B:18:F7:F5:D5:87:43:17:9F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:ec:32:80:c5:0b:2c:e8:11:03:2f:f6:db:48:9e:02:6d:
         38:a5:76:b2:03:09:ba:f6:9a:ba:a7:86:59:a2:c7:d3:dc:65:
         23:98:09:6f:59:7b:fc:05:de:d6:0a:9a:46:61:f9:1d:af:d8:
         3c:4a:68:19:e9:07:6f:02:81:c9:4c:e7:6f:17:e0:ed:82:89:
         e4:88:c5:54:34:79:cb:01:45:0e:53:3f:7d:76:a3:fc:93:da:
         50:48:88:63:dc:5b:86:aa:b1:b8:e7:cf:45:db:22:52:39:bd:
         52:99:00:b6:65:af:3e:1a:79:59:e7:93:89:a4:99:fc:fe:4f:
         e5:3d:5d:9a:36:f8:a4:b2:29:00:b2:c9:4a:91:cb:bc:88:3c:
         27:7d:08:74:92:50:1f:c6:29:cb:52:ff:8f:ee:32:f7:cc:60:
         e4:e8:f9:24:b5:c7:d3:21:ab:8b:0a:22:6a:93:5a:69:15:7a:
         e4:80:90:21:c8:21:41:1b:d6:b0:f2:4a:3d:31:3c:30:dc:30:
         4a:6f:51:cc:68:cc:a1:bf:ff:55:48:ae:48:fb:d0:1c:8c:47:
         9d:f4:54:ba:26:a7:e0:1b:70:0c:57:5e:a1:9a:e2:af:08:5b:
         a0:9f:5c:5f:17:48:68:a2:6d:9d:bf:57:b8:66:7c:89:e4:ef:
         77:67:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:58 2025 by rpki-client