Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa
File:                     7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa (raw, json)
Hash identifier:          a0YOBr0IPA4iM4PFwjicNyrF1j5B/XOhPaJ/dFWl0dM=
Subject key identifier:   75:5B:16:24:1B:47:16:9E:48:B0:83:CB:0F:55:45:87:5A:12:1B:38
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849F2E5443C5C319B5F275D4DC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:44:3c:5c:31:9b:5f:27:5d:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=73b3a57f-904c-4d31-950e-17b70982352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:0a:9a:17:84:79:53:6f:49:0b:bb:86:aa:
                    58:d4:84:a0:08:57:e0:3b:a6:d4:86:80:50:3c:be:
                    00:00:84:80:f3:5e:73:78:1c:0d:5c:76:9e:52:17:
                    1e:ca:50:7c:34:ec:bb:87:8c:96:69:6a:8c:26:04:
                    8f:0c:a7:09:01:5e:59:b7:36:97:ac:3b:76:3a:39:
                    db:62:e2:1a:6c:af:f4:fe:4f:f5:44:ef:39:0f:ca:
                    80:7b:bc:68:69:c1:0f:72:4e:02:ac:a2:a6:fa:cb:
                    66:e2:7b:c1:3c:9a:88:5d:41:34:c2:9d:5e:1f:e0:
                    3f:3f:01:1e:0d:c3:db:79:e6:4d:7a:06:d7:d8:56:
                    ab:74:6b:fa:74:64:df:f7:38:10:4c:ed:f9:12:ad:
                    2b:3c:f3:84:72:50:2b:7c:27:39:60:cb:3f:78:9a:
                    ab:3b:18:fc:59:10:45:e2:b0:d8:d8:ad:3d:9a:7a:
                    9e:f9:e0:69:18:b7:40:28:19:f5:7d:81:76:87:72:
                    a4:24:21:3c:ae:35:29:81:7d:51:15:1b:fe:3b:7b:
                    da:dd:b2:bc:5f:0f:f4:3d:f4:f3:9b:63:b2:d7:fe:
                    65:76:06:b6:4f:d2:65:80:56:43:11:f7:63:7b:80:
                    ce:1b:02:be:05:0a:20:65:51:de:e0:e0:41:0b:8d:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5B:16:24:1B:47:16:9E:48:B0:83:CB:0F:55:45:87:5A:12:1B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d1:26:f3:b1:1c:1b:7e:b5:2a:57:a3:2a:de:3e:dd:44:05:
         75:57:8d:16:5a:4c:3a:2a:65:f5:a8:ce:e1:31:5f:f6:63:be:
         12:b2:60:95:83:67:3c:95:6e:d2:5e:67:6b:10:b3:29:c4:87:
         32:f6:cb:8f:14:36:d5:aa:e1:e1:42:dc:40:9b:d9:a6:fa:bf:
         e8:ba:5c:50:27:29:27:95:20:d8:1b:09:7c:1e:79:f8:92:48:
         ea:13:f3:98:f1:fb:36:6c:77:24:eb:23:ec:51:58:60:81:d6:
         4e:03:af:a3:fb:09:29:9b:ea:bd:37:3d:94:d3:c7:43:a0:2d:
         98:7c:d4:92:98:a3:90:50:0d:a1:03:5f:2d:01:93:59:ea:d9:
         19:55:ac:b6:fe:85:bf:61:d7:78:3f:ce:b5:41:da:93:50:63:
         53:19:4c:6c:db:83:f5:bb:0e:75:ce:2d:e6:a1:c8:91:b6:b5:
         da:b4:9a:dc:2a:1b:e7:1a:8a:1c:53:09:6c:6e:6b:3a:3e:4c:
         de:39:f7:3d:d8:d0:b7:30:2a:10:d4:00:a6:64:0c:0a:ae:d8:
         8d:91:f4:db:44:1f:07:04:16:8c:cc:e2:ab:f4:d0:a4:78:f2:
         76:91:e0:79:fc:a3:45:7c:9f:d8:80:ac:36:65:2b:e6:e9:9c:
         ba:a5:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:01:35 2025 by rpki-client