Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
File:                     80d9d793-e3b6-333e-9df9-e0b8c159682c.roa (raw, json)
Hash identifier:          Z6vHiqRvjiNhV9bSTe5oxLgBiCIQTXTNCMShJe4Kejw=
Subject key identifier:   A6:10:AA:DA:E7:10:15:F0:A2:E9:DD:2C:B7:6D:7A:1E:6F:BE:AD:5A
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849CE9A6863A3F9A82137F968E0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:68:63:a3:f9:a8:21:37:f9:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=aac7c8d0-04cc-4dc9-8d73-687f21a3cea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:3f:2f:bd:05:d0:a2:9e:77:21:ff:0b:d0:
                    da:1e:dc:9f:2f:41:9c:d3:72:e7:dc:65:b5:d2:b3:
                    ba:8b:6f:18:34:8d:cb:46:2a:a3:cc:e0:f9:be:98:
                    dd:ca:20:90:1a:1f:94:f9:88:b7:c9:0a:01:60:9b:
                    56:10:b7:8b:07:b1:f5:7d:8b:90:be:24:fb:8d:bd:
                    e2:aa:ea:6a:f9:c1:8c:1e:b4:0b:d6:38:89:a7:ca:
                    eb:65:58:98:16:25:3e:4b:39:c9:21:2a:88:24:b8:
                    55:4d:85:d3:02:0a:fd:21:da:18:ca:88:d4:e3:64:
                    4f:e6:a7:21:d6:30:92:07:16:78:45:a9:22:f6:80:
                    2b:4a:78:40:a1:c5:a2:3f:32:fe:89:69:0e:3a:4b:
                    fc:02:9b:ab:bb:5a:35:31:3c:ba:d6:a2:4f:c9:74:
                    d6:dc:f1:40:35:9b:a3:77:40:9d:0a:f3:7a:a1:92:
                    8f:07:cd:bf:9f:a8:9e:c1:90:e0:b6:ce:78:65:33:
                    cf:82:ab:69:05:4b:91:11:a4:42:3c:a7:d7:0d:13:
                    aa:b6:13:2f:6f:ba:bb:18:43:37:01:39:46:24:de:
                    95:58:b4:ad:35:9a:a6:6b:70:4d:3c:9f:c0:45:8e:
                    7c:cb:cc:aa:2e:2d:39:35:c0:0a:5b:3d:94:dc:51:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:AA:DA:E7:10:15:F0:A2:E9:DD:2C:B7:6D:7A:1E:6F:BE:AD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:7b:e1:09:4e:9b:9c:5e:02:90:83:31:e3:df:c4:f7:b9:
         e8:e7:47:be:e1:79:19:3a:31:1d:68:63:00:63:26:4e:40:1d:
         95:0b:91:34:1e:49:f3:4c:3f:2c:64:93:4e:30:7b:e0:ff:48:
         a5:c9:21:ce:61:dd:11:09:2d:6a:57:96:36:2d:cc:06:ce:49:
         c7:eb:c5:0c:f8:ba:9e:a9:4f:29:6c:e6:fc:35:8f:ce:bb:7d:
         6c:3d:8d:1e:8c:78:3d:c2:b3:c4:91:24:8e:2a:24:f2:4f:8c:
         de:c0:60:da:79:b3:92:cc:c2:10:f7:89:98:01:78:58:b0:06:
         8c:6b:a5:ff:db:7d:bb:ab:07:b4:35:58:00:ce:c6:56:f9:54:
         7a:b4:d4:69:aa:0e:03:93:b2:29:c3:ce:29:74:0f:bb:88:9f:
         1d:7c:0e:dd:f6:01:7f:56:3e:d2:56:8d:6c:bd:00:21:ac:4d:
         2a:3f:15:e2:e7:89:88:cb:8c:4c:3e:f4:a1:77:25:22:ab:49:
         02:47:07:7a:0f:4b:15:52:3c:0c:2a:9a:46:e5:46:74:e2:3d:
         be:26:59:ff:d9:e7:e4:13:7b:32:b0:83:15:d4:df:85:a3:0b:
         64:9d:b4:5d:b3:0e:2f:c1:8b:9f:96:f6:a1:de:10:b6:ff:ee:
         46:f5:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:01 2025 by rpki-client