Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa
File:                     8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa (raw, json)
Hash identifier:          6+iDECnNykhZJgeWkKU8tumjbIuPh+Z87OAnUcpJ86M=
Subject key identifier:   03:65:94:E5:07:7B:A1:A2:35:58:FC:3A:6F:D6:28:B0:77:3B:FA:FD
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849D42FAB9CDF487657BC075480
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:105::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ab:9c:df:48:76:57:bc:07:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=13a3b2cc-d0f1-419e-a476-53837e3581c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:47:60:d1:19:49:d5:ac:f2:fd:f9:64:1d:
                    c1:84:f3:bb:22:f9:2c:1d:47:02:e6:2a:c0:d5:15:
                    8d:67:c4:79:b7:bc:0a:69:42:1e:a2:65:02:c6:af:
                    de:2e:29:4a:82:99:0d:85:d5:65:bd:cc:df:44:e6:
                    29:db:1d:4d:69:31:90:d2:6d:f4:3b:92:18:06:66:
                    43:35:ad:c1:cb:6f:d7:60:96:61:84:4c:6a:26:61:
                    55:b8:14:b6:ba:6a:4b:fe:b4:37:0d:27:c9:e6:81:
                    f3:ce:34:c9:f6:39:9c:3f:d3:23:85:01:b0:ed:39:
                    2f:a5:6a:8f:06:9a:04:d2:72:bb:c8:6b:77:1a:4f:
                    f2:b8:06:d6:36:30:e8:8d:ad:92:c8:34:7e:ee:f7:
                    7f:37:f3:d0:84:76:a7:42:58:ef:05:54:ce:e1:ba:
                    0a:22:f7:34:fc:02:de:eb:36:13:94:c0:db:72:50:
                    60:56:ee:2b:d2:03:c6:31:a8:75:3d:84:7f:64:9d:
                    34:68:6a:9d:1d:d6:35:6d:58:b5:4e:b2:17:44:c5:
                    d0:a9:d8:6e:02:79:22:62:cb:ae:53:98:14:7b:6e:
                    8a:73:4e:8e:c2:a6:f2:3d:e8:55:b6:11:bd:11:b7:
                    2b:41:64:ad:58:e4:a0:b5:17:50:57:7c:19:b1:bb:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:94:E5:07:7B:A1:A2:35:58:FC:3A:6F:D6:28:B0:77:3B:FA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:da:e7:e2:78:9d:04:ae:6f:72:37:26:c1:dd:40:e8:06:54:
         41:86:f8:7b:6d:08:fe:f5:0f:77:55:04:09:a8:03:08:7d:2e:
         1b:10:51:36:2b:38:2d:f2:cd:bc:29:b6:a9:bc:2d:dc:cf:3c:
         8c:00:65:b0:c7:41:d5:49:58:ca:84:52:6f:32:0b:de:3b:a2:
         8e:85:e0:49:d5:46:cc:65:ec:0c:03:11:40:e3:44:af:40:4f:
         93:d0:ba:07:d9:fd:d7:68:ca:f5:22:e7:b1:f5:b4:44:77:65:
         43:cd:80:b3:ab:c0:cd:60:1c:fd:a7:c1:d3:51:19:ca:6c:45:
         1b:75:28:29:ef:47:92:71:82:05:b2:84:8d:cc:fb:10:b8:ec:
         64:de:cb:29:ef:5a:a6:de:73:30:b8:f8:74:33:0c:bb:a1:23:
         62:e3:13:cf:38:f1:03:80:df:4f:06:03:76:d7:f7:fa:2b:81:
         27:88:cf:0c:ee:96:31:dc:83:32:06:b5:67:44:c2:d4:10:dd:
         9a:6c:20:09:9e:ab:d0:eb:16:1f:bf:32:b2:30:1d:52:f2:00:
         25:3c:d6:7e:67:89:76:4e:7a:6f:62:3e:64:39:7d:1f:85:5d:
         73:49:35:59:5b:9f:0f:6c:2d:70:46:34:cc:93:6d:ba:f0:ca:
         4b:3b:5e:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnUL6uc30h2V7wHVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTNhM2IyY2MtZDBmMS00MTllLWE0NzYtNTM4MzdlMzU4MWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuZHYNEZSdWs8v35ZB3BhPO7IvksHUcC5irA
1RWNZ8R5t7wKaUIeomUCxq/eLilKgpkNhdVlvczfROYp2x1NaTGQ0m30O5IYBmZD
Na3By2/XYJZhhExqJmFVuBS2umpL/rQ3DSfJ5oHzzjTJ9jmcP9MjhQGw7TkvpWqP
BpoE0nK7yGt3Gk/yuAbWNjDoja2SyDR+7vd/N/PQhHanQljvBVTO4boKIvc0/ALe
6zYTlMDbclBgVu4r0gPGMah1PYR/ZJ00aGqdHdY1bVi1TrIXRMXQqdhuAnkiYsuu
U5gUe26Kc06OwqbyPehVthG9EbcrQWStWOSgtRdQV3wZsbuZAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFANllOUHe6GiNVj8Om/WKLB3O/r9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvOGQzYTI4NDQtM2M4OS0z
YmI5LTlhYTItNGYwMmRhYTQ5NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTa5+J4nQSub3I3JsHdQOgGVEGG+HttCP71D3dVBAmoAwh9LhsQ
UTYrOC3yzbwptqm8LdzPPIwAZbDHQdVJWMqEUm8yC947oo6F4EnVRsxl7AwDEUDj
RK9AT5PQugfZ/ddoyvUi57H1tER3ZUPNgLOrwM1gHP2nwdNRGcpsRRt1KCnvR5Jx
ggWyhI3M+xC47GTeyynvWqbeczC4+HQzDLuhI2LjE8848QOA308GA3bX9/orgSeI
zwzuljHcgzIGtWdEwtQQ3ZpsIAmeq9DrFh+/MrIwHVLyACU81n5niXZOem9iPmQ5
fR+FXXNJNVlbnw9sLXBGNMyTbbrwyks7Xm8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:49 2025 by rpki-client