Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa
File:                     02061650-4205-329f-8437-e8718585f934.roa (raw, json)
Hash identifier:          DrVkK0Am37nzFlcNqOG1qFf5vOJEy62C7C6ftIxwEeY=
Subject key identifier:   09:27:ED:CA:AB:19:A7:D3:68:6C:1D:4D:CC:BC:37:98:DA:58:7C:7D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF614507BE48C83DF788BA00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:45:07:be:48:c8:3d:f7:88:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=13d856b1-14ab-4b2e-9256-b3f46d62685c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:47:1b:b2:b3:d0:24:dc:02:2a:d1:73:91:
                    b1:27:8c:e1:e0:17:63:a2:67:aa:6a:f9:64:b6:b3:
                    58:ef:f1:83:28:82:1a:a0:74:19:23:87:5e:1b:72:
                    36:10:02:d4:1d:42:55:96:a6:01:4c:13:4c:67:ad:
                    c8:2d:6f:f5:95:32:70:e8:09:55:e0:9f:b3:bd:bd:
                    42:6a:51:26:13:41:15:85:42:19:f5:ff:34:5c:51:
                    28:e0:eb:10:88:60:c9:ae:ec:fd:22:16:ae:77:df:
                    f5:bc:52:2e:87:9e:ca:2f:c6:18:ac:3b:08:87:bb:
                    2b:0c:34:ee:f5:0f:32:c8:e8:5a:ee:3d:a5:42:51:
                    a6:9b:f3:a1:6e:9c:9c:01:d9:66:7a:3e:e2:c5:f7:
                    b3:7e:da:75:82:dd:18:bc:5d:06:99:e9:52:5f:39:
                    79:9f:ab:17:6f:be:4f:4e:8e:f7:77:02:68:46:29:
                    dc:22:70:50:5a:63:3c:89:cc:e3:f5:ab:01:aa:e2:
                    cd:c8:b5:ea:19:2e:b4:aa:ac:d5:99:c9:cd:82:27:
                    0f:b0:e5:d4:ba:35:92:f8:40:46:c7:49:dd:67:f2:
                    f8:ad:f9:6b:ac:1a:46:68:2f:5a:ab:84:44:a1:29:
                    bc:00:06:3d:53:d2:6c:63:1f:de:ee:bd:14:ba:e2:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:ED:CA:AB:19:A7:D3:68:6C:1D:4D:CC:BC:37:98:DA:58:7C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/02061650-4205-329f-8437-e8718585f934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:f2:c8:8d:80:85:25:4c:e4:63:67:9e:41:32:ee:b3:2d:
         2a:e8:05:fb:d2:a0:ad:61:b3:7b:28:73:94:5c:a0:d7:4e:58:
         ce:37:eb:7f:08:25:0e:0c:67:eb:e0:cd:0e:63:a1:f1:5a:f0:
         b2:32:2d:76:26:b0:28:59:b4:24:0e:55:ec:99:fb:67:29:e1:
         c6:c3:49:c8:71:09:21:40:67:1d:1b:dc:3a:08:ff:91:8f:b3:
         0a:b1:2c:3c:af:1d:8b:70:78:e2:a7:f0:2b:79:e8:4c:90:d4:
         5e:34:33:ca:4d:b5:1a:9d:07:91:0b:b4:9a:16:0b:4e:6c:92:
         87:9d:17:65:17:07:e6:47:ee:7b:de:1a:65:b8:f9:a6:0a:cb:
         6d:85:6a:73:98:cb:42:75:ff:32:41:40:a1:eb:b1:ca:e7:1b:
         9f:69:d6:e7:af:f0:9f:6e:49:60:5e:ee:a1:db:27:d9:30:12:
         2c:a4:c5:9f:ec:0e:42:4f:8e:a1:35:df:e6:79:7f:21:47:8d:
         b8:2c:fd:00:1c:eb:b3:d7:b7:35:d9:f8:ee:1b:e0:02:61:97:
         25:14:dd:f7:b8:1b:ea:2a:a8:9c:91:b3:2c:5b:11:f6:d1:c6:
         7e:43:6e:03:65:fe:65:ee:56:71:2a:8e:62:91:68:a8:5d:24:
         c0:b9:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:40:03 2025 by rpki-client