Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
File:                     186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa (raw, json)
Hash identifier:          TyMXtGR6vLcupsojXT4ibiHxlUnDBzFNQlrYwBlTR/I=
Subject key identifier:   F1:04:0B:14:86:35:88:3E:90:E0:92:1E:23:D8:BC:3F:D5:46:FA:A3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584B1F0176168553D0FCA6BFD520
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     20253
IP address blocks:        2606:bc40:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:76:16:85:53:d0:fc:a6:bf:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=bf3a0d66-d2ae-40e3-92e6-ed9cf9a10501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:33:ed:c9:0b:67:5b:4d:af:12:59:ae:78:
                    d6:ee:62:c7:1e:c8:a7:1a:90:2e:e9:9f:23:f5:30:
                    76:56:b8:e3:7a:50:09:d1:01:cd:6c:cf:90:e8:af:
                    fa:46:ce:0e:40:e5:ec:61:30:c4:2e:94:e5:bb:49:
                    67:58:0b:5b:c5:bc:a3:8c:42:1a:05:64:02:c8:25:
                    2a:28:81:fb:08:22:32:c4:69:31:50:62:68:f2:4f:
                    3b:3d:65:db:3c:02:f0:d7:71:bc:bc:3f:a3:54:03:
                    ce:35:71:91:78:f1:a1:9f:bf:f7:35:a7:a6:7a:32:
                    02:d0:aa:8f:7a:aa:15:d6:43:c4:87:f9:e3:96:c7:
                    83:62:19:54:6f:c8:58:fc:b5:39:fd:71:bf:13:77:
                    cd:93:4d:4f:41:32:24:43:fa:2a:5d:86:8f:46:16:
                    4a:1c:ac:65:dc:8d:e3:79:78:40:44:64:d9:63:11:
                    35:7a:6a:06:96:cc:2f:3c:25:61:3b:eb:4b:b3:9e:
                    bc:bf:7a:f6:fc:ef:7d:a5:2e:ec:21:be:a3:fb:9e:
                    d9:44:aa:ca:02:e2:d0:c6:9c:8d:0b:21:fb:9a:66:
                    91:81:63:df:66:9f:20:3e:aa:35:04:2d:5d:62:b2:
                    39:9c:0e:9d:a0:3d:ad:0d:be:80:f2:a0:f6:ba:d9:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:0B:14:86:35:88:3E:90:E0:92:1E:23:D8:BC:3F:D5:46:FA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/186c9d47-962c-3e11-ab2f-5c5d9cd37943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:83:14:22:f8:a4:2f:50:fd:f8:37:8f:63:95:79:0f:c4:
         af:68:35:84:a6:19:59:c4:98:9b:3c:65:28:c7:1c:f5:8e:de:
         c3:2c:0a:86:1c:de:e8:69:08:c4:c7:a6:07:2b:09:24:b2:a5:
         e4:68:fb:62:60:61:f4:6e:f5:46:11:8e:16:67:0e:69:8a:c0:
         57:a5:c7:a9:f1:de:39:cd:77:82:66:aa:76:c5:3b:56:48:90:
         c6:94:cc:85:ad:6f:96:ab:9b:9e:86:76:d8:4d:f6:ad:73:f2:
         fe:7d:83:f0:0f:0d:6c:91:f3:d9:4e:37:00:13:0e:4b:8e:a2:
         5e:fc:83:59:64:e4:f5:de:67:5b:9f:ed:2c:2d:ee:e8:1d:b7:
         e5:85:af:96:4b:3d:1a:5b:46:d7:dd:2e:96:61:69:24:28:a9:
         70:c7:b1:ab:bf:05:95:aa:83:fc:3e:e9:84:f3:79:13:88:c8:
         1f:5a:af:a6:04:bf:a2:12:8c:1a:02:cb:9e:5e:1f:e4:48:f5:
         76:a4:65:b4:6a:82:cd:29:84:82:ab:bd:50:3b:83:fb:e5:15:
         0c:b9:62:d1:41:0a:40:19:fc:13:5b:17:f2:41:7c:1e:dc:75:
         7e:e9:e6:b8:2d:99:e2:9b:72:54:a4:c6:13:62:7e:d2:9b:01:
         2a:fa:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:46:25 2025 by rpki-client