Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
File:                     1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa (raw, json)
Hash identifier:          NW7GIi2xbH8u3VNlEM8mumK1Q+ZigPKmIEZbEErkva8=
Subject key identifier:   31:56:18:E0:99:83:E2:44:C1:A8:41:C1:96:5A:B6:62:97:46:A5:22
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584913AC3835E0A07A55D6BEAD00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:38:35:e0:a0:7a:55:d6:be:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=6630791e-8389-4f56-8f1f-0a07cd250b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:1d:49:f6:f4:a9:9f:57:ff:79:5d:12:19:
                    2e:cf:31:5b:7c:3f:95:68:4b:c7:a8:3a:27:5d:03:
                    7b:3e:84:a4:78:8c:46:1a:14:64:3f:89:1f:80:f3:
                    d0:a7:00:3c:2a:81:21:c5:dc:28:7f:c7:97:b7:c0:
                    c7:a0:e3:91:53:9d:8c:03:d4:e3:ef:21:e8:e5:88:
                    82:1b:4b:b6:0e:6a:db:08:90:38:92:8d:bc:05:d0:
                    6c:da:ee:3e:79:00:4c:f4:5d:e1:5e:1b:ff:d7:79:
                    20:58:17:22:df:cd:77:f2:1d:cb:c6:bb:56:6b:33:
                    b4:71:6d:b2:dc:dd:4c:ec:b6:12:08:91:fe:ba:b3:
                    5a:b9:70:fa:53:cd:f0:9c:54:19:4a:19:d0:dd:ac:
                    9a:92:19:32:d2:29:81:71:77:ec:f8:7e:50:fd:65:
                    cc:47:4e:da:c7:9b:d0:b4:39:93:4e:7c:84:2a:07:
                    d6:20:3b:bd:ea:94:b8:90:02:76:1d:87:ad:40:64:
                    5a:77:3e:b6:e8:8c:b1:4a:39:be:dc:67:36:e7:40:
                    0a:00:88:4f:84:e6:27:09:ce:6c:9d:6f:f0:b8:b3:
                    c4:fc:0c:60:ab:df:25:43:77:40:29:b5:cd:23:34:
                    77:31:55:5f:bc:5a:e7:91:10:3a:c0:f3:af:4d:73:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:56:18:E0:99:83:E2:44:C1:A8:41:C1:96:5A:B6:62:97:46:A5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:50:20:84:f3:5c:08:66:3c:ab:41:83:d7:45:3b:2c:47:
         5f:0b:d6:b6:55:25:a1:4a:a6:e2:a3:87:74:df:c4:73:d2:35:
         ad:2b:06:d2:4f:20:53:aa:61:0d:3b:64:04:c4:5b:12:8d:1f:
         b1:93:9e:36:e3:96:c3:27:c0:7a:7c:04:ca:52:c2:ec:1a:40:
         ab:9f:2f:a2:36:5e:35:44:91:38:c4:0d:f5:fb:0e:46:4f:62:
         f5:1f:32:d3:ad:5f:c7:aa:39:05:45:6b:03:ff:9e:5d:90:df:
         4b:01:d7:6b:99:e2:6f:28:b0:6d:89:b2:1d:68:4c:02:14:38:
         4a:bf:82:79:04:e4:76:72:81:f9:64:61:f2:4d:0c:28:06:7c:
         33:79:6c:d2:a5:1b:87:b6:b6:04:14:2b:f0:f1:27:53:30:10:
         ed:fa:df:a6:6a:92:3c:34:2e:ee:97:49:e2:54:70:c2:8e:21:
         8c:0e:dd:71:f9:20:ca:bf:f2:08:db:94:5b:cc:66:7d:be:ab:
         05:7e:a8:1c:36:6f:53:97:84:be:8a:41:30:5f:c7:59:30:01:
         50:d4:cc:87:dc:66:59:24:2e:06:e2:7e:dc:16:af:16:f6:27:
         a2:10:c8:19:49:a7:75:34:41:d6:96:b1:f1:55:5e:3d:f2:ac:
         b0:0f:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:43 2025 by rpki-client