Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
File:                     4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa (raw, json)
Hash identifier:          9LVmrvLByiVdhWCzdDgZ6JhKGj75VqEJ1UdslbQ5bmg=
Subject key identifier:   D4:D3:21:19:DD:59:D6:DD:71:F5:DB:8C:92:30:E2:36:0D:07:C2:F1
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858494733E64BA6B3E5836218B300
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e6:4b:a6:b3:e5:83:62:18:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=256c190e-7757-4d03-81a4-97c6c0f8ae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:80:02:2a:5e:77:e2:c6:b9:7b:b1:d7:e0:
                    1b:6f:39:c7:82:6a:f7:7a:3d:65:1d:d5:dd:f8:28:
                    59:cc:c0:02:a2:ef:f0:87:4c:11:c3:d4:a9:8b:b0:
                    f5:bb:d4:5b:f9:85:34:d1:4b:a5:90:98:08:60:d7:
                    8c:83:3d:35:6e:d7:a3:33:c6:87:31:cd:cd:6e:63:
                    69:14:29:65:40:f2:ca:8c:12:61:0c:fb:39:78:0f:
                    79:58:19:d5:8f:b4:f2:7b:34:6d:59:bd:7a:ae:ed:
                    5d:4e:b8:25:89:43:2c:3d:a7:be:91:72:8a:c5:b3:
                    3c:cc:7a:81:e6:8c:c2:bd:cc:0c:eb:c4:9b:1c:2b:
                    ec:e5:17:ba:cf:9c:4c:9f:4c:04:d9:bc:b2:d0:e8:
                    5b:0f:53:3e:f0:0d:d6:1d:82:4c:fd:8d:14:99:60:
                    b0:e9:1a:4d:33:4d:86:bb:ff:a7:be:a2:4a:14:e3:
                    08:b0:73:b1:03:b4:10:4e:3d:5f:ef:6a:e9:3a:a2:
                    f1:26:16:b9:38:ab:20:81:f8:79:25:61:bd:c9:88:
                    02:2a:86:59:99:74:3c:6e:fb:ea:77:6f:95:31:a1:
                    b1:69:3c:6e:cd:4c:94:fe:8b:e2:bb:43:fd:ee:c6:
                    6b:48:67:08:5d:33:a2:eb:7f:6f:d4:5c:8f:d0:18:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D3:21:19:DD:59:D6:DD:71:F5:DB:8C:92:30:E2:36:0D:07:C2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:3d:5f:04:da:d5:7e:b1:11:ca:eb:13:4f:52:a2:a1:5b:
         a7:7f:03:d2:e9:18:45:a0:50:0d:3c:aa:81:6e:12:4f:47:1f:
         1a:33:d4:1f:c8:74:62:86:d9:ff:35:94:50:16:87:5e:92:25:
         eb:d4:17:82:d3:b2:b5:33:18:ba:da:a7:0d:fe:b0:d2:93:59:
         a8:a3:6b:17:b1:68:52:7d:db:43:f4:16:43:ea:9d:59:e8:ea:
         25:db:96:88:fd:0d:16:5f:18:de:7a:1b:2f:7c:bb:16:6f:59:
         69:a4:c7:e0:75:25:5b:80:51:a3:c3:52:1a:10:fa:7e:7c:d1:
         3f:1d:49:f6:c9:ba:8b:8f:5b:55:ab:af:3b:d6:91:52:71:37:
         07:5c:0a:62:fd:ed:c7:cc:64:e7:67:36:d4:ce:17:8a:0b:7b:
         4c:d4:ae:1b:0d:08:47:67:9b:f5:33:04:f5:b4:89:51:94:55:
         55:1c:5e:d9:4a:ba:f6:ee:04:bc:c4:a5:c3:71:95:68:eb:9d:
         74:b4:2d:b5:21:cb:97:0e:b6:99:71:5e:9b:46:09:54:fb:65:
         98:bd:03:54:7b:e1:a9:88:58:c4:26:01:cf:75:3c:97:e2:d5:
         2e:90:c2:1c:48:69:a1:14:b0:c6:9a:5e:f4:2b:ed:ab:c7:ef:
         0b:e7:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:33 2025 by rpki-client