Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa
File:                     5094c408-dfa0-367e-81af-35f1f25d1afd.roa (raw, json)
Hash identifier:          LmLkyUA3xytMJ9Y4z011YjwK1ZOGCyL+OwA3JBMkur0=
Subject key identifier:   62:66:44:75:69:F9:CB:4D:92:4B:23:05:A6:83:B3:0A:90:D7:9A:00
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858487A208644AAED245BE9B6EE80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     20253
IP address blocks:        2606:bc40:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:86:44:aa:ed:24:5b:e9:b6:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=d8b26db5-3147-4084-8d8b-252f997d00eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:38:de:d6:99:4e:88:6b:ae:ef:e5:b7:36:
                    12:36:0f:a2:35:6e:9c:94:d1:e0:98:58:91:2d:0b:
                    1a:ba:74:13:97:65:10:4a:7c:f9:99:b8:b9:8d:d5:
                    6d:c9:1c:13:38:59:4c:76:51:0b:46:2b:5e:ea:35:
                    3f:35:6e:6a:e7:26:89:de:2b:4a:83:3e:37:39:14:
                    d0:19:4b:4c:02:ab:13:ab:17:2a:57:8e:bf:59:9a:
                    f2:3b:cd:b3:a2:1d:0a:19:f1:81:76:31:3c:14:6f:
                    48:d3:e4:95:39:3d:61:24:9b:ca:0a:2a:a6:85:08:
                    0b:df:78:83:19:aa:6e:cb:9e:e0:b6:3c:e6:9c:ba:
                    6a:eb:a0:36:be:cd:83:fa:51:0e:d3:7a:26:39:90:
                    a6:aa:a3:c1:92:df:2d:af:00:4a:97:34:2b:1a:db:
                    3a:3e:b9:d6:e6:44:69:40:3d:cf:19:b1:5f:d1:c9:
                    34:11:6b:4e:9e:c7:55:d7:ff:2c:2f:8e:7a:e3:fd:
                    18:7d:27:6d:74:b0:0e:ee:4c:5f:d5:56:5a:b4:a3:
                    f3:8c:f3:21:16:b7:ac:11:09:83:9f:ed:ab:69:62:
                    58:72:21:02:c1:3b:f2:65:4c:da:f1:6b:a5:af:68:
                    0c:47:f3:ff:d6:2e:a3:68:06:97:31:97:28:36:74:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:44:75:69:F9:CB:4D:92:4B:23:05:A6:83:B3:0A:90:D7:9A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:cc:fa:e8:63:7a:31:f9:00:6b:76:83:98:2f:1a:da:3a:
         57:17:63:76:38:1f:e5:19:13:4c:cc:5d:ae:cf:31:da:ca:7a:
         95:1a:d6:55:3c:b1:c5:92:1a:e6:57:b0:ba:c5:ca:e1:eb:cd:
         00:23:c3:bf:3b:e6:1a:93:03:68:f2:fc:39:93:29:ed:f4:9b:
         f5:51:c0:3d:24:df:4e:69:b7:c4:9a:42:fa:ef:d6:4e:c3:8e:
         f0:ba:bf:f5:b5:6c:71:f7:1a:46:5e:e5:a7:c8:69:e4:a5:5d:
         20:43:f2:4d:71:19:05:61:31:93:98:0c:59:5c:b0:68:59:48:
         02:02:3e:d4:06:6e:ae:a2:2a:04:12:64:48:7d:9f:ea:d4:b2:
         7f:36:73:cd:ee:1e:92:88:03:2e:01:d7:c1:e8:e1:54:69:e5:
         62:40:09:bf:61:af:56:25:66:bb:f6:3a:40:2e:04:cf:3f:48:
         c8:f8:dc:96:9c:4c:05:d8:53:ae:23:2c:97:bd:fb:cc:c2:75:
         ed:33:90:68:d7:6d:4c:2a:9f:92:bd:15:e0:67:a5:84:56:d0:
         fa:77:a2:c7:7d:a9:36:58:41:a8:2d:f1:eb:dc:f0:12:0c:fc:
         50:f0:4d:f0:c5:ab:77:e8:43:70:54:d6:ac:30:89:1b:1c:6d:
         20:7e:31:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh6IIZEqu0kW+m27oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZDhiMjZkYjUtMzE0Ny00MDg0LThkOGItMjUyZjk5N2QwMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Q43taZTohrru/ltzYSNg+iNW6clNHgmFiR
LQsaunQTl2UQSnz5mbi5jdVtyRwTOFlMdlELRite6jU/NW5q5yaJ3itKgz43ORTQ
GUtMAqsTqxcqV46/WZryO82zoh0KGfGBdjE8FG9I0+SVOT1hJJvKCiqmhQgL33iD
Gapuy57gtjzmnLpq66A2vs2D+lEO03omOZCmqqPBkt8trwBKlzQrGts6PrnW5kRp
QD3PGbFf0ck0EWtOnsdV1/8sL4564/0YfSdtdLAO7kxf1VZatKPzjPMhFresEQmD
n+2raWJYciECwTvyZUza8Wulr2gMR/P/1i6jaAaXMZcoNnTkcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGJmRHVp+ctNkksjBaaDswqQ15oAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNTA5NGM0MDgtZGZhMC0z
NjdlLTgxYWYtMzVmMWYyNWQxYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADjVzProY3ox+QBrdoOYLxraOlcXY3Y4H+UZE0zMXa7PMdrKepUa
1lU8scWSGuZXsLrFyuHrzQAjw7875hqTA2jy/DmTKe30m/VRwD0k305pt8SaQvrv
1k7DjvC6v/W1bHH3GkZe5afIaeSlXSBD8k1xGQVhMZOYDFlcsGhZSAICPtQGbq6i
KgQSZEh9n+rUsn82c83uHpKIAy4B18Ho4VRp5WJACb9hr1YlZrv2OkAuBM8/SMj4
3JacTAXYU64jLJe9+8zCde0zkGjXbUwqn5K9FeBnpYRW0Pp3osd9qTZYQagt8evc
8BIM/FDwTfDFq3foQ3BU1qwwiRscbSB+MWA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:37 2025 by rpki-client