Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
File:                     61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa (raw, json)
Hash identifier:          XMgBvRLu1Olf/+GbwxUjE1ZFmOWjxf0TN/vtq5h1HcI=
Subject key identifier:   28:24:9C:2D:F4:77:54:8B:44:AB:58:45:9B:4D:2A:A6:EA:6F:61:38
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848222FE9F957F37594EEFE3680
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e9:f9:57:f3:75:94:ee:fe:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=561f786e-c450-4196-8d51-59262981bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:ec:96:1f:82:ad:dd:e6:8d:2d:94:83:e2:
                    57:98:7c:f6:03:33:b5:b6:5d:e9:fa:0d:60:9e:7c:
                    32:36:2d:ab:5a:37:8a:7f:04:c9:ef:c9:67:2b:bd:
                    d4:6f:fa:38:07:7e:8b:65:fc:f4:24:bf:37:62:a0:
                    10:dd:bb:1f:f5:46:3b:2f:ac:4f:68:07:7a:1c:9f:
                    9e:e0:80:ac:21:96:97:58:32:ea:49:ef:6f:be:e6:
                    2b:ba:d6:47:a1:ff:af:73:7c:f8:a9:8d:f3:b8:a0:
                    ae:02:45:6c:4b:00:40:33:4f:17:7a:fb:6a:87:af:
                    87:99:96:d4:58:c2:b1:35:e4:14:79:e9:8b:f2:0a:
                    f2:8c:23:ed:4a:cd:a2:b7:bc:40:dd:63:66:1b:8d:
                    a0:a5:40:3b:57:a5:af:2e:de:66:d0:b7:db:5a:6b:
                    43:97:97:ba:7b:51:eb:ea:cc:de:87:7e:d0:b7:b9:
                    d3:9e:91:54:93:90:26:c2:8c:54:88:21:eb:8f:ea:
                    2b:09:b2:21:a7:ba:d2:28:ae:81:c6:f7:f9:9f:70:
                    0c:ff:3b:ae:61:6d:8a:7a:bf:e4:0e:3c:8f:b5:51:
                    86:4b:dc:ef:84:6f:f5:99:cf:df:cf:a5:fc:0e:2d:
                    5d:fe:b3:c5:94:22:58:d5:d0:16:f6:8c:be:d1:60:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:9C:2D:F4:77:54:8B:44:AB:58:45:9B:4D:2A:A6:EA:6F:61:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:9b:cb:10:38:ab:64:59:f3:38:bb:a5:7d:ca:06:74:00:
         40:77:14:80:d3:ec:0f:4d:f6:9d:79:c6:7b:98:b8:54:02:0e:
         2f:83:7d:df:61:b3:f0:28:85:1d:e5:6f:61:79:e9:a0:75:57:
         64:2a:22:db:33:08:4d:47:9f:ab:fb:05:cd:86:d5:b2:93:fe:
         4b:04:6a:19:c0:43:93:04:24:36:10:9d:9e:1a:5b:59:25:31:
         17:3d:a6:38:ab:84:87:1d:58:8b:7e:c2:f0:7d:03:9c:3f:8f:
         7f:58:79:59:dc:14:b4:a3:dd:5d:4a:df:d8:08:e2:fe:01:88:
         27:f2:dd:3e:0e:9a:e2:3e:7f:c2:d3:01:c1:b1:f8:36:2a:8d:
         2c:0f:6d:c9:30:5c:fa:63:34:49:38:c2:0c:5c:21:fa:b8:f4:
         b0:e6:01:15:7c:fa:58:53:5d:ed:4d:ab:54:c6:a0:c6:b0:00:
         03:75:25:35:8f:a4:d0:48:6f:5e:0b:0e:03:5d:ad:46:0b:00:
         19:dc:e5:61:36:fc:a1:f1:aa:b7:16:95:d3:57:06:5e:dd:12:
         7d:6e:1b:58:bf:b8:26:d4:1c:ae:27:ae:3f:86:6c:89:1c:1a:
         de:68:49:ae:18:3f:52:22:3f:8a:c4:ff:96:86:02:c6:b5:89:
         cf:34:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:11 2025 by rpki-client