Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
File:                     7fc4090d-d0b8-3c02-8ba1-d51951663445.roa (raw, json)
Hash identifier:          yrPmWCoTH2xphlI5Qa6ME8Qnml8OZ4kitEhYgcV/Fso=
Subject key identifier:   4F:51:38:2D:F1:64:31:B8:6C:0A:1C:7E:45:1F:6A:4C:14:D2:B9:C2
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858480EA5188727D91A8AB9C76690
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:18:87:27:d9:1a:8a:b9:c7:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=15b14d6b-9ac0-4819-a63a-371894ebb36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:32:1f:45:ca:4b:39:b5:d3:df:b3:40:fa:
                    b4:99:26:97:53:29:3d:44:63:4c:8b:fc:d0:0f:7a:
                    73:90:92:70:ab:9b:3e:08:e8:09:57:21:2a:68:25:
                    ef:3d:b4:06:ea:11:2c:20:1d:8c:b0:42:01:f4:9c:
                    57:79:d5:b4:1e:f2:30:57:e0:74:1b:d4:02:a5:e7:
                    52:ec:2d:ba:02:84:14:5d:9c:44:c6:7b:7f:1f:0d:
                    db:a2:70:13:16:40:1e:3e:f4:6a:4d:28:a1:bc:cd:
                    28:77:01:9f:da:b9:46:e4:01:9b:d8:c3:e6:5a:1a:
                    c0:92:69:50:3a:09:37:da:de:d3:db:03:d1:43:4d:
                    d8:56:d9:ec:93:c5:86:46:03:8c:26:71:6a:47:fb:
                    85:59:29:8e:5d:17:85:ef:96:40:36:c8:84:42:3b:
                    97:d0:3c:73:de:d0:5e:f0:bc:00:dd:7f:21:78:e9:
                    36:31:1d:cc:9b:f7:f5:b0:7c:7c:63:0c:b5:d3:83:
                    ba:82:c6:1a:0f:c2:41:a9:f8:ad:0f:c4:0c:a5:87:
                    13:a6:47:cf:1f:02:37:4b:da:c1:18:33:71:b3:0e:
                    fe:01:85:b0:19:96:9a:cc:52:a7:ed:5c:66:0c:a5:
                    26:a5:ff:23:c6:2d:6f:b6:94:8b:1b:c7:a6:5f:87:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:51:38:2D:F1:64:31:B8:6C:0A:1C:7E:45:1F:6A:4C:14:D2:B9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:48:10:94:75:1b:63:d5:23:a9:06:c9:26:6c:76:88:22:
         1c:54:5f:f7:23:52:0f:25:1a:8d:7d:cc:d9:6e:1a:df:3d:35:
         d4:ec:de:12:9e:76:45:03:8d:e0:24:f9:2e:7c:d6:e1:4d:b9:
         cb:85:d1:27:8b:d6:c5:55:39:46:04:b3:f0:b9:63:25:27:cd:
         a6:a0:e8:16:29:ca:e5:dc:56:89:7f:4c:7e:63:29:b3:e7:b2:
         4d:7b:f5:a8:f4:f7:7b:be:bc:7d:42:59:57:76:5a:d2:a7:46:
         c3:44:fd:dd:ea:90:f3:21:8b:91:39:2f:3c:d5:33:0d:aa:02:
         60:59:4c:32:67:57:c2:88:8e:2c:5a:09:a7:e0:20:b7:8a:02:
         25:3a:4d:b2:71:f5:f3:7c:a3:6b:d1:41:d5:a5:8a:39:a0:02:
         e9:df:e7:e1:e8:52:d8:8f:d5:84:e8:80:62:73:98:dc:ba:5d:
         7b:8e:4a:8b:fc:79:27:e6:09:1a:78:a1:ee:4d:b1:4b:95:26:
         c1:62:bf:9f:6f:87:4d:c9:ca:84:1a:3b:18:c2:02:37:4a:d4:
         3f:98:7c:44:80:dd:29:90:b2:e5:fa:67:d7:8b:a2:d7:e5:58:
         25:2f:e3:53:dd:a8:9d:b2:77:5c:a6:cf:0b:78:4e:47:e8:de:
         be:4d:29:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgOpRiHJ9kairnHZpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
MTViMTRkNmItOWFjMC00ODE5LWE2M2EtMzcxODk0ZWJiMzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgIyH0XKSzm109+zQPq0mSaXUyk9RGNMi/zQ
D3pzkJJwq5s+COgJVyEqaCXvPbQG6hEsIB2MsEIB9JxXedW0HvIwV+B0G9QCpedS
7C26AoQUXZxExnt/Hw3bonATFkAePvRqTSihvM0odwGf2rlG5AGb2MPmWhrAkmlQ
Ogk32t7T2wPRQ03YVtnsk8WGRgOMJnFqR/uFWSmOXReF75ZANsiEQjuX0Dxz3tBe
8LwA3X8heOk2MR3Mm/f1sHx8Ywy104O6gsYaD8JBqfitD8QMpYcTpkfPHwI3S9rB
GDNxsw7+AYWwGZaazFKn7VxmDKUmpf8jxi1vtpSLG8emX4cdJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE9ROC3xZDG4bAocfkUfakwU0rnCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvN2ZjNDA5MGQtZDBiOC0z
YzAyLThiYTEtZDUxOTUxNjYzNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAACeSBCUdRtj1SOpBskmbHaIIhxUX/cjUg8lGo19zNluGt89NdTs
3hKedkUDjeAk+S581uFNucuF0SeL1sVVOUYEs/C5YyUnzaag6BYpyuXcVol/TH5j
KbPnsk179aj093u+vH1CWVd2WtKnRsNE/d3qkPMhi5E5LzzVMw2qAmBZTDJnV8KI
jixaCafgILeKAiU6TbJx9fN8o2vRQdWlijmgAunf5+HoUtiP1YTogGJzmNy6XXuO
Sov8eSfmCRp4oe5NsUuVJsFiv59vh03JyoQaOxjCAjdK1D+YfESA3SmQsuX6Z9eL
otflWCUv41PdqJ2yd1ymzwt4Tkfo3r5NKew=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:18 2025 by rpki-client