Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
File:                     80d9d793-e3b6-333e-9df9-e0b8c159682c.roa (raw, json)
Hash identifier:          WfwtvkGpV0d+3gvBjG2ymFtzuDGsHRaHNTzlh239qbw=
Subject key identifier:   EC:47:38:79:C7:36:39:86:B0:FB:FA:25:AB:D1:93:0D:4D:C9:68:A5
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF61455C4FFFC30D8443F040
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:45:5c:4f:ff:c3:0d:84:43:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=1263a3d5-05b3-4a9a-8ec0-9803b05746e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:24:0d:f4:85:c3:68:c3:b4:22:35:ad:28:
                    1d:96:d6:4a:f5:7c:d4:24:a3:04:d4:39:b3:65:80:
                    62:23:3d:7f:95:cb:0f:c4:75:af:f0:28:68:4e:b7:
                    08:75:6b:1a:f6:ec:63:f8:93:df:3d:95:55:fc:05:
                    bb:1f:4d:64:c0:f1:54:1b:02:d3:15:ab:53:69:d1:
                    79:2e:11:f6:68:7d:b1:89:58:72:67:d6:7b:30:4c:
                    42:80:32:b0:f4:b5:f4:25:f3:ac:85:95:1c:04:e5:
                    4e:13:c6:3e:d3:db:7d:25:79:68:92:18:c1:80:89:
                    e0:c5:02:c3:f3:ad:89:97:68:0b:29:af:22:80:eb:
                    69:64:ee:99:25:43:82:0e:c9:dc:91:06:df:32:c6:
                    9c:bc:4f:82:75:3a:61:d3:c5:a7:10:5e:9b:3e:6f:
                    75:0a:56:81:87:d9:fc:ea:56:9a:5f:54:a7:20:24:
                    1f:92:99:8d:a7:2f:9a:8c:73:b2:b3:15:0a:21:d1:
                    94:7e:d3:5d:7b:ee:72:24:a0:ee:5d:d6:73:ef:b4:
                    76:f8:42:49:a6:3a:fe:b7:3d:df:70:44:9b:12:94:
                    0b:df:b4:d7:4a:08:57:ab:fb:16:49:08:d9:c0:aa:
                    cd:5a:9c:f7:64:f4:90:46:af:e1:92:7a:e7:68:e4:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:38:79:C7:36:39:86:B0:FB:FA:25:AB:D1:93:0D:4D:C9:68:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:41:78:99:5f:93:e7:4b:8d:a7:79:ce:02:65:dd:60:d6:
         00:ac:e3:7f:f3:1d:08:75:38:e8:e5:de:c8:78:56:c8:b9:e3:
         03:2a:a1:b3:b3:bb:12:29:3e:c3:6d:e1:be:30:84:bc:72:48:
         a3:b9:f9:82:0e:93:a3:e6:eb:11:53:d2:b8:e2:7f:35:74:30:
         ac:2c:62:77:29:11:d6:de:7a:38:0e:c2:9e:01:88:5c:a1:01:
         ff:53:db:35:c1:4a:3e:5c:86:23:52:fa:9d:53:ea:e8:fb:d6:
         b9:f2:fa:68:23:c3:85:f9:b3:a3:d5:19:d3:d0:f7:20:8d:a4:
         a9:05:49:8f:5c:aa:db:15:ef:08:84:15:37:bb:c0:40:3b:62:
         d8:71:fc:94:d7:ad:8a:1d:d1:29:7d:95:a6:ef:dd:5a:d8:56:
         cf:52:9b:a6:c4:f8:04:f4:14:d8:e8:95:e6:2b:c6:60:1d:a9:
         c1:27:70:d2:32:98:2c:51:fd:f3:95:98:4f:3d:af:37:d7:4b:
         f4:d2:17:fe:ff:88:32:af:2d:f5:b3:9d:e3:d1:25:d0:c8:6b:
         cb:b4:dc:e5:a0:fe:bc:71:df:f4:32:ec:6b:ed:1b:3c:bb:cc:
         25:5b:1a:51:02:2d:f2:60:50:4b:a3:92:80:9c:13:11:18:e6:
         d1:c0:17:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYUVcT//DDYRD8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MTI2M2EzZDUtMDViMy00YTlhLThlYzAtOTgwM2IwNTc0NmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRckDfSFw2jDtCI1rSgdltZK9XzUJKME1Dmz
ZYBiIz1/lcsPxHWv8ChoTrcIdWsa9uxj+JPfPZVV/AW7H01kwPFUGwLTFatTadF5
LhH2aH2xiVhyZ9Z7MExCgDKw9LX0JfOshZUcBOVOE8Y+09t9JXlokhjBgIngxQLD
862Jl2gLKa8igOtpZO6ZJUOCDsnckQbfMsacvE+CdTph08WnEF6bPm91ClaBh9n8
6laaX1SnICQfkpmNpy+ajHOysxUKIdGUftNde+5yJKDuXdZz77R2+EJJpjr+tz3f
cESbEpQL37TXSghXq/sWSQjZwKrNWpz3ZPSQRq/hknrnaORkzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOxHOHnHNjmGsPv6JavRkw1NyWilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODBkOWQ3OTMtZTNiNi0z
MzNlLTlkZjktZTBiOGMxNTk2ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8P
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEoyQXiZX5PnS42nec4CZd1g1gCs43/zHQh1OOjl3sh4Vsi54wMq
obOzuxIpPsNt4b4whLxySKO5+YIOk6Pm6xFT0rjifzV0MKwsYncpEdbeejgOwp4B
iFyhAf9T2zXBSj5chiNS+p1T6uj71rny+mgjw4X5s6PVGdPQ9yCNpKkFSY9cqtsV
7wiEFTe7wEA7Ythx/JTXrYod0Sl9labv3VrYVs9Sm6bE+AT0FNjoleYrxmAdqcEn
cNIymCxR/fOVmE89rzfXS/TSF/7/iDKvLfWznePRJdDIa8u03OWg/rxx3/Qy7Gvt
Gzy7zCVbGlECLfJgUEujkoCcExEY5tHAFwU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:16 2025 by rpki-client