Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa
File:                     81d7d678-588f-3bb0-afbc-4909e29f803b.roa (raw, json)
Hash identifier:          UBTSfxjAZQBF1J2IOecoe8fJLvbNCkXiLxXOkyKi404=
Subject key identifier:   6E:AA:A5:59:22:8D:B2:66:8B:70:57:48:7D:9E:32:27:27:40:02:81
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858487CEB3C0AE609603EDFF92700
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3c:0a:e6:09:60:3e:df:f9:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=ebe33087-46cb-4a48-a4c8-153b9112d428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a8:cc:3d:10:80:12:71:94:27:84:72:3c:ae:
                    af:ff:52:23:9b:e5:11:2b:33:20:1c:a1:35:e2:57:
                    43:3e:4e:79:09:b5:79:f9:f0:da:6f:f6:5d:f3:08:
                    73:fa:41:70:f1:7b:fb:d8:3c:82:22:6a:5c:9c:69:
                    14:0f:61:17:26:3d:1a:20:c2:90:9b:c2:f0:dd:43:
                    2f:d8:72:19:5a:fd:93:c4:be:e3:88:34:b5:f9:ac:
                    b0:30:fd:5c:83:2c:ee:c1:4e:b9:47:85:91:cb:2f:
                    12:53:a5:24:5b:f7:be:8a:37:99:3a:e9:05:82:fb:
                    10:65:39:9e:34:cd:35:51:79:77:3f:83:7f:94:1d:
                    c3:c8:a0:c1:e6:f8:69:a3:46:26:9f:60:42:2e:50:
                    5c:4e:6d:b9:bc:8c:84:b0:e8:af:da:03:6c:6a:5a:
                    1e:a0:ac:d3:af:ea:fa:2c:42:55:72:7d:02:ae:11:
                    65:2e:04:81:be:00:2e:f2:53:cc:10:b4:58:c5:b9:
                    ea:af:a4:5b:b2:1e:b1:52:25:09:bb:4f:07:13:2d:
                    95:ff:cb:dd:3b:d0:9a:a9:8b:bd:27:d3:af:41:31:
                    69:79:28:2f:7e:75:bd:9a:45:16:6f:25:f1:4f:dd:
                    dd:6d:26:24:31:86:6b:bc:76:53:a8:38:19:e9:50:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AA:A5:59:22:8D:B2:66:8B:70:57:48:7D:9E:32:27:27:40:02:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:67:2e:7e:4f:23:67:a5:6f:dd:b7:61:57:e3:ea:13:87:
         06:1d:97:ba:53:1a:c6:03:9d:06:b3:0e:e2:d0:3f:ef:d6:c2:
         fb:58:1f:9b:80:d8:7c:11:45:44:d2:1d:79:76:5c:ec:0d:09:
         fa:b1:5a:48:99:f7:c2:c6:6a:72:b2:2c:28:e2:ad:fc:b7:76:
         9d:dd:02:21:66:c2:f6:3e:85:b5:24:fe:8c:6e:4a:89:35:74:
         60:d6:f4:44:ee:cc:ca:23:f2:9f:f1:97:c6:95:2c:80:c2:e4:
         06:56:c4:9f:21:77:74:cb:77:5a:68:e7:90:a4:a7:e1:cd:2f:
         e6:e4:3c:d8:0e:a8:e1:f5:6f:71:1d:79:f8:31:67:b0:95:82:
         f5:a1:25:44:aa:10:61:57:c0:3c:d9:5f:13:9d:0b:ec:28:24:
         e6:9e:7a:68:c7:4b:73:26:bc:82:96:37:53:95:8c:4c:64:e2:
         28:aa:8c:80:11:12:dc:61:49:b6:22:14:60:ef:ea:91:08:bf:
         f1:f9:be:bb:71:37:b6:55:08:2d:d8:9b:4c:46:11:23:95:02:
         4f:be:28:cc:c1:8c:3a:99:71:6d:98:fd:f7:ea:2d:d4:db:b3:
         18:85:18:b3:cc:92:0b:b1:fe:cf:7d:73:e1:18:ae:c6:4c:4b:
         4c:f0:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:26 2025 by rpki-client