Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa
File:                     cc286579-b050-3061-aac3-99a783752b74.roa (raw, json)
Hash identifier:          B8KZXCys1BthZTuSqg9PFkDwLkuDPFlbPC2heaYVEwQ=
Subject key identifier:   D8:FE:2D:CF:D7:19:78:6B:32:B2:3F:C0:03:33:2E:8A:3B:F1:3E:66
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584913AC3334DBBDDBEFC551D4FC
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:f104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:33:34:db:bd:db:ef:c5:51:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=f7ba6472-ded9-4f1a-823d-d4ea7803abdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:91:26:33:fe:c0:06:66:ca:79:0e:af:12:
                    38:eb:14:4f:0f:d9:71:b8:3b:3c:5d:7a:21:71:d7:
                    e4:42:b7:9f:8a:0d:ce:89:e2:46:09:c6:0e:9a:02:
                    ed:a0:fa:16:b6:23:65:4a:73:7e:80:25:f7:80:c9:
                    d8:e5:b7:bc:57:0c:0e:33:e7:eb:80:59:e4:5a:f8:
                    04:3b:df:fe:d6:38:39:0b:a9:41:31:62:de:17:0e:
                    df:6e:bf:71:9b:00:69:1e:9e:51:b5:a2:37:b9:28:
                    bd:c5:08:f5:e0:98:1e:7c:18:cd:ac:bb:22:40:d0:
                    2a:b2:bb:1a:2a:20:ef:cb:e3:e6:de:ee:e2:80:19:
                    e3:5c:37:99:e1:8f:6f:69:5b:ae:df:70:ba:7f:58:
                    63:70:73:64:e1:31:78:d8:b4:0a:29:45:9f:43:01:
                    56:bf:06:04:75:08:45:aa:f8:1c:e2:da:91:00:dd:
                    cb:76:aa:dd:f8:cc:39:be:fe:11:04:55:06:53:47:
                    eb:29:69:06:be:1a:16:de:b0:0c:f6:dd:66:74:36:
                    f6:83:db:0b:20:8e:af:4c:26:4c:3f:31:34:e6:0b:
                    1c:43:f9:98:e1:c8:21:4d:82:9d:67:83:20:61:fe:
                    42:64:fa:80:e8:5c:20:35:3f:0a:80:ea:b4:46:c5:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:2D:CF:D7:19:78:6B:32:B2:3F:C0:03:33:2E:8A:3B:F1:3E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:70:1b:6d:04:69:40:1e:3d:6b:e0:a9:ed:65:fd:ac:c7:
         80:2a:60:4d:dc:78:90:de:6f:8c:5e:65:21:48:9d:14:75:85:
         7e:28:42:d2:25:c6:e1:9a:c1:26:09:bf:ae:53:4a:c7:40:35:
         48:76:37:24:5a:d9:cb:c7:9e:91:ec:17:4d:90:a2:4e:0e:61:
         91:ed:97:af:98:45:83:c6:17:15:99:7f:2d:c1:14:2e:cc:a2:
         3c:11:bb:f9:67:4e:a3:80:39:bf:2d:2c:88:22:f9:eb:f3:8c:
         1d:50:e5:79:d6:29:c8:b1:11:fe:ec:c0:16:2d:5a:a1:52:ce:
         1a:a3:41:4f:91:03:7f:4b:36:90:76:f2:2c:b9:8d:b5:40:c5:
         dc:d2:85:77:38:1f:d0:7a:be:65:06:01:0f:70:7f:07:77:95:
         82:4c:81:d4:36:39:d0:da:37:6e:a1:b7:d6:97:e8:ab:dd:8a:
         a3:a7:9d:30:c7:32:42:67:df:56:7a:17:4a:4e:f7:22:03:54:
         42:d9:35:58:16:0a:23:21:39:c4:04:1d:6c:89:d6:c9:cf:0f:
         7f:80:cc:4a:43:3f:21:61:db:7a:06:af:eb:8d:4a:44:fe:87:
         bf:0e:ca:cc:69:97:14:2a:e7:3b:08:1f:67:e5:53:a9:cf:c0:
         46:89:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:31 2025 by rpki-client