Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa
File:                     dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa (raw, json)
Hash identifier:          zOL9pYVNwziNdUZzYDwJmOnGecGeA6TJKtTVlmHcEnc=
Subject key identifier:   30:43:FB:94:77:21:E5:D1:90:9E:04:A9:A0:2A:47:57:76:EC:21:69
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF613B334CD38E91BB158A00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:33:4c:d3:8e:91:bb:15:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=bf4a9d12-20d0-4108-9389-551eaa4f4ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:5d:f6:8e:3e:68:18:e4:82:46:12:56:1a:
                    6b:5f:35:5b:94:d2:f1:90:75:5d:1a:85:d0:f5:fb:
                    77:4f:fb:57:ce:4c:31:cf:fa:d8:7f:1c:7d:d0:51:
                    0c:ee:d0:9a:0c:22:45:fc:47:5e:bb:03:ee:4a:a3:
                    de:95:53:8d:f3:a7:0b:1c:0e:89:5f:67:f8:9f:2b:
                    7a:d8:ed:9e:38:c6:a2:95:3b:64:7d:2f:0d:0b:26:
                    98:90:cf:0a:fa:63:7b:ea:67:e8:d0:80:35:ac:eb:
                    6b:d4:a0:1b:68:f1:1a:00:3f:16:63:88:e2:ef:ad:
                    f7:eb:93:c9:ea:94:72:c6:76:d8:d4:90:b9:5b:96:
                    16:45:76:88:5d:f6:05:2a:71:c6:22:e1:16:3d:75:
                    43:57:fb:04:b1:40:0c:37:43:4a:76:c2:a6:e5:d1:
                    52:40:01:9b:a2:eb:35:0c:da:bd:9d:1c:94:d2:84:
                    1d:ce:96:4f:f4:8a:3e:fe:28:a7:8e:7d:33:19:70:
                    67:9d:89:83:3e:01:dc:4c:78:11:d8:45:81:b1:7d:
                    7a:8a:82:7b:4a:0b:95:00:f2:d7:ec:c9:97:e3:40:
                    ad:4c:c8:80:27:0f:c9:b8:10:9b:e3:d9:e4:70:bc:
                    e2:25:8a:03:83:5f:68:72:38:37:4b:d2:1e:6b:43:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:FB:94:77:21:E5:D1:90:9E:04:A9:A0:2A:47:57:76:EC:21:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:23::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:a2:d3:13:46:a7:97:d1:ef:eb:54:1e:a5:3a:70:b8:a8:
         62:c1:90:04:54:86:30:a5:38:3b:f1:bb:f7:fc:66:d2:22:3e:
         a2:09:d2:1a:fe:41:13:45:07:f5:c9:ec:0a:f4:ed:93:64:b1:
         3b:92:1b:07:43:73:25:89:ae:67:00:14:ec:d3:c0:f4:67:02:
         63:13:5c:fd:b2:2d:f3:ae:98:9d:37:c3:a7:a5:1f:3f:6e:25:
         65:78:f5:d3:4f:fc:d9:6f:cf:37:31:d0:20:4a:38:f3:f5:1f:
         2d:23:54:7d:1b:a9:5b:c6:7e:96:7e:ad:b0:ab:7f:8e:0f:00:
         af:36:0b:ae:09:1d:0b:eb:55:42:62:08:2f:76:a8:ec:27:d3:
         5b:c0:70:67:e6:b0:8e:37:44:33:74:a0:f4:1d:e6:d8:87:77:
         93:90:5f:71:52:3c:69:2b:9b:37:88:05:f3:ca:40:01:06:37:
         1c:53:f2:a8:67:33:2b:26:84:b5:80:07:98:1d:16:54:44:6b:
         89:aa:bc:dd:9d:a8:47:ba:3a:0d:ab:98:46:bd:63:58:79:11:
         00:e5:d1:69:6f:24:90:42:58:7b:db:e6:c2:12:ff:41:72:0c:
         a7:9d:da:0f:5b:fd:70:69:5b:6d:6a:f4:6f:e8:ac:09:de:a3:
         46:a5:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:17:05 2025 by rpki-client