Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f341b89f-b8d7-30e2-a94b-a407fee6a08e.roa
File:                     f341b89f-b8d7-30e2-a94b-a407fee6a08e.roa (raw, json)
Hash identifier:          PU7bGGJtEoaRPH8wyBoJlRQf785BTZ+nWRWZ9LRf/KQ=
Subject key identifier:   C4:10:32:51:DA:19:D4:59:A1:6A:A7:B7:B6:47:86:DB:F8:18:B7:46
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858494733E60A0B50E5AC78127340
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f341b89f-b8d7-30e2-a94b-a407fee6a08e.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e6:0a:0b:50:e5:ac:78:12:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=4d0eac69-5106-43b0-b476-e402b83070ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:1f:48:94:15:5e:94:45:4f:e8:00:38:69:
                    fd:16:f7:fe:33:92:f5:15:06:c7:3d:2b:4f:81:24:
                    56:82:d2:6f:0d:96:d7:a0:04:46:91:ac:92:b6:3d:
                    c8:3b:37:6a:99:be:ed:80:1e:73:67:00:9f:f5:3d:
                    35:4f:ab:43:33:c8:1e:ac:9f:73:aa:fa:85:d6:0f:
                    01:b8:75:6d:7d:92:5f:f1:fb:26:eb:3c:50:23:9b:
                    cc:b1:af:00:48:a5:1d:cd:50:87:bf:86:86:e8:86:
                    be:2a:5a:35:75:b3:31:a3:d1:d0:75:0b:5b:0c:2c:
                    e1:e1:d9:fe:24:79:61:d9:3d:1e:ae:9c:a7:d5:db:
                    c2:5e:9b:c7:01:75:5b:d3:24:45:ce:44:b7:9f:07:
                    5c:aa:0b:ba:78:34:94:1b:18:fc:b0:3c:44:cf:1f:
                    0f:7f:ea:a4:e9:45:ee:26:4f:17:ea:c9:9d:a3:c5:
                    4d:9f:9f:9c:74:24:43:f1:e9:13:b8:81:39:96:96:
                    40:5f:c0:45:e6:a0:82:c4:32:01:a0:c7:e2:a3:83:
                    0c:1a:eb:e0:7f:59:1f:a0:de:0c:22:7c:86:7d:73:
                    5c:49:61:5b:4f:69:39:a6:3d:29:ce:82:63:de:15:
                    02:ee:ba:54:f6:b5:2d:f3:a4:b6:a1:fc:85:e0:67:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:32:51:DA:19:D4:59:A1:6A:A7:B7:B6:47:86:DB:F8:18:B7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f341b89f-b8d7-30e2-a94b-a407fee6a08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:dd:82:b0:43:40:4c:4e:c7:ff:b5:4b:94:b6:73:b8:c1:
         64:19:ef:48:ee:ee:0d:86:20:4b:60:dd:17:26:a2:f1:d7:81:
         64:60:26:db:69:11:37:f2:2f:cb:46:9d:ee:f7:6e:80:d6:fe:
         d7:d5:9e:27:3c:d4:e2:0a:f8:a5:19:2b:c0:21:1b:c5:e7:6b:
         ad:1c:66:a6:d8:d6:c6:c3:dc:9c:d6:ad:9d:b1:7c:58:57:0b:
         1d:8c:3b:8d:02:00:37:64:8f:4e:39:67:1d:9c:a6:cf:b2:8c:
         c7:77:84:97:9e:0f:39:3c:15:aa:c6:d5:af:6c:c0:b8:f1:b7:
         fb:cc:cb:59:6c:84:67:9c:ba:1d:3a:ed:f7:64:f5:f0:c0:3d:
         17:32:8a:cc:e0:b2:f8:7d:92:c8:bb:18:ab:4e:55:05:e6:13:
         17:55:0e:3a:de:fa:74:ce:a8:c5:1c:99:eb:23:9f:99:cd:28:
         d2:9e:b5:97:ec:5f:e2:d3:90:69:81:75:e1:97:e4:39:52:19:
         31:c1:35:6d:9c:ab:33:f1:33:49:04:67:14:ac:32:f0:30:70:
         bd:b4:e9:d1:d0:dd:ee:65:d6:01:51:56:f1:d6:bc:22:2d:b6:
         5e:8d:30:69:7e:81:8e:92:09:27:5e:f6:87:d5:8b:53:1e:87:
         1f:cb:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:29:18 2025 by rpki-client