Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa
File:                     22d49540-82c0-3ced-9af3-076c24330d21.roa (raw, json)
Hash identifier:          M6P3c2pEZ32DQ1CZlOOHZgfGNsF22D1SWGZifaIKDF8=
Subject key identifier:   98:85:F8:6A:55:24:28:4B:D4:B1:B7:EA:C2:4A:14:36:6F:73:2B:86
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584ACCA6527D02E1C29950CC0D80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     20253
IP address blocks:        2606:bc40:f24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:52:7d:02:e1:c2:99:50:cc:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=897dcb1f-e19b-4240-b084-3622f88c7a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:9e:04:af:79:82:53:70:51:74:c9:1e:13:
                    43:8d:08:cf:13:8a:a1:a8:00:78:22:51:b3:77:5d:
                    26:3d:fa:b8:95:63:67:b0:1e:d7:43:b7:8a:13:bb:
                    cb:c7:c0:78:de:a8:22:c9:3f:39:fb:66:a4:7e:99:
                    8f:92:b3:1a:d4:0b:66:a8:8d:6b:1f:f2:26:18:47:
                    ae:e8:9d:41:a5:7b:20:fd:74:10:12:87:14:14:da:
                    71:6f:08:0c:4f:c3:b8:80:8d:55:7b:81:2e:ef:98:
                    a0:8f:dc:38:ef:3b:92:bf:ee:27:13:3a:16:d9:68:
                    f8:9a:5a:12:6d:0e:ac:a1:93:4c:7f:8a:8c:bd:1e:
                    5a:31:9d:85:3d:69:cb:76:c2:44:54:13:4a:20:d3:
                    9a:2d:ef:3d:2b:11:d3:7c:0a:aa:f2:5f:9b:11:9f:
                    7d:11:7c:dc:ea:da:07:5c:23:29:24:6b:d7:3a:bd:
                    df:0b:ca:02:e2:12:28:58:c2:7b:59:27:97:1e:dc:
                    76:d1:32:63:76:0d:4e:50:ae:cf:cd:d9:f6:41:9e:
                    84:0f:b3:50:60:e9:1e:f6:a7:46:2a:fb:eb:e9:83:
                    e9:f3:5e:7c:00:6b:4b:72:da:d2:88:f3:a5:fa:30:
                    1d:a2:51:46:68:c2:13:4a:cd:5d:a7:fe:8f:80:fb:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:F8:6A:55:24:28:4B:D4:B1:B7:EA:C2:4A:14:36:6F:73:2B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:4e:47:a5:2f:ac:43:50:09:67:38:a0:01:92:41:19:d2:
         c7:52:bf:64:33:e1:af:9a:db:b3:84:79:6f:f7:ae:9d:33:0b:
         69:a5:27:08:16:44:b4:f6:a6:ff:06:98:2c:f0:96:7f:c8:0c:
         aa:e5:59:5a:cb:6d:5d:05:dc:49:b6:5d:28:d7:a1:76:b7:34:
         bc:67:ec:7d:ea:68:2a:b1:ba:6e:84:22:20:40:76:8c:e2:35:
         bb:07:93:55:57:a8:d8:b1:73:7d:e0:68:9e:d7:b3:00:b7:c3:
         40:09:17:4d:bd:f0:14:fc:8f:82:b8:ab:31:1a:35:aa:1f:61:
         f8:82:a8:f7:39:fe:30:c3:ee:f4:b8:52:6e:27:ee:c1:7b:27:
         76:e2:98:e9:39:e9:87:4f:29:30:5c:47:43:ea:ed:a0:23:c4:
         b9:d8:6b:64:68:ff:80:f1:6d:d6:31:e1:25:ab:09:e5:32:59:
         0b:75:34:22:de:1d:85:c5:f8:82:22:b3:20:92:f1:76:22:e7:
         f6:d7:63:a5:ba:0a:f9:21:b7:9b:21:c4:ba:2b:9f:8b:c4:9a:
         da:f4:02:bf:20:63:b7:75:59:e2:9a:a4:f5:38:dd:22:25:81:
         31:df:ca:fc:2f:f0:79:14:2e:b2:08:9b:07:b0:fe:87:b6:b5:
         8b:1f:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:42 2025 by rpki-client