Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
File:                     4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa (raw, json)
Hash identifier:          iG0J3FRNFYOX8jNLKZ60muP++YxK3yjy9ouVspeOMr0=
Subject key identifier:   79:D8:A3:D7:FB:0C:03:04:6D:17:94:05:BF:8D:4B:13:23:68:BA:81
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584A268AB8E5BCE257A0941BCD00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     20253
IP address blocks:        2606:bc40:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b8:e5:bc:e2:57:a0:94:1b:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=1896b707-f740-4b37-bf6f-ecd097c5df94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:8b:c4:f0:c7:b1:0b:bb:5b:53:94:4d:a7:
                    5c:5d:10:f4:f5:be:98:9c:83:f5:0b:1a:d8:62:3f:
                    05:39:77:26:1e:5c:d9:68:31:b9:d3:4b:73:8f:25:
                    b8:7b:6b:9d:4e:bc:d9:ec:e2:c7:a3:31:3b:b7:e7:
                    29:8a:9c:8f:94:53:d4:08:f1:e3:2e:74:50:8b:c4:
                    8b:eb:1c:28:13:8c:33:59:77:df:fa:53:58:80:59:
                    e3:44:3b:8b:26:6b:57:26:53:07:5c:1f:ca:66:35:
                    10:aa:9e:cd:4f:61:3c:bd:50:e0:88:7c:83:c4:7c:
                    54:8e:72:69:b2:58:40:33:f3:a3:0d:62:61:7e:ba:
                    16:bf:31:be:f8:72:e1:bb:c4:da:25:2f:93:b8:3d:
                    f8:c2:59:8c:8c:5b:af:ed:ba:eb:16:07:84:eb:0a:
                    d3:c6:c0:c6:03:9a:65:57:e4:6f:76:5e:5e:5b:28:
                    84:69:13:bb:f2:cd:0e:3c:f4:14:6d:10:04:a4:fa:
                    f9:14:bd:18:09:18:31:91:23:ee:ef:d1:82:35:60:
                    26:6c:03:6a:37:3f:90:a2:52:0e:e7:6a:08:f8:2d:
                    d9:7a:ea:58:fb:3f:c7:9c:7a:81:22:8a:9a:c5:10:
                    9d:2b:66:db:fe:2a:f5:a0:54:53:0f:7c:be:41:43:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D8:A3:D7:FB:0C:03:04:6D:17:94:05:BF:8D:4B:13:23:68:BA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4fe60d86-9c76-381a-87c9-295d0d16c2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ac:28:fd:79:70:9e:73:30:e0:7f:17:f2:9e:1a:b4:a8:97:
         53:96:61:62:a5:8f:e1:af:f6:00:1d:69:07:3d:e0:34:ac:00:
         73:e1:f6:f8:b9:f6:22:d4:d0:b2:d7:6c:7b:98:b9:1d:f9:0e:
         d7:2e:ca:79:16:8d:77:e4:ab:b9:21:72:63:b1:7d:ff:2d:70:
         04:db:ad:9a:38:47:06:96:5e:c8:c8:dc:a4:78:a2:9e:fa:6a:
         cc:7c:25:8b:98:21:51:5e:47:54:5b:4b:90:49:b8:69:17:da:
         89:8b:50:36:64:f2:36:da:90:1c:46:d3:19:55:85:91:59:18:
         ce:ac:ad:bd:ae:28:50:21:9f:47:40:7c:bd:92:e7:c4:90:ff:
         23:38:5a:fb:e4:b7:60:80:08:8d:de:75:0e:c3:73:13:39:37:
         3c:de:32:ea:24:eb:25:c1:86:90:cf:31:99:ef:c4:13:1c:a7:
         38:70:52:bc:f3:cf:9b:51:dc:b2:71:80:a6:f4:c5:c7:cd:79:
         4f:e2:b5:ba:e5:19:70:fd:81:dd:75:3f:e0:cf:ce:83:ee:5d:
         42:db:f4:27:6c:ab:56:0e:a6:ed:d1:7f:01:18:82:04:91:2f:
         d7:09:22:81:fc:ba:f9:b6:aa:77:41:be:39:38:a1:bf:4b:3e:
         49:b0:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:10:55 2025 by rpki-client