Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
File:                     7fc4090d-d0b8-3c02-8ba1-d51951663445.roa (raw, json)
Hash identifier:          hCmPMVtgUyqa/gnv4sGzeJYlRk5SLhQQjEIX/iYijD0=
Subject key identifier:   16:3A:E6:3F:15:79:71:83:08:E6:A5:93:71:90:50:E5:06:94:B1:4F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285849CE9A6885478592E2BB50F080
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20253
IP address blocks:        2606:bc40:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:68:85:47:85:92:e2:bb:50:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=3503bf63-41c2-4924-b088-5fed3ead4fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:31:16:ba:cc:1a:dd:bb:9c:8f:38:91:fa:
                    e9:c4:4f:c8:28:09:3b:f4:ce:7c:8e:17:65:2c:62:
                    37:4a:d4:3b:fd:24:e6:e1:5f:60:0b:4b:07:e8:81:
                    87:20:0f:e8:16:6d:b3:dd:ae:13:e5:b1:e0:85:81:
                    24:ca:3f:46:b4:71:eb:44:2c:5d:1f:79:8d:1d:de:
                    b1:fc:92:36:87:21:b3:d9:03:e5:3b:d0:97:e5:56:
                    52:e1:d6:2b:27:71:53:a0:71:7c:76:c6:96:6c:bd:
                    65:dc:f2:3e:05:39:17:9d:53:9a:6a:e9:5f:c7:42:
                    f0:b7:39:13:ce:89:c5:8b:6d:69:9f:b9:e3:8d:68:
                    4d:8d:1b:fa:59:2a:97:91:4c:d9:15:a5:4f:bd:c6:
                    23:3b:b0:83:ab:7c:29:0b:df:ef:ae:97:21:bf:4c:
                    13:fa:f8:71:e0:5d:2a:50:de:c4:ef:19:89:61:cd:
                    c7:0a:78:ba:18:db:7d:cf:3b:85:3e:d7:42:73:bc:
                    40:26:00:15:bc:65:9a:91:72:cb:e4:7d:0c:bd:a1:
                    75:20:80:7e:47:7c:26:d8:39:a4:37:0f:21:d5:5c:
                    5f:c4:3e:e3:e8:7b:2c:46:a6:7e:0f:c4:ca:e0:a9:
                    b2:81:60:78:bf:a4:6c:4a:78:f5:b4:65:38:af:e9:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:E6:3F:15:79:71:83:08:E6:A5:93:71:90:50:E5:06:94:B1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:15:4b:10:99:f6:2b:ca:78:06:81:1c:eb:d1:f4:a3:54:
         3f:ec:96:85:5f:b0:9c:14:cd:8a:2b:0f:b9:10:e3:25:81:e0:
         f8:68:c7:75:54:f6:5b:0b:09:c4:52:40:8a:b1:d0:da:91:64:
         fe:40:8a:71:80:48:76:58:09:b6:47:19:53:3d:aa:9b:3b:d4:
         dd:ba:67:33:4f:81:ba:77:17:22:cc:4d:28:d4:58:b5:5d:20:
         73:00:98:f8:6d:7a:1b:79:94:a5:0a:c0:4b:ef:f2:05:b6:03:
         93:df:d2:55:cf:ab:f6:d2:c9:32:da:7a:f8:2d:ed:6a:44:ca:
         42:7d:4d:ce:92:29:e3:4e:10:75:ea:4e:b4:c9:cb:8b:4d:60:
         43:6d:a0:50:ca:3c:5c:40:a0:7d:60:1b:ac:9b:dd:f5:cf:97:
         7e:10:02:28:a5:97:8d:32:20:6f:a0:e0:2d:5a:be:ef:35:e2:
         dc:0f:75:5f:32:48:35:04:82:18:18:0c:21:f8:6f:74:07:e6:
         89:bf:6a:56:21:3b:a3:29:1f:e4:d1:27:92:68:f2:75:2b:54:
         26:09:87:e6:87:05:7c:9a:4d:45:fa:33:00:89:b2:2c:3e:aa:
         e4:ff:18:2a:0b:34:6a:27:67:8e:ae:1e:51:4f:79:3a:41:e8:
         60:02:c0:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmmiFR4WS4rtQ8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MzUwM2JmNjMtNDFjMi00OTI0LWIwODgtNWZlZDNlYWQ0ZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwsxFrrMGt27nI84kfrpxE/IKAk79M58jhdl
LGI3StQ7/STm4V9gC0sH6IGHIA/oFm2z3a4T5bHghYEkyj9GtHHrRCxdH3mNHd6x
/JI2hyGz2QPlO9CX5VZS4dYrJ3FToHF8dsaWbL1l3PI+BTkXnVOaaulfx0LwtzkT
zonFi21pn7njjWhNjRv6WSqXkUzZFaVPvcYjO7CDq3wpC9/vrpchv0wT+vhx4F0q
UN7E7xmJYc3HCni6GNt9zzuFPtdCc7xAJgAVvGWakXLL5H0MvaF1IIB+R3wm2Dmk
Nw8h1VxfxD7j6HssRqZ+D8TK4KmygWB4v6RsSnj1tGU4r+muAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBY65j8VeXGDCOalk3GQUOUGlLFPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvN2ZjNDA5MGQtZDBiOC0z
YzAyLThiYTEtZDUxOTUxNjYzNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABtdFUsQmfYryngGgRzr0fSjVD/sloVfsJwUzYorD7kQ4yWB4Pho
x3VU9lsLCcRSQIqx0NqRZP5AinGASHZYCbZHGVM9qps71N26ZzNPgbp3FyLMTSjU
WLVdIHMAmPhteht5lKUKwEvv8gW2A5Pf0lXPq/bSyTLaevgt7WpEykJ9Tc6SKeNO
EHXqTrTJy4tNYENtoFDKPFxAoH1gG6yb3fXPl34QAiill40yIG+g4C1avu814twP
dV8ySDUEghgYDCH4b3QH5om/alYhO6MpH+TRJ5Jo8nUrVCYJh+aHBXyaTUX6MwCJ
siw+quT/GCoLNGonZ46uHlFPeTpB6GACwOc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:03:03 2025 by rpki-client