Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa
File:                     8874e898-e505-3973-bcfd-eed796109e46.roa (raw, json)
Hash identifier:          3ShxUinhnh99QI/X5lmpcSUZIXO/X0nHGFFc2DlISbA=
Subject key identifier:   6F:AF:6C:AB:B0:7C:C9:28:2C:97:7D:36:DD:4B:B6:BE:8E:70:A3:E7
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584A51D073833D3D66E571DC2D90
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     20253
IP address blocks:        2606:bc40:f22::/48 maxlen: 48
                          2606:bc40:f003::/48 maxlen: 48
                          2606:bc40:f004::/48 maxlen: 48
                          2606:bc40:f005::/48 maxlen: 48
                          2606:bc40:f006::/48 maxlen: 48
                          2606:bc40:f007::/48 maxlen: 48
                          2606:bc40:f008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:73:83:3d:3d:66:e5:71:dc:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=8a8d94b0-6c5c-4bca-8398-76e7dec277e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:af:9d:dc:73:a6:5e:15:c0:88:fb:8b:27:
                    14:b6:cf:d9:3e:f3:15:10:14:5d:ad:3b:79:cc:52:
                    0c:a6:69:50:25:ad:3f:4c:83:36:2c:69:da:22:2b:
                    f6:04:67:03:b0:ba:98:ce:37:8c:ea:9c:0f:97:a6:
                    63:f5:e9:9e:b4:10:e9:71:a3:4f:2b:2b:a8:23:59:
                    4a:7b:47:97:b9:c7:9f:a0:43:56:f3:89:fa:6a:cd:
                    d7:99:60:c6:cf:eb:5a:c5:f3:d6:95:f1:7f:64:f0:
                    99:b6:de:68:01:c4:c3:19:68:77:b8:a1:bc:bb:ed:
                    ff:94:d0:1c:59:bf:d3:fb:c2:70:3c:4c:69:79:75:
                    39:6c:12:14:40:b1:2b:0e:25:a8:40:cb:d9:3e:8b:
                    a2:88:5e:98:fa:5c:b8:62:00:6c:75:76:9f:c5:ad:
                    82:f1:b6:84:0d:dc:8c:63:1c:ab:10:9b:34:55:08:
                    c0:9c:06:db:75:a7:c3:23:c5:46:29:3c:3f:7c:e1:
                    e5:23:43:e4:da:6d:11:56:00:65:79:7b:b8:8d:0f:
                    65:1d:01:3e:33:24:40:16:f7:2e:18:e9:64:52:90:
                    1b:f4:37:2b:ed:e3:35:e4:be:37:3d:04:9a:7a:12:
                    2d:9f:d1:a0:2d:20:35:01:ec:69:e1:b5:3a:f8:6b:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:6C:AB:B0:7C:C9:28:2C:97:7D:36:DD:4B:B6:BE:8E:70:A3:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8874e898-e505-3973-bcfd-eed796109e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f22::/48
                  2606:bc40:f003::-2606:bc40:f008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:90:2e:fa:3e:57:b0:8b:c5:04:bb:d3:25:6c:aa:23:56:
         77:29:2f:ed:60:59:54:fe:8a:91:38:bd:b4:ba:df:07:01:2e:
         cd:14:3a:6d:d7:07:c2:bb:1c:78:2b:7a:b2:1e:c3:c8:55:b6:
         31:0c:63:38:07:d8:dd:3d:85:1a:18:fb:f7:0e:b7:c3:58:32:
         f0:19:1e:bc:5f:c7:64:d1:bb:23:72:24:ef:2e:2b:d7:1f:d7:
         4e:6c:46:dd:ce:85:9f:99:a3:67:d4:89:bc:dd:55:b2:d8:92:
         50:89:36:a2:39:dd:04:d5:18:51:b8:a8:ba:56:76:b3:e6:ef:
         fe:76:2a:da:fc:49:24:b6:93:ec:3e:1e:9c:a7:aa:06:5c:8f:
         f0:e4:dd:bb:57:11:ee:ad:f7:92:54:1c:30:0d:30:94:b5:2d:
         04:bd:1a:7c:89:2b:39:80:98:5d:d3:69:b3:61:b9:04:0f:b5:
         b9:61:32:41:c5:51:91:f5:28:d3:c9:ec:84:30:c7:61:f5:70:
         35:44:8c:17:67:31:af:89:74:d1:67:3a:14:86:11:26:b8:b5:
         4b:95:16:12:64:39:a8:13:ed:c0:2c:0a:3f:fe:e1:16:ba:80:
         34:5b:51:1b:e8:9f:bc:fe:cd:c1:50:6a:ff:ab:58:54:4c:cc:
         f5:cc:b4:c9
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEpR0HODPT1m5XHcLZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
OGE4ZDk0YjAtNmM1Yy00YmNhLTgzOTgtNzZlN2RlYzI3N2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozivndxzpl4VwIj7iycUts/ZPvMVEBRdrTt5
zFIMpmlQJa0/TIM2LGnaIiv2BGcDsLqYzjeM6pwPl6Zj9emetBDpcaNPKyuoI1lK
e0eXucefoENW84n6as3XmWDGz+taxfPWlfF/ZPCZtt5oAcTDGWh3uKG8u+3/lNAc
Wb/T+8JwPExpeXU5bBIUQLErDiWoQMvZPouiiF6Y+ly4YgBsdXafxa2C8baEDdyM
YxyrEJs0VQjAnAbbdafDI8VGKTw/fOHlI0Pk2m0RVgBleXu4jQ9lHQE+MyRAFvcu
GOlkUpAb9Dcr7eM15L43PQSaehItn9GgLSA1Aexp4bU6+GuWXQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFG+vbKuwfMkoLJd9Nt1Ltr6OcKPnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODg3NGU4OTgtZTUwNS0z
OTczLWJjZmQtZWVkNzk2MTA5ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAJga8QA8i
MBIDBwAmBrxA8AMDBwAmBrxA8AgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqmiQLvo+V7CLxQS70yVsqiNW
dykv7WBZVP6KkTi9tLrfBwEuzRQ6bdcHwrsceCt6sh7DyFW2MQxjOAfY3T2FGhj7
9w63w1gy8BkevF/HZNG7I3Ik7y4r1x/XTmxG3c6Fn5mjZ9SJvN1VstiSUIk2ojnd
BNUYUbioulZ2s+bv/nYq2vxJJLaT7D4enKeqBlyP8OTdu1cR7q33klQcMA0wlLUt
BL0afIkrOYCYXdNps2G5BA+1uWEyQcVRkfUo08nshDDHYfVwNUSMF2cxr4l00Wc6
FIYRJri1S5UWEmQ5qBPtwCwKP/7hFrqANFtRG+ifvP7NwVBq/6tYVEzM9cy0yQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:35:20 2025 by rpki-client