Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
File:                     d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa (raw, json)
Hash identifier:          akpMqp1Eza4zM+YJnRdQvLsEdKtVzCpTRdSkDrEeypA=
Subject key identifier:   53:8F:A0:02:11:8D:D0:FB:E7:17:5A:7C:8C:D9:20:1B:A5:B7:DA:6E
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584A10354BAEE48393CBE4E6F560
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     198949
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4b:ae:e4:83:93:cb:e4:e6:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=ca100e69-6102-4f08-b458-4bce70a5cf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:64:e3:7c:76:5f:47:81:81:8b:a6:8b:13:
                    ec:a8:4e:44:b8:70:84:f9:06:81:d1:46:04:fd:79:
                    77:4b:b4:fa:3f:62:65:07:15:bd:24:63:06:61:b1:
                    ca:6a:b2:78:8e:4c:94:10:df:08:4e:42:e2:48:8d:
                    3b:e3:ad:59:24:57:5a:96:51:0a:57:10:79:88:30:
                    c6:d3:d3:62:0f:d4:52:3c:13:7c:47:a1:2f:37:52:
                    a3:87:41:ac:c2:b8:2b:63:54:eb:89:83:27:0c:a1:
                    e6:d8:bc:c5:88:7b:c4:70:39:66:fb:6d:00:37:80:
                    9f:53:b8:34:96:3e:e9:b2:0d:70:00:1d:26:3d:39:
                    7a:f7:06:5e:8c:ea:69:13:c0:79:7d:20:24:43:69:
                    99:6c:45:4f:95:3d:7f:e5:3e:59:c8:63:bd:de:05:
                    06:a0:27:08:05:b3:a3:57:b0:a4:2b:5d:b0:da:ce:
                    33:c4:67:b4:2b:20:77:ec:e5:d4:4f:b4:43:ca:fd:
                    2b:d6:84:f9:df:99:5b:42:00:28:14:15:8d:11:d6:
                    c0:7e:7e:ba:df:59:1d:03:b5:c4:40:4d:32:46:34:
                    a8:eb:3f:76:82:6f:60:cf:43:44:cf:c0:e2:3d:6a:
                    4d:70:4f:bf:2b:51:bb:8c:cf:19:f8:19:32:c9:8c:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8F:A0:02:11:8D:D0:FB:E7:17:5A:7C:8C:D9:20:1B:A5:B7:DA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:ba:50:4d:e3:70:67:6f:ea:6b:93:50:69:7d:12:eb:5f:
         b1:2b:b7:1e:65:45:b7:4e:dd:62:b4:06:4e:6b:1b:67:54:14:
         33:a1:ae:3c:8c:bc:83:7a:ef:9c:7a:d2:78:3c:9a:dd:f5:cf:
         ed:4f:92:43:f4:5d:98:86:17:d5:d9:5e:4b:2f:73:bf:51:81:
         3d:c9:c6:42:bc:6e:3f:1f:15:95:d6:5b:f9:f7:6c:b6:02:c8:
         8c:a9:8e:34:42:36:da:5d:3e:41:24:19:80:c6:16:50:b3:20:
         d3:96:8a:d9:c8:28:65:45:16:0f:5d:0a:70:98:c2:e2:5f:d6:
         10:95:1a:f1:07:f3:2c:e4:a1:58:10:c3:61:ae:6e:aa:e3:fd:
         ef:50:0e:5f:2e:c0:32:c2:a0:33:5f:bf:b5:1c:e8:31:88:cf:
         c2:31:7f:e1:89:db:b3:29:a0:4f:49:8e:de:ea:ff:a0:6c:cf:
         ff:8e:89:86:a8:87:19:cb:89:cd:1f:3a:03:43:c6:ca:cf:5e:
         3d:71:ee:d1:f5:fc:57:bc:b3:50:09:1c:e1:20:1e:fb:10:24:
         f3:9f:4e:74:a8:3b:ae:c8:70:93:40:d3:e2:32:8b:94:d1:6a:
         ac:42:ae:a5:a2:c4:82:42:1b:68:61:df:b3:2c:4d:00:cb:73:
         be:82:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:45:52 2025 by rpki-client