Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
File:                     3c0f3863-e6b0-3003-9543-cbcefd435650.roa (raw, json)
Hash identifier:          NK/ydaINHhgmzhsQ9ltDQ5ZbKd+7Mfm9TLKukZMHJKs=
Subject key identifier:   E1:28:AA:A4:BC:D5:7C:77:A8:9E:93:F1:81:DE:A3:53:52:DA:CB:0B
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584AC5AB8A69596779695CC4E800
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     2698
IP address blocks:        2610:130:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8a:69:59:67:79:69:5c:c4:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=e1c3773d-3a5b-4d3b-bd1e-40af16640c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:3d:a8:ad:72:02:04:17:4b:e2:86:f0:44:
                    83:06:7d:d6:07:cb:9d:3d:b6:51:d0:49:25:ed:7f:
                    22:7f:06:af:3c:3c:69:7c:7d:9c:1c:c8:3a:9e:f8:
                    cb:66:fa:48:f3:74:e7:b5:1e:bf:97:93:94:ce:b8:
                    f4:fe:b7:f2:0d:6b:d3:2e:d4:b4:45:45:e5:a1:50:
                    48:8c:37:ef:be:79:e9:0c:93:62:c3:91:d9:07:6a:
                    fe:b2:01:53:ab:63:12:88:06:b7:41:4f:81:1b:cf:
                    36:8e:e3:c9:9f:66:64:0c:5d:51:43:f7:35:da:c4:
                    fa:ea:cf:1d:5b:1e:b3:b9:11:fd:56:68:1d:1a:16:
                    15:75:33:35:e9:5d:6d:ac:c3:1c:75:f7:3d:8c:0b:
                    0d:ca:04:95:85:d3:5b:63:58:60:6a:2b:2b:67:a0:
                    87:dd:e2:94:8b:9f:dd:4e:e9:33:6f:ba:ef:52:75:
                    69:eb:bd:38:c1:a2:f6:18:37:c3:13:fe:e7:a5:85:
                    d2:f0:93:93:b8:fd:9a:fe:bf:07:39:29:14:18:8e:
                    ef:64:d6:97:17:36:52:02:b6:7f:a1:2e:17:6f:dc:
                    49:ef:2a:09:6c:4c:86:31:34:1b:55:a7:a4:5d:41:
                    41:3b:ee:0a:48:d3:9d:02:bd:ba:49:37:84:71:68:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:AA:A4:BC:D5:7C:77:A8:9E:93:F1:81:DE:A3:53:52:DA:CB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:b1:77:0a:f2:77:1f:4a:58:89:1f:14:bc:f7:b6:9e:56:
         10:0e:51:f4:16:9b:43:99:8b:88:39:37:aa:5f:cf:3f:b4:13:
         64:59:a1:47:d7:3f:44:50:25:33:d8:ac:8c:b8:53:b4:60:df:
         22:34:ff:a1:7b:aa:28:a6:36:17:e8:e1:1b:a2:1a:e7:a4:ef:
         06:11:bd:fd:24:57:ee:8f:20:91:a4:91:44:df:9f:f6:02:ba:
         84:49:1f:73:dc:d2:fe:f6:6d:27:33:04:f8:1f:37:45:37:36:
         df:92:3a:d2:6a:39:65:49:26:54:2d:27:a8:81:8d:64:85:3f:
         04:b3:28:17:73:74:79:5b:13:5e:eb:e6:29:8e:8a:c6:a6:b8:
         3a:78:74:c6:5e:53:f7:45:c9:f3:c5:17:db:a1:c5:41:ac:a4:
         28:2d:ae:ab:19:17:ae:f9:c6:1b:9b:93:8c:eb:32:70:ce:24:
         dd:6f:b4:c0:a2:5a:3d:31:89:09:cc:68:40:61:d0:68:f0:cf:
         5f:26:26:49:fe:62:0f:74:a0:e8:28:7d:92:f0:29:8d:be:4a:
         70:43:45:9c:a6:8c:c3:a0:9e:ba:12:84:09:ac:88:8d:cd:23:
         95:ab:9b:5f:29:f0:42:e2:ab:ab:2c:4d:0b:3f:3c:8a:18:47:
         4f:95:4f:46
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErFq4ppWWd5aVzE6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2
MzY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
ZTFjMzc3M2QtM2E1Yi00ZDNiLWJkMWUtNDBhZjE2NjQwYzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCY9qK1yAgQXS+KG8ESDBn3WB8udPbZR0Ekl
7X8ifwavPDxpfH2cHMg6nvjLZvpI83TntR6/l5OUzrj0/rfyDWvTLtS0RUXloVBI
jDfvvnnpDJNiw5HZB2r+sgFTq2MSiAa3QU+BG882juPJn2ZkDF1RQ/c12sT66s8d
Wx6zuRH9VmgdGhYVdTM16V1trMMcdfc9jAsNygSVhdNbY1hgaisrZ6CH3eKUi5/d
Tukzb7rvUnVp6704waL2GDfDE/7npYXS8JOTuP2a/r8HOSkUGI7vZNaXFzZSArZ/
oS4Xb9xJ7yoJbEyGMTQbVaekXUFBO+4KSNOdAr26STeEcWiD1QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOEoqqS81Xx3qJ6T8YHeo1NS2ssLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx
NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvM2MwZjM4NjMtZTZiMC0z
MDAzLTk1NDMtY2JjZWZkNDM1NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1
OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz
NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3
ZmQ0MzYzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhABMAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoXyxdwrydx9KWIkfFLz3tp5WEA5R9BabQ5mLiDk3ql/PP7QTZFmh
R9c/RFAlM9isjLhTtGDfIjT/oXuqKKY2F+jhG6Ia56TvBhG9/SRX7o8gkaSRRN+f
9gK6hEkfc9zS/vZtJzME+B83RTc235I60mo5ZUkmVC0nqIGNZIU/BLMoF3N0eVsT
XuvmKY6Kxqa4Onh0xl5T90XJ88UX26HFQaykKC2uqxkXrvnGG5uTjOsycM4k3W+0
wKJaPTGJCcxoQGHQaPDPXyYmSf5iD3Sg6Ch9kvApjb5KcENFnKaMw6CeuhKECayI
jc0jlaubXynwQuKrqyxNCz88ihhHT5VPRg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:03 2025 by rpki-client