Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
File:                     dc4a5d58-3571-3549-b66e-bc9038a5a256.roa (raw, json)
Hash identifier:          KAe6E2r59l1xX7K8mraecevBfN+knvTtIjX5iokq2fU=
Subject key identifier:   B0:BA:90:CB:95:CC:D2:5C:2E:89:67:FD:71:E6:62:F2:94:5D:47:16
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584988CF29A9797D0C3ACC5051C0
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     6122
IP address blocks:        2610:130::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:29:a9:79:7d:0c:3a:cc:50:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=a673fd3b-a46f-442a-b5da-807aa36939fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:6d:83:81:e5:2d:9a:a8:2b:bc:cd:b4:f3:
                    79:9b:01:73:bc:bb:6d:08:6e:0c:7d:5f:d0:2c:34:
                    1a:15:b1:4a:34:9d:fd:a3:1e:cd:64:bd:a3:0b:8b:
                    3d:e5:d1:52:17:b9:eb:21:b0:10:86:4b:26:15:36:
                    84:26:ce:38:b2:5b:a0:a3:b9:46:88:76:00:84:48:
                    9e:15:11:31:d8:3a:f1:36:8c:89:74:94:50:74:ef:
                    22:a5:e8:c7:34:50:55:9e:8d:6c:7d:49:8d:65:17:
                    75:25:03:0a:e3:ee:28:b0:47:1d:41:ee:ad:e1:35:
                    b4:ff:12:aa:b4:ad:6a:c3:0c:96:98:90:68:8e:a0:
                    18:77:6b:a3:23:1b:a9:f3:47:83:99:62:3e:1a:5d:
                    e2:5b:11:68:ae:3b:62:cc:d0:1b:8d:ea:93:77:0e:
                    b4:6e:6f:fd:ba:7e:8a:2e:86:20:61:73:2e:91:e8:
                    a7:eb:b3:30:77:0c:82:24:10:fe:18:a8:4c:7f:e9:
                    be:6c:e7:3c:5f:f8:60:7b:67:4c:d3:1d:5f:d4:ac:
                    37:c9:e7:3a:34:84:63:d8:a3:2c:42:e4:5e:73:15:
                    35:7a:c3:62:4c:30:f6:5e:95:c9:80:c4:15:48:f2:
                    8a:db:d9:41:95:f7:02:78:38:d0:ce:64:b2:38:3e:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BA:90:CB:95:CC:D2:5C:2E:89:67:FD:71:E6:62:F2:94:5D:47:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:11:28:18:90:00:f7:51:3a:a8:ce:00:e7:a7:3c:60:8b:2c:
         74:30:e7:10:84:a6:28:1a:dc:31:01:b0:2f:f6:88:30:1c:67:
         c5:5e:97:43:67:3b:09:dd:8d:80:75:e4:a4:d0:2a:4c:a3:cd:
         0b:8f:50:18:47:23:52:e3:ae:d8:d5:80:a1:94:c9:a6:06:8b:
         8d:89:85:8a:af:6f:31:30:cf:d3:67:ea:d2:28:44:7f:77:39:
         d5:d6:3d:61:ea:be:f0:4f:41:a3:f2:01:c7:cc:3a:b6:a5:d3:
         3d:9e:be:41:9b:cb:44:76:56:66:28:65:b9:40:14:6b:4b:fa:
         79:00:8b:b4:67:d0:04:64:14:14:37:f2:8c:67:aa:22:13:8b:
         79:e5:ce:ec:35:00:bc:5d:81:eb:29:f6:1d:19:c4:c3:91:de:
         de:76:52:af:a8:3b:ef:ad:ab:2a:53:4b:66:11:fe:5b:bd:b0:
         3b:27:72:3b:09:fb:d4:13:41:fc:21:54:95:27:93:2d:81:f8:
         0b:65:d4:1f:53:23:93:e1:ca:d1:5a:e9:0b:91:06:27:4e:43:
         f0:70:46:c8:e3:47:58:a1:cb:5f:fd:80:b8:98:c4:f6:28:e4:
         c1:61:9d:78:2e:8b:27:f3:6e:f5:f1:a6:f7:80:00:cd:24:8a:
         f8:ed:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:56:21 2025 by rpki-client