Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/5baed6e9-762e-3755-a895-b8e72581434c.roa
File:                     5baed6e9-762e-3755-a895-b8e72581434c.roa (raw, json)
Hash identifier:          cErXJ1K/AkiLwkbyREF4kek1l+whXInW6XUoHYifZU0=
Subject key identifier:   43:50:CA:11:F7:34:A4:E1:CC:91:A6:95:74:17:97:08:09:D5:9C:87
Certificate issuer:       /CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
Certificate serial:       010D0C9F4328584A46706A25EB30601B5F337E40
Authority key identifier: B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/5baed6e9-762e-3755-a895-b8e72581434c.roa
Signing time:             Sun 22 Jun 2025 11:13:51 +0000
ROA not before:           Sun 22 Jun 2025 11:13:51 +0000
ROA not after:            Sat 20 Sep 2025 11:13:51 +0000
asID:                     30313
IP address blocks:        2610:30:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:70:6a:25:eb:30:60:1b:5f:33:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
        Validity
            Not Before: Jun 22 11:13:51 2025 GMT
            Not After : Sep 20 11:13:51 2025 GMT
        Subject: CN=b2c6b9b9-48fc-429c-a66c-971106d90b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:cf:83:da:23:9c:4d:a8:69:91:0d:73:65:
                    15:1b:77:a9:c5:c4:ca:74:c3:2c:45:ee:e6:1c:af:
                    55:8a:e0:f7:8d:2a:2f:81:e7:36:c8:ec:30:d2:40:
                    65:63:ec:70:44:11:84:74:e3:bb:df:e7:c6:6c:52:
                    0d:2c:c6:76:7a:45:a3:69:3c:39:09:6e:29:f5:0f:
                    0b:9e:6d:2b:9b:7b:f9:59:a5:dc:1c:a9:50:09:03:
                    98:e5:d6:56:8a:4f:38:67:1f:8e:bd:2f:19:45:92:
                    9b:a5:03:79:e9:b2:eb:6c:04:07:00:95:26:5d:cf:
                    5d:a5:ef:e6:16:a8:c5:f7:16:11:86:52:0e:b1:8c:
                    c1:4b:fe:5f:22:e7:ee:4b:82:98:e1:d2:39:7e:0e:
                    e4:e1:6c:74:a1:dc:ca:4e:b9:0b:c3:99:54:e3:13:
                    a1:05:84:92:b0:ec:67:cb:2b:83:68:86:95:d1:d6:
                    45:d2:8f:b6:0e:56:3d:86:50:54:87:6e:ec:33:28:
                    e8:85:56:0e:18:35:7c:9e:bf:89:78:26:c1:9f:8e:
                    46:43:2e:9e:73:b2:91:fe:71:38:d7:9d:1c:53:23:
                    21:8e:9e:5d:3f:52:90:ab:9f:28:a2:c8:a8:2e:fb:
                    9d:3f:0d:60:a7:a2:bb:e4:0e:92:dd:f9:73:93:5a:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:50:CA:11:F7:34:A4:E1:CC:91:A6:95:74:17:97:08:09:D5:9C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/5baed6e9-762e-3755-a895-b8e72581434c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl

            X509v3 Authority Key Identifier:
                keyid:B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:30:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:4d:78:f3:06:47:07:48:46:58:b7:67:c2:7b:d0:5a:aa:
         f4:9d:70:60:6e:51:03:74:3f:62:c4:d5:3f:d0:51:3c:58:7d:
         94:74:0c:58:62:b5:39:ef:0c:44:01:b7:44:a9:47:b4:71:ec:
         46:6e:2e:f7:95:7e:9a:bf:b0:3f:07:f8:4a:d0:39:4f:2c:3a:
         75:ef:63:79:8d:6a:86:88:53:a1:17:e0:b3:d3:00:97:99:71:
         e7:d8:34:b7:63:4c:ef:8b:7e:38:6d:19:e2:e7:a9:0a:d1:f2:
         6a:0b:69:aa:ff:30:e7:9e:4b:25:10:44:57:85:44:bd:85:95:
         d9:92:7a:56:30:3a:e8:50:23:0c:77:cf:61:7e:4b:c4:e3:dc:
         07:85:22:3a:4b:55:18:57:c8:5c:07:c9:dd:74:2b:6c:bf:32:
         94:6e:bb:93:c0:8e:d6:9e:e3:a5:14:47:f2:32:79:11:bf:76:
         46:5a:98:e0:52:03:cb:e1:cd:a2:13:9d:b1:cf:8d:d8:f1:1c:
         11:09:d9:73:70:9c:6d:94:63:a0:59:22:f9:c7:c7:ae:1b:05:
         08:8e:ad:14:d5:d9:89:be:19:d3:7c:92:b7:19:32:dd:8f:b0:
         45:96:82:ad:56:19:ef:18:86:00:50:3d:d0:9f:c3:0d:c1:70:
         f3:8c:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:18:36 2025 by rpki-client