Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa
File:                     be6a22b7-c20c-3cc9-b559-7570c3648d78.roa (raw, json)
Hash identifier:          sRlMfu4oMb7VvQZKsRApto7hEs6p3XTtYJAd2X0pDmk=
Subject key identifier:   37:01:C3:B4:53:DE:22:FB:88:1B:C4:4B:AC:82:53:BA:B0:C6:AB:27
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584AF0F147B8F6B3B4F112A5EB00
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     2637
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:47:b8:f6:b3:b4:f1:12:a5:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=fad1a8df-c8bd-4325-a8a2-464cc5158b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:96:fe:78:97:d3:08:db:96:47:02:0d:f0:
                    e3:01:7c:95:ea:38:54:be:e4:92:5d:5a:15:d6:33:
                    a4:c3:da:db:27:37:a6:aa:83:82:3a:45:68:a1:ad:
                    ee:e2:18:2b:8b:8b:cd:fe:85:23:2d:97:30:bd:b4:
                    e6:e3:b1:0a:bb:e5:9f:22:2f:51:d4:26:92:22:c5:
                    50:39:9c:29:0c:36:94:83:e9:76:39:4b:fe:60:4b:
                    0b:51:86:85:4e:61:df:16:df:2d:cc:93:77:9c:31:
                    8b:94:73:ca:48:72:19:2b:64:44:34:b4:fc:61:62:
                    df:4f:a0:32:01:be:7f:a4:07:35:b7:d2:e6:93:87:
                    4f:38:b3:2d:cf:4a:ea:87:97:c9:4a:1e:a4:d5:b0:
                    47:7c:66:08:be:62:18:c3:1e:aa:5e:b2:4f:a2:75:
                    c0:ff:db:3d:37:1d:53:2e:2d:01:25:13:b9:d0:f5:
                    bc:f9:26:96:f5:12:95:55:9b:3a:f7:68:ee:75:8d:
                    a5:82:0c:92:0e:fd:2c:be:6b:cd:18:eb:01:46:3e:
                    2a:fd:ca:16:a2:82:7b:7b:d1:07:af:4e:bf:73:61:
                    d1:b1:08:32:d3:74:59:8c:53:59:11:c9:78:10:f9:
                    a0:8e:95:ca:b1:48:44:4b:8e:cd:c4:27:35:1d:b8:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:01:C3:B4:53:DE:22:FB:88:1B:C4:4B:AC:82:53:BA:B0:C6:AB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/be6a22b7-c20c-3cc9-b559-7570c3648d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:47:1b:8f:af:f6:9a:31:04:39:1c:01:69:f4:0f:92:82:
         1c:01:85:db:4f:3e:f4:e8:50:ef:af:e0:da:dc:a7:2d:40:11:
         52:81:fc:25:b6:bc:6c:1c:c8:2d:5b:10:1f:34:bd:49:e6:32:
         47:5d:ed:39:79:65:71:d3:14:5f:d6:db:83:1e:7f:81:0b:88:
         fe:bc:59:c4:52:8b:8c:a9:2c:b3:b5:1d:9d:89:eb:bb:f2:12:
         d1:9e:d2:0c:c1:1e:d4:96:17:74:48:a3:91:e4:61:11:f0:8d:
         26:f8:61:2e:49:7c:95:f3:1b:66:8e:0c:be:52:04:d7:f6:89:
         52:5f:3f:80:e4:ec:a6:ef:0a:41:6f:03:0e:31:a2:bc:d8:0f:
         42:2b:99:5f:35:0c:5e:a0:1c:59:f9:fb:ef:7e:da:ad:b3:86:
         00:99:c3:81:27:c6:d6:dc:65:11:43:6d:5e:8a:e1:a9:1d:ee:
         df:0b:69:80:a8:7b:71:0d:3e:e4:87:87:6c:ce:4b:7a:63:d4:
         99:d5:1e:3c:98:54:47:64:7d:15:75:bc:ec:f7:72:74:95:5f:
         23:ae:c4:61:92:6b:be:1b:45:ec:b9:00:97:92:65:e9:a0:fc:
         e8:1d:0f:62:17:b2:62:9e:25:2b:c3:69:6b:15:81:a0:f9:ca:
         d6:52:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:52 2025 by rpki-client