Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
File:                     d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa (raw, json)
Hash identifier:          fqI2HiUHPg+vzTZ+IcevyaQfYs9ToPnw5Rd+fqDAwF4=
Subject key identifier:   8D:C2:84:C7:B7:F0:2E:5B:A9:26:06:D5:58:06:06:C7:C1:F5:60:BA
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584AF0F147CD08DA204BBDBF7A00
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:47:cd:08:da:20:4b:bd:bf:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=711bc8fb-42cd-4f6c-818e-a73c6d64b1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:e4:14:e8:78:42:c5:c0:24:2b:5c:b7:da:
                    5e:76:c1:80:6e:be:5b:d4:35:69:5d:61:a9:6e:5b:
                    ce:51:bc:40:37:2a:b2:a5:97:72:6d:11:f6:fa:00:
                    0a:73:23:eb:56:55:09:90:3f:f1:5f:1e:89:e2:13:
                    3f:9a:9f:65:b1:20:58:b6:b3:6f:13:7a:fe:02:b5:
                    67:26:40:4b:63:f1:ef:94:8f:bd:96:ff:66:f5:8c:
                    c2:59:39:66:7a:4d:7b:bf:cf:1c:39:26:a0:d0:62:
                    7f:9d:cb:59:f0:3c:8b:4f:dc:37:24:d3:17:bd:2c:
                    c6:8f:8a:40:aa:88:3e:e4:f6:7f:ca:56:af:98:3d:
                    a1:b0:93:fe:07:8f:04:49:b2:46:68:95:96:9d:09:
                    fa:d5:69:48:94:94:fe:12:67:67:c0:ba:7a:2c:24:
                    f3:35:9c:0c:e7:79:d6:7d:c0:b1:7a:80:20:13:60:
                    de:e6:54:eb:0c:db:d4:1e:f4:23:80:af:a7:d7:93:
                    b1:9e:7a:2e:00:ec:65:9d:2c:49:64:14:a6:c5:f7:
                    30:45:11:48:dd:41:73:07:e9:a3:1e:42:3a:48:f8:
                    11:d0:5c:8e:f7:23:db:b6:71:11:d0:88:18:8b:dc:
                    3c:13:8c:07:21:7b:5d:5b:cb:48:53:b5:a0:f4:b1:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:84:C7:B7:F0:2E:5B:A9:26:06:D5:58:06:06:C7:C1:F5:60:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:09:7e:4d:40:93:31:9f:70:97:25:df:37:2f:8d:93:53:
         c6:7d:64:23:d4:25:42:18:32:e2:36:5e:bc:d1:60:38:95:83:
         36:75:c0:4e:74:f1:c7:29:9f:48:0c:c5:63:44:42:76:97:52:
         e9:71:ea:40:f0:3d:05:07:56:3a:25:2f:b4:e7:99:87:5c:34:
         ec:97:d3:f6:f6:02:ea:4c:42:f4:64:49:c3:9e:62:ff:b4:22:
         fc:e6:3b:eb:f2:9b:4b:53:53:57:90:9e:cf:e1:7b:c7:0b:a9:
         25:cf:6d:32:42:98:1d:32:e3:33:d2:e2:7f:de:5f:4b:bc:b9:
         08:8e:bf:13:19:5f:9a:50:a1:0d:cb:8a:92:25:3d:79:3c:df:
         c5:83:c3:66:e1:bd:bf:7d:c9:29:8e:db:60:7d:49:46:a2:55:
         e1:bf:e8:c6:ad:11:f1:8d:2c:88:8a:63:73:09:3c:5a:6a:f3:
         67:2f:08:4b:64:60:4e:fb:30:4e:ad:db:50:bb:ac:0d:b3:90:
         e7:d9:98:1e:7d:99:5c:41:ad:a0:f3:4b:b6:e4:5d:d8:76:46:
         01:f5:00:ed:48:78:ca:0d:17:8a:78:0f:93:dc:ce:03:6b:97:
         e9:05:74:b8:0f:cd:75:6b:87:f1:4c:1c:e5:da:82:00:1f:4f:
         0b:33:84:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:08 2025 by rpki-client