Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/12b9d650-c8b3-3793-9b71-5828e889719f.roa
File:                     12b9d650-c8b3-3793-9b71-5828e889719f.roa (raw, json)
Hash identifier:          pJld9nOxN1ULOiuhGpTSPCXG24LlboY1VInwnhrOZg8=
Subject key identifier:   0B:00:87:F5:00:FB:F6:0F:60:BD:2F:BB:B5:D7:9A:17:25:8A:59:C5
Certificate issuer:       /CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
Certificate serial:       010D0C9F4328584A46765EB16BE2A14B214EB540
Authority key identifier: B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/12b9d650-c8b3-3793-9b71-5828e889719f.roa
Signing time:             Sun 22 Jun 2025 11:25:51 +0000
ROA not before:           Sun 22 Jun 2025 11:25:51 +0000
ROA not after:            Sat 20 Sep 2025 11:25:51 +0000
asID:                     30313
IP address blocks:        2610:30::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:76:5e:b1:6b:e2:a1:4b:21:4e:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
        Validity
            Not Before: Jun 22 11:25:51 2025 GMT
            Not After : Sep 20 11:25:51 2025 GMT
        Subject: CN=904d588b-0c6e-4b0c-973b-7d364989a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:82:35:d3:7b:70:56:12:08:5d:4c:74:06:
                    60:23:53:00:e1:56:93:32:85:c9:67:ca:33:68:af:
                    da:7e:cb:04:ca:e0:09:23:6a:9a:3d:67:b6:77:b0:
                    ef:f1:e7:f2:38:08:3c:9b:a5:01:be:ed:38:2f:9b:
                    1e:14:9f:fa:5d:ad:28:64:3f:a7:e6:a0:d7:39:13:
                    c3:d4:83:60:8a:21:78:27:20:13:0f:e3:47:79:17:
                    8a:0b:a8:8c:27:12:7e:db:2b:2a:e8:c0:fd:30:4e:
                    14:5f:35:a8:79:62:fc:72:10:db:e4:71:cf:19:a3:
                    36:f7:f5:a2:ad:5b:81:91:28:56:cc:be:bb:4d:87:
                    a2:3f:73:fa:b4:e2:92:45:fe:20:88:8f:98:49:d9:
                    5c:40:a8:db:00:db:84:f8:d5:e2:a7:cb:dd:c0:6b:
                    59:62:39:b7:e0:95:ac:97:c8:df:95:ac:eb:90:98:
                    9c:7c:b4:05:62:19:d6:bf:72:1c:32:bf:04:24:40:
                    17:25:87:21:ab:d6:c3:a6:73:ab:d3:a2:13:8a:3a:
                    e3:09:e7:9e:89:7c:aa:c0:1c:f9:34:0f:fd:92:05:
                    6f:30:2e:16:13:8f:a9:6e:5d:8f:a1:cf:97:0c:a8:
                    6a:50:0b:43:f5:40:0f:45:7b:7a:57:2f:cb:1c:55:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:00:87:F5:00:FB:F6:0F:60:BD:2F:BB:B5:D7:9A:17:25:8A:59:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/12b9d650-c8b3-3793-9b71-5828e889719f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.crl

            X509v3 Authority Key Identifier:
                keyid:B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:30::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:50:74:04:9e:72:8f:db:44:92:7b:99:db:43:e9:d4:6d:
         7f:be:ac:24:43:0f:76:e7:2f:ba:20:25:51:54:56:d2:bc:5a:
         96:f8:74:ac:27:49:c3:fc:b2:c7:66:2a:db:13:55:ec:47:b0:
         a9:57:92:b4:f2:4e:10:c0:5e:65:11:87:a9:7b:c2:66:93:00:
         ca:dc:90:65:0f:33:d4:43:7c:20:16:ff:73:72:ef:00:7a:40:
         31:09:8f:f4:38:a2:a8:2e:98:0e:b9:37:95:63:45:32:42:3e:
         b1:6f:6f:10:5e:c8:75:18:ad:45:4f:77:c0:ef:40:44:b0:db:
         57:e3:da:70:c1:f3:2d:04:81:51:2b:bd:51:6c:a0:5b:db:19:
         d9:36:a7:0f:05:e0:e3:fd:c3:70:fb:c7:60:45:08:e5:d7:80:
         71:7c:8f:38:6a:06:41:ed:47:bd:a5:49:4b:26:90:b0:08:a5:
         f6:8d:c3:c3:22:9c:68:34:b9:9b:de:10:a4:35:ea:3d:9e:63:
         36:cd:c9:c5:77:a6:1c:dc:d6:61:5f:36:4c:fd:fd:75:6c:5b:
         2a:7a:ae:b2:24:ba:56:40:0d:c7:8b:f1:94:a9:62:83:f9:53:
         cb:05:18:01:a8:be:45:f5:11:40:06:11:75:70:6c:28:b0:25:
         40:81:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 11:08:47 2025 by rpki-client