Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/126c8c9c-ee2d-3abb-8fd5-7e50305aa4cc.roa
File:                     126c8c9c-ee2d-3abb-8fd5-7e50305aa4cc.roa (raw, json)
Hash identifier:          JDWaI+T9fTW5iXOWSHr2XtgquZc9n44h3GXqWKs8h2Y=
Subject key identifier:   F0:44:FA:02:4E:ED:42:E3:BB:92:DA:0B:77:77:19:03:38:E7:9A:0C
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584930DE7494D71EA21CAE523980
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/126c8c9c-ee2d-3abb-8fd5-7e50305aa4cc.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     10490
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:74:94:d7:1e:a2:1c:ae:52:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=579656f9-dc63-4777-83ea-d75541e75682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:eb:49:9d:cd:c1:c3:44:fa:0f:e0:44:af:
                    54:7f:ba:40:53:f4:96:b6:87:ec:3b:65:d5:80:e6:
                    c1:54:68:90:70:30:80:30:ca:db:bf:d9:93:e6:c3:
                    58:cd:22:c4:15:c0:5f:b5:13:50:b6:ec:4d:fe:d3:
                    12:c5:26:c5:fd:c1:ef:c0:d5:55:9d:57:f0:9b:a6:
                    bc:0d:b2:89:ac:fa:50:be:04:d2:09:86:7f:6d:43:
                    da:da:9b:3e:9c:cc:25:80:6a:da:0f:cd:0e:36:41:
                    da:0d:f6:94:c5:cb:fe:23:f9:54:a1:9b:61:c3:f1:
                    ce:d6:a0:bb:03:1e:43:42:13:36:b7:66:26:3e:d0:
                    de:d2:8d:b7:c2:4d:f6:99:4b:5f:3b:93:59:b0:e5:
                    d9:21:9c:f4:23:77:74:43:9a:05:d3:b5:8f:f9:4a:
                    41:b5:f3:27:42:13:f6:9f:ae:2d:49:fd:67:a7:38:
                    13:14:1e:2f:38:bb:6c:90:69:df:39:58:87:c2:e3:
                    13:f4:79:c1:d8:c3:59:01:9c:95:f0:af:12:9f:56:
                    44:df:2a:cd:82:6b:d4:ab:c1:e7:92:a8:29:02:d7:
                    5d:d2:f9:63:79:39:d1:21:13:1c:c9:7b:d3:cc:06:
                    ed:af:0d:ee:4f:31:a0:52:88:5e:00:f2:50:a4:2b:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:FA:02:4E:ED:42:E3:BB:92:DA:0B:77:77:19:03:38:E7:9A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/126c8c9c-ee2d-3abb-8fd5-7e50305aa4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:a4:48:f7:44:c4:b4:4b:fa:5d:96:14:b6:8b:1c:15:77:
         37:af:94:34:42:00:1c:bc:4a:1b:d2:ae:c2:f6:3d:75:1f:57:
         1b:24:9e:d3:58:4d:68:74:d1:4e:b5:ec:3c:e3:0b:25:65:1b:
         cb:ae:4b:73:7f:66:ec:d4:1b:6f:cf:1b:7c:ad:02:f5:91:ae:
         04:f0:92:6c:ea:bc:c8:76:f6:74:c9:5d:02:de:fd:1c:c4:26:
         66:82:9a:7a:73:d3:0f:46:77:1e:2b:83:09:41:4c:28:f4:6b:
         20:12:3c:1d:9e:a0:d7:07:9a:16:82:bc:69:84:4d:1c:e3:9d:
         ad:f1:65:ff:c7:76:f8:70:3e:b9:99:86:b1:d8:38:2c:ca:50:
         c0:43:b3:85:4e:65:89:df:2b:72:70:36:c0:bb:4e:98:80:42:
         a7:b6:6b:d9:1e:97:3f:ef:f2:7a:04:f1:b6:ee:50:60:c9:92:
         87:dc:1a:ab:8f:b0:97:85:cf:86:a7:a8:d5:d6:a6:06:d0:81:
         d6:bc:7c:7c:6f:92:e6:67:39:28:bf:f8:ac:d4:66:9f:10:13:
         e7:01:6a:57:7b:3b:ea:f6:ab:5f:66:d8:61:f8:11:9e:37:c8:
         5c:4b:91:27:e5:cb:4b:86:1f:4a:50:e1:09:26:b3:85:31:24:
         5a:c0:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:04 2025 by rpki-client