Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
File:                     d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa (raw, json)
Hash identifier:          oS80E73LH2eAivYLzQz3m2uH95eE/UJ2jy0JL/TKAvw=
Subject key identifier:   66:D3:D1:D2:7E:7E:41:4D:42:A5:1E:FD:22:B9:80:98:08:5C:C7:93
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F4328584851A5811A68EC146B2246CC80
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     198949
IP address blocks:        2610:148::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:81:1a:68:ec:14:6b:22:46:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=caaa70c6-20af-4eae-8dc6-7aa61de0481f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:d4:ae:74:fd:27:d7:96:63:d3:a6:ec:ca:
                    96:79:a8:0d:75:c0:97:68:cd:70:fb:94:9f:a7:82:
                    dc:ca:0c:c7:ab:bc:f2:f4:b5:e7:4b:36:07:33:e4:
                    55:d1:f3:da:80:2c:ca:39:4b:10:6a:fe:9e:46:5b:
                    82:07:eb:6f:6a:76:6f:ca:c3:ff:27:4a:a6:10:47:
                    7b:5f:29:6d:3e:ff:a9:c6:ae:86:39:7d:99:43:e3:
                    53:cf:41:c0:81:a9:8f:4b:3f:8e:41:23:e5:f1:59:
                    d0:12:9c:bb:db:8c:32:9d:76:23:2f:47:91:a6:f6:
                    0b:a5:53:46:ec:c2:56:b5:77:c4:7d:c3:9e:2f:52:
                    0b:b5:2a:3d:09:2f:78:f2:42:65:a1:fc:51:b4:ca:
                    84:cf:06:bb:86:6c:d0:f6:e6:0c:1a:cf:c1:ec:d8:
                    a7:c3:e2:75:ee:4e:ed:46:7b:05:10:fd:84:90:c5:
                    bb:59:e2:5c:d1:8c:f4:18:23:d6:6f:96:57:86:b5:
                    d4:c4:a4:6d:ac:bd:35:9f:8c:2f:ba:f4:bb:82:ab:
                    b8:8e:e3:11:ce:fc:2b:4c:6c:36:08:50:16:45:d9:
                    c0:61:ae:b3:12:a7:42:ba:00:ef:27:ca:9a:b3:69:
                    a4:ac:1c:bb:fc:b3:9f:f8:08:b5:d3:6b:59:ef:c2:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D3:D1:D2:7E:7E:41:4D:42:A5:1E:FD:22:B9:80:98:08:5C:C7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/d0ddcba9-cc3a-33c2-977c-a2aa278d476c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:0b:18:ae:11:6a:bf:23:0f:ee:42:bd:a7:98:cf:d2:8e:
         e2:49:51:58:57:1f:fe:f8:07:e2:d5:eb:0a:87:42:05:4e:8c:
         fa:a9:b3:e4:23:07:a1:d2:cd:10:db:77:4c:42:45:75:78:e8:
         27:ec:8a:a7:39:29:96:ad:66:eb:1e:e3:b1:c5:1e:ac:42:30:
         ae:a8:a1:20:b3:de:73:43:e1:d3:56:3b:d5:09:35:e0:57:03:
         9b:b9:71:64:d1:32:79:4f:72:a4:8b:cf:36:a3:77:3a:34:74:
         2a:7a:ca:7b:d2:b7:83:39:f1:18:eb:df:13:25:cb:26:9d:78:
         c6:81:80:cb:73:0b:cb:06:02:56:bc:e7:dd:16:fd:66:60:96:
         70:7d:d4:5d:ec:28:f8:d3:38:cd:93:d6:3c:d6:dd:9b:e3:88:
         50:5f:bf:01:fe:9e:7b:11:d0:20:2f:6e:1c:f5:b7:cd:aa:04:
         48:0c:cf:d0:26:55:33:eb:03:86:bf:20:e5:b4:9e:fb:d4:15:
         63:8e:4e:7a:1f:39:65:d8:83:42:69:dc:0a:2b:98:f0:63:e7:
         d2:2b:41:c2:89:e7:de:04:9c:70:a6:ed:61:b0:60:d9:3d:65:
         0f:d2:fd:e1:c6:e7:07:83:eb:27:7e:dd:d4:4a:fd:89:29:ac:
         e3:d2:c4:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhRpYEaaOwUayJGzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMwZDkyY2ItNzRiZC00ZDZkLTlmNzktYmI5M2Y5MWQ4
M2FmMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
Y2FhYTcwYzYtMjBhZi00ZWFlLThkYzYtN2FhNjFkZTA0ODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAnUrnT9J9eWY9Om7MqWeagNdcCXaM1w+5Sf
p4LcygzHq7zy9LXnSzYHM+RV0fPagCzKOUsQav6eRluCB+tvanZvysP/J0qmEEd7
XyltPv+pxq6GOX2ZQ+NTz0HAgamPSz+OQSPl8VnQEpy724wynXYjL0eRpvYLpVNG
7MJWtXfEfcOeL1ILtSo9CS948kJlofxRtMqEzwa7hmzQ9uYMGs/B7Ninw+J17k7t
RnsFEP2EkMW7WeJc0Yz0GCPWb5ZXhrXUxKRtrL01n4wvuvS7gqu4juMRzvwrTGw2
CFAWRdnAYa6zEqdCugDvJ8qas2mkrBy7/LOf+Ai102tZ78J+dwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGbT0dJ+fkFNQqUe/SK5gJgIXMeTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBk
OTJjYi03NGJkLTRkNmQtOWY3OS1iYjkzZjkxZDgzYWYvZDBkZGNiYTktY2MzYS0z
M2MyLTk3N2MtYTJhYTI3OGQ0NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDMwZDkyY2ItNzRiZC00ZDZkLTlm
NzktYmI5M2Y5MWQ4M2FmLzAzMGQ5MmNiLTc0YmQtNGQ2ZC05Zjc5LWJiOTNmOTFk
ODNhZi5jcmwwHwYDVR0jBBgwFoAUP6RtTMtvThGAzhFePD4BtF/7g+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzBkOTJjYi03NGJkLTRkNmQtOWY3OS1iYjkz
ZjkxZDgzYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABSDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAcgwsYrhFqvyMP7kK9p5jP0o7iSVFYVx/++Afi1esKh0IFToz6qbPk
Iweh0s0Q23dMQkV1eOgn7IqnOSmWrWbrHuOxxR6sQjCuqKEgs95zQ+HTVjvVCTXg
VwObuXFk0TJ5T3Kki882o3c6NHQqesp70reDOfEY698TJcsmnXjGgYDLcwvLBgJW
vOfdFv1mYJZwfdRd7Cj40zjNk9Y81t2b44hQX78B/p57EdAgL24c9bfNqgRIDM/Q
JlUz6wOGvyDltJ771BVjjk56Hzll2INCadwKK5jwY+fSK0HCiefeBJxwpu1hsGDZ
PWUP0v3hxucHg+snft3USv2JKazj0sSu
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:39 2025 by rpki-client