Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
File:                     dc4a5d58-3571-3549-b66e-bc9038a5a256.roa (raw, json)
Hash identifier:          4jjdVidzXT7b3JFBIhuMUbnJVpG7Grasz94PeMzwD14=
Subject key identifier:   53:49:75:3E:B6:E4:DF:76:E6:19:EA:B7:99:7F:EC:20:BA:82:19:0D
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584A6826035D388C3DE10B680E80
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     6122
IP address blocks:        2610:130::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:03:5d:38:8c:3d:e1:0b:68:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=6c433bce-0b4d-4777-be05-d98ad9ef4ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:3b:27:ba:55:34:14:c7:f6:ee:e3:fe:cb:
                    89:e9:29:d9:9b:09:46:20:8a:c1:f3:60:1f:15:00:
                    db:9a:60:1b:05:f6:a3:c9:df:9e:6a:83:5f:fe:bc:
                    50:8a:ac:94:2d:39:d5:5a:3b:87:a5:b6:5b:70:cc:
                    09:5a:dd:23:c3:ef:17:ef:95:71:78:8b:2d:cb:cd:
                    28:e6:92:cb:33:b2:e0:93:b6:0e:9d:e7:b8:40:9f:
                    39:99:4f:8f:62:f2:3e:ea:cc:92:a2:0c:7e:b0:30:
                    d9:84:43:67:a3:80:0c:16:91:db:34:2c:c5:f4:37:
                    83:2e:84:34:7d:a3:4e:5b:41:ce:d4:bf:60:e5:a2:
                    35:d9:18:dd:7b:90:1a:0f:d6:c0:ee:fc:f2:fd:4d:
                    c2:96:7c:7d:a1:83:43:4e:fc:88:70:9c:91:eb:52:
                    86:eb:10:76:70:a1:96:94:0d:ec:6c:80:19:75:19:
                    17:42:1d:03:36:f6:72:e4:b9:c3:c3:be:60:c3:64:
                    60:87:a3:ff:f8:f5:31:9e:98:a6:d6:1a:05:a3:7a:
                    c5:c8:f0:7f:6c:2b:81:2f:01:e4:be:76:7b:32:43:
                    d9:2a:66:c0:a7:46:aa:2f:ef:bd:24:01:f9:3a:f6:
                    f9:08:21:0f:13:49:fe:81:02:c8:a2:d3:64:e3:c4:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:75:3E:B6:E4:DF:76:E6:19:EA:B7:99:7F:EC:20:BA:82:19:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/dc4a5d58-3571-3549-b66e-bc9038a5a256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:81:d3:c7:0e:6c:a1:1d:30:1f:ac:b9:0d:48:58:bb:df:62:
         2a:78:ae:fe:a6:77:62:9a:38:b6:f6:d7:70:0c:46:65:42:3c:
         ae:24:2e:66:af:05:f7:f0:7a:e9:15:d3:6f:e2:b2:16:4e:7d:
         be:b8:8b:94:2b:ca:7f:97:32:71:d8:26:83:1f:e6:59:5f:8b:
         50:a2:0b:0e:d5:82:22:47:8d:85:67:45:62:0f:2c:90:2e:c2:
         73:ff:64:ea:71:fa:f7:7d:b7:b5:a8:d5:a1:e7:cb:a3:e6:f4:
         6a:44:e0:46:82:58:22:55:c8:69:ce:e6:eb:f9:2f:9a:09:69:
         f1:ca:7c:76:6b:62:62:56:d2:2b:01:39:11:47:46:74:46:08:
         83:18:7f:19:09:16:e8:43:c4:2d:19:9b:fe:a6:0b:79:a2:61:
         d7:21:d8:41:b7:75:47:05:97:5d:a8:5c:aa:59:8e:e2:91:f9:
         fc:bb:a0:6b:5c:17:9b:85:a3:9a:91:64:9e:f6:e7:b0:64:75:
         17:1e:b1:13:ea:89:1b:eb:e4:3f:ad:4b:f4:19:ad:34:10:4b:
         fb:79:22:19:d7:75:64:47:93:f2:71:fc:1c:c6:33:ef:f5:a2:
         f6:5a:c9:4d:36:c3:2f:11:a1:86:a3:cd:b8:cd:cf:f9:58:8d:
         df:d2:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:28:55 2025 by rpki-client