Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/610ba10b-e53e-33b2-b63c-d7e94c87a5dd.roa
File:                     610ba10b-e53e-33b2-b63c-d7e94c87a5dd.roa (raw, json)
Hash identifier:          z29S2evzAGxQithQYsa0HHCeglWKf/W9J0QfFutQOgg=
Subject key identifier:   F9:F2:F7:D8:80:22:25:63:03:B9:20:29:3A:DF:AB:87:D3:B7:AB:08
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F43285848DEA11BD4534A7EE5C7AD0EC0
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/610ba10b-e53e-33b2-b63c-d7e94c87a5dd.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     46427
IP address blocks:        2602:2c1:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1b:d4:53:4a:7e:e5:c7:ad:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=914b7b88-374d-4fbb-ba52-27ea4fed0fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:08:c6:b1:43:df:ae:c5:66:80:22:af:be:
                    7c:9d:31:b1:0e:77:b0:ec:6d:94:aa:fe:61:97:04:
                    28:97:6b:ef:28:d5:71:4d:4f:52:2a:8d:98:23:fd:
                    f9:2c:37:d0:cd:f8:68:9d:45:0b:72:23:ad:11:fc:
                    2c:df:6a:86:ac:6e:8d:95:12:79:50:5e:c6:93:f2:
                    60:3f:e1:42:7b:b3:2d:86:56:c4:5d:47:4b:9c:e1:
                    bb:7e:14:1a:d6:af:3e:22:fc:f3:43:7e:cf:84:93:
                    40:7d:e5:2c:b5:08:ab:58:2f:bc:b7:a8:b8:92:3d:
                    a4:1b:15:dc:12:e3:81:44:4d:50:15:ae:83:1a:d0:
                    db:15:92:2e:50:b2:b9:3d:36:6c:13:d2:36:6b:76:
                    c6:a8:f3:9e:82:c9:f9:1a:b4:54:b1:72:b0:29:e6:
                    bf:34:0c:a5:5e:89:d1:59:a5:2f:73:c6:c3:69:9a:
                    ce:80:35:4a:85:1f:d9:81:9b:85:df:08:5e:3c:62:
                    3f:82:05:84:9d:b4:23:1e:9d:e7:54:1e:f2:e6:8d:
                    6c:56:40:fe:15:de:b7:ec:62:db:aa:7a:b5:18:fe:
                    9f:ff:50:d3:09:c3:59:79:5e:0f:69:e6:83:b7:34:
                    f0:00:41:a0:ec:aa:e4:7c:df:0c:a8:d9:ff:e2:4b:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:F7:D8:80:22:25:63:03:B9:20:29:3A:DF:AB:87:D3:B7:AB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/610ba10b-e53e-33b2-b63c-d7e94c87a5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:6a:92:16:ad:70:4e:63:fb:94:9f:1b:55:38:da:5b:a1:
         34:ad:77:cb:50:19:0e:90:0b:ea:90:30:e0:17:8f:f5:32:43:
         98:7d:53:db:aa:ad:1e:ba:98:5e:29:51:fa:34:d5:95:d8:c2:
         37:8d:ce:24:8e:5a:98:b2:55:19:7f:66:41:7d:ea:c4:6e:7b:
         bc:a0:9e:19:4a:0f:e9:92:ec:a6:92:6e:39:d9:ae:55:02:a5:
         67:3d:ef:f4:9f:12:13:e6:e0:99:2a:22:78:69:a3:48:59:17:
         18:ac:df:c4:19:e8:6d:7a:8a:f1:60:c6:76:d9:cb:1b:60:00:
         a5:06:88:08:58:63:3b:e1:51:79:24:12:73:b5:1e:5f:8a:a7:
         4e:90:cb:18:2e:7f:f0:23:13:06:bb:6b:d8:65:5d:b2:9b:ed:
         40:6c:00:f2:8d:6d:38:b4:09:80:1b:18:7f:3f:e9:3e:57:11:
         e7:bc:6e:6f:7b:89:ae:83:d0:47:0e:d3:36:e2:aa:ee:c2:e9:
         35:25:50:fe:64:2f:8b:96:5f:89:7f:3b:5e:a3:15:5a:b5:e9:
         e3:f2:33:b4:dc:b3:b5:c4:1f:75:c6:05:3c:15:e3:d4:82:85:
         94:d7:32:58:2e:f5:a1:8c:9d:3c:eb:8f:eb:0a:55:00:bc:f2:
         27:37:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:56 2025 by rpki-client