Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a162e927-9393-3125-866d-f35e51399bb0.roa
File:                     a162e927-9393-3125-866d-f35e51399bb0.roa (raw, json)
Hash identifier:          /8G59nEUaMONSIcYVjimRaa4qw9mqsCOhVeFh6gWV+g=
Subject key identifier:   FF:80:2A:C2:CA:3A:3D:C4:C2:C9:6F:B7:70:9F:F9:84:0C:DD:CF:01
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584911B64594C9537D5952C9BA80
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a162e927-9393-3125-866d-f35e51399bb0.roa
Signing time:             Mon 03 Mar 2025 21:09:49 +0000
ROA not before:           Mon 03 Mar 2025 21:09:49 +0000
ROA not after:            Sun 01 Jun 2025 20:09:49 +0000
asID:                     8047
IP address blocks:        2610:100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:b6:45:94:c9:53:7d:59:52:c9:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Mar  3 21:09:49 2025 GMT
            Not After : Jun  1 20:09:49 2025 GMT
        Subject: CN=f8478665-cbee-480d-a3f8-0723b37910ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:5a:59:44:a5:11:4c:9d:32:1a:fd:4a:52:
                    b7:88:31:e2:45:a2:82:36:15:e1:74:cd:30:05:e6:
                    e2:57:a9:fc:5d:e1:96:bf:52:e2:6a:6c:16:79:ab:
                    59:59:f7:a6:b8:53:e2:29:d3:bd:c9:68:bc:95:51:
                    48:c2:10:7d:8f:bd:04:bf:22:a7:6e:d6:65:96:bb:
                    f4:06:1c:55:b3:95:82:b0:9e:b2:ed:a7:16:dd:47:
                    5f:77:ad:ea:4f:33:39:d4:86:9c:f6:eb:17:d5:3c:
                    ad:0a:09:25:1f:2e:7d:74:e5:49:07:c8:cc:1b:14:
                    99:6b:e1:bb:27:d3:e4:55:12:8f:bb:d3:ca:60:9c:
                    a5:ec:1b:58:16:f7:6b:28:3d:cf:cd:df:e6:95:d3:
                    c9:45:4a:d8:09:c9:ae:10:10:73:44:ec:73:03:95:
                    9e:a2:0d:15:ce:14:fd:43:7c:fb:ab:cd:c1:9b:5a:
                    5e:20:01:8c:01:f5:5a:22:ff:82:01:4c:ed:50:11:
                    8a:18:f8:e4:47:ad:9e:bc:a8:51:7a:d4:bc:bd:03:
                    47:9e:92:a8:17:41:be:4d:79:5b:7d:97:57:f9:4e:
                    07:b7:74:f4:1f:6e:af:70:53:28:0e:c7:78:4d:c7:
                    04:bb:8d:9e:7f:1f:10:ba:bd:62:bd:48:b7:cc:58:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:2A:C2:CA:3A:3D:C4:C2:C9:6F:B7:70:9F:F9:84:0C:DD:CF:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/a162e927-9393-3125-866d-f35e51399bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:cc:0c:13:29:5c:cd:ef:ad:cf:f9:50:17:b2:7f:b4:03:
         b5:97:02:29:de:d2:a1:a1:7f:ae:3a:2e:98:62:6e:4b:99:c2:
         73:7a:67:8f:7b:a2:7f:99:42:c5:bd:4d:25:26:51:7b:4b:cf:
         a8:c5:fe:ad:66:02:5f:ad:d2:72:af:8c:7f:6a:f0:47:fa:b7:
         aa:dc:61:12:37:f2:bb:8d:21:45:41:55:53:d8:cb:92:64:b7:
         29:8e:52:95:20:af:2c:8b:f3:aa:e1:d5:c5:90:7a:5a:9b:35:
         e2:67:b3:3b:0d:b4:33:96:45:fb:95:34:ab:cb:ea:47:f2:de:
         cf:37:6a:55:4d:15:c3:c9:6d:50:b1:84:59:03:73:e3:77:83:
         db:86:e5:6c:3d:dc:4a:17:2e:19:60:d8:38:63:45:e1:7d:92:
         b1:5d:57:93:07:c7:b6:3b:f1:31:ac:29:c7:1e:a3:12:f8:8f:
         16:d3:bb:ed:0a:f1:7f:f9:ce:85:3d:7b:96:4e:d1:1a:3a:f4:
         52:82:c8:d1:e9:63:98:03:54:2b:a3:6d:01:8c:90:2d:86:de:
         ff:fb:77:42:97:92:3e:74:ed:cb:92:94:54:6c:81:04:27:6d:
         9e:b8:af:91:78:0b:36:1a:89:26:7e:d5:0b:db:74:99:b3:4f:
         77:86:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:17 2025 by rpki-client