Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa
File:                     ffeedd1a-1333-3988-9802-71b64e4a1c66.roa (raw, json)
Hash identifier:          Zq57R7e0K1rxOAeqx5R8js8Ou7kMlTY7DANLnJorEwE=
Subject key identifier:   B0:BD:29:13:49:20:A4:9F:F5:D4:FE:4A:C9:0C:79:A6:37:F9:F1:51
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285849849EFB99A4D0347794784380
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     10616
IP address blocks:        2610:20:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fb:99:a4:d0:34:77:94:78:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=1ab1807a-c36b-46a5-88ed-0da51887dfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:56:f7:02:67:91:ed:7d:a4:37:8d:bc:96:
                    24:71:1e:92:76:57:40:fa:45:4a:66:8d:71:c1:91:
                    6c:81:f5:dd:1b:69:c4:4c:5c:c3:ee:ee:67:66:12:
                    b4:6d:ab:f1:66:a1:bf:94:b1:62:0a:6a:06:05:dc:
                    f0:3f:14:38:29:df:d4:ed:b3:04:f7:fc:c7:f1:d7:
                    b6:ef:f9:07:2f:da:12:e6:38:81:22:e1:75:6f:fa:
                    46:f6:7e:23:3a:80:1b:79:a7:b4:8d:b6:03:33:44:
                    5b:64:9b:24:ec:f1:91:43:5e:80:45:fb:9f:d6:a7:
                    f1:25:b5:1a:d1:df:cb:69:86:46:a9:09:da:06:30:
                    12:f2:e0:38:3e:7a:42:d9:87:b7:65:c1:38:dd:e1:
                    19:a8:d8:19:ae:16:1b:16:52:9f:20:b2:eb:94:43:
                    04:14:26:08:4a:1d:96:fe:25:39:c7:98:66:9a:c9:
                    e5:60:1d:98:13:52:92:83:68:cb:31:d6:fd:d0:1c:
                    e0:8e:74:94:c7:e1:e1:47:5b:8f:38:e0:a4:f3:84:
                    06:9b:8d:56:b6:4a:62:7f:25:eb:18:94:34:33:74:
                    5b:54:83:46:23:8d:a4:27:9e:da:3a:2d:26:e4:0a:
                    17:9f:48:6c:08:d6:c6:8c:f3:31:07:30:6f:5d:fa:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:29:13:49:20:A4:9F:F5:D4:FE:4A:C9:0C:79:A6:37:F9:F1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:22:e3:e0:75:28:65:b6:47:51:04:b0:dc:69:4c:07:cc:
         eb:74:53:6e:f2:78:cf:42:9a:a7:02:fc:26:30:18:1d:a4:33:
         87:c3:9e:0d:1b:0e:b8:3f:7e:5c:3b:f4:b6:96:fc:79:25:10:
         bf:0f:38:5c:33:b9:1b:0f:1a:76:65:4a:b8:84:c1:70:60:11:
         3b:b6:9f:2b:c3:16:3b:3f:cd:b4:a2:f0:6b:70:32:a2:43:ce:
         a0:8b:a0:d5:02:29:05:cb:0c:c2:e1:0e:de:70:5c:23:74:c5:
         b0:7c:c5:38:0a:cb:13:88:76:1b:97:6a:db:76:73:51:07:be:
         93:39:cb:ae:f9:5b:cb:b3:11:21:05:18:35:2d:1c:4d:dd:cb:
         16:b1:cf:bf:07:9c:f5:52:aa:82:cf:3e:7d:95:df:c1:7d:88:
         84:6f:e8:32:5b:e6:d9:2a:d4:42:35:90:94:99:76:d4:cb:52:
         e0:39:36:99:86:92:78:f7:c2:f1:e5:13:7a:ae:f6:00:05:6b:
         d9:20:ac:c1:d0:e5:47:ba:fd:4d:ab:d1:86:5b:cc:4b:f7:12:
         39:41:70:b8:6f:33:3d:77:3c:c5:2b:e7:b3:75:53:fe:a2:d5:
         04:e3:25:c0:54:8c:c0:19:50:3a:29:82:61:11:d1:29:49:7e:
         30:94:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:13:01 2025 by rpki-client