Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa
File:                     6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa (raw, json)
Hash identifier:          Hvfl9tE1Yn+CWJ9SAyZGrKxABY4ZZFZul2SC/a3RlOA=
Subject key identifier:   71:C7:7A:45:A2:15:72:6F:BA:9A:3D:81:F7:B0:27:B1:3F:0A:15:85
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845A428D2C77D2D6424A5E35514
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     398549
IP address blocks:        2605:dd40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d2:c7:7d:2d:64:24:a5:e3:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=b62f008d-5302-42b2-b0c0-a24c5b2f304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:34:53:c7:e6:7f:2f:1a:a5:72:52:02:93:
                    4a:6c:5e:59:ca:56:ab:be:8a:43:d6:75:ce:29:00:
                    2d:1a:1a:de:55:49:87:0e:28:51:5d:bb:78:9d:37:
                    54:4b:b8:7f:4d:66:2d:49:40:db:74:bc:31:00:dc:
                    1f:5c:7c:5e:f7:c2:de:c5:5d:2a:f7:8b:c7:1d:b2:
                    f1:28:7f:f1:2d:28:d4:9c:18:75:b2:95:88:ac:2b:
                    2c:b8:1a:46:e4:7f:5b:e4:45:5d:99:f7:26:e9:1d:
                    10:1d:52:74:52:dd:47:ac:02:aa:53:ce:5f:a7:1a:
                    fa:c6:61:ec:5c:2f:7a:8b:bf:69:25:c3:63:8d:8d:
                    4d:9c:05:8b:6c:14:2c:fd:68:d7:c3:d4:28:68:75:
                    47:3d:0d:c3:ac:5c:cb:70:70:af:c1:89:6a:a0:41:
                    7a:f2:12:79:a3:0c:47:e3:d6:fa:40:26:3f:60:a2:
                    8b:a0:d3:a4:b1:88:c2:03:5c:82:ae:54:16:c4:85:
                    9d:4c:55:03:86:28:02:4a:4d:10:e2:d1:93:be:38:
                    2a:02:58:5a:17:69:d0:09:2f:2f:5f:14:28:9f:55:
                    af:cd:cf:a6:6f:14:63:1d:4f:33:d6:8d:cd:e7:de:
                    34:f0:3c:d9:64:4a:ae:ff:fb:7d:3b:7c:91:74:00:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:7A:45:A2:15:72:6F:BA:9A:3D:81:F7:B0:27:B1:3F:0A:15:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6b4baea5-aef5-3944-a255-8ef52ec2f01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:5f:95:81:d0:b9:21:34:42:cc:66:34:87:40:3a:79:86:
         09:38:6d:fa:44:0c:2a:ee:18:0d:0a:0b:cb:41:47:8f:58:c2:
         c1:68:aa:26:ca:5f:41:f8:af:9f:8b:08:ee:61:81:5a:32:26:
         27:78:07:ea:ed:8f:ed:e9:f8:b9:b9:4b:2f:c7:cc:22:c0:06:
         6c:ea:99:d0:ca:77:da:05:13:62:53:89:3b:37:97:6f:1d:c6:
         b4:0e:e2:76:fb:f2:05:64:05:e9:71:2a:3b:b0:a3:31:6f:08:
         f5:d4:9f:96:c6:4c:90:11:10:c0:3d:b5:f6:ca:69:f8:54:73:
         1c:44:f4:73:1d:c1:c2:b0:6d:7c:a5:bd:18:49:ca:0e:7c:15:
         29:7a:2d:66:e1:71:2f:66:1c:8a:78:7a:32:7f:65:8d:19:b5:
         ea:14:3f:78:4c:a0:fb:d9:50:55:38:94:5d:85:f5:db:88:a9:
         9f:7a:90:06:1b:8a:a9:0b:df:a8:29:f2:62:4a:14:64:78:79:
         a8:99:38:97:a1:8a:25:29:44:17:b1:95:84:91:52:8a:35:21:
         f6:d5:11:07:8b:45:01:bb:b4:8e:6e:39:a7:dc:9a:11:01:f2:
         c5:1d:72:85:13:df:30:15:fe:ef:87:da:f2:bf:76:78:fb:e0:
         b7:1e:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:59 2024 by rpki-client on console-fra.rpki-client.org