Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
File:                     6d411e6e-e32c-387b-b928-9a25b67f2285.roa (raw, json)
Hash identifier:          WrN60O4vaNeNIkUP2e6LvYkBnQAjzMAHDAnj0jVbpUE=
Subject key identifier:   A7:46:AE:B9:DB:44:62:DC:36:B9:0E:B1:A6:96:2D:2B:31:E3:93:73
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845D668FE53A310205CA8A36BC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     212996
IP address blocks:        2605:dd40:8009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:68:fe:53:a3:10:20:5c:a8:a3:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=56f47558-bf5a-4658-b7a8-0d7f4a30acc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:d6:ff:2e:99:23:fa:3d:8e:02:73:24:0d:
                    bf:4c:39:74:7b:ff:15:8a:f7:ad:09:c5:4f:b9:6b:
                    c9:83:ed:3b:b1:b4:cb:b5:6b:6e:6a:c3:d8:45:87:
                    d7:7e:cd:ac:a1:aa:c8:6d:4f:40:1b:3a:25:8d:76:
                    95:3a:46:33:1f:c1:a0:d9:de:ec:23:16:7d:19:dc:
                    15:a3:aa:e2:8d:8a:94:0f:24:bc:52:10:ce:f9:13:
                    40:bb:97:79:39:fe:1d:94:0f:82:05:35:93:b6:5a:
                    da:79:bf:13:13:3a:dc:35:f5:81:8b:ce:a5:70:97:
                    68:7a:63:d2:8e:8c:2c:8f:18:db:99:c8:78:31:ed:
                    7a:bf:d2:03:b1:2e:7e:3c:fc:b4:1a:18:aa:21:49:
                    08:cc:cd:76:32:ba:bf:50:83:9c:bd:c7:17:ec:cd:
                    51:d6:4b:1b:b0:c7:d6:fb:c6:b7:19:50:19:21:27:
                    2c:21:3a:12:1c:40:56:14:8b:0e:ad:06:ff:d9:74:
                    24:29:af:36:df:b4:41:92:d4:aa:43:bb:a7:dd:c1:
                    8b:88:8d:47:52:7c:06:46:7f:5e:ee:52:9b:2a:23:
                    5e:fa:98:93:47:06:bd:b6:ef:cc:7c:2f:d7:c6:41:
                    b3:fc:ec:c6:72:2f:5b:77:7f:5b:57:37:56:bd:4d:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:AE:B9:DB:44:62:DC:36:B9:0E:B1:A6:96:2D:2B:31:E3:93:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:3e:26:27:1e:fe:c1:60:11:4f:33:51:82:e1:ce:9b:f4:
         42:10:c9:f6:3e:da:c8:48:28:2b:3f:8e:be:0a:84:59:65:0e:
         ef:62:21:7f:3c:63:aa:6a:b5:78:31:d5:39:c0:f1:67:27:d5:
         fe:57:5d:93:1c:0e:81:8a:d8:28:7a:97:a6:02:49:0f:f3:2d:
         aa:cd:32:28:f7:06:f6:93:9c:e4:9d:3b:dc:16:c1:f5:6e:bf:
         9e:e5:af:96:47:1b:29:0e:49:f1:43:ea:40:c7:3e:e4:9f:be:
         42:26:0d:41:77:17:dc:78:04:f7:c4:47:31:a5:35:59:1d:2d:
         ca:9b:e2:2d:b5:b6:ef:af:71:49:95:59:49:48:d7:b5:69:62:
         99:26:ef:5d:a5:d8:36:d1:94:d0:7e:b4:46:2a:91:5e:b4:86:
         13:a3:1e:a0:cf:fb:eb:be:8e:3c:12:c3:f1:60:02:9b:a7:55:
         22:c3:70:22:8b:ae:7b:84:b8:4a:5a:fc:d6:f5:c4:89:a8:a4:
         c3:89:ed:5d:a4:29:f1:af:01:63:a3:50:09:0a:2f:97:6f:82:
         65:3c:d2:45:ff:ca:8b:8a:96:31:6d:34:59:c0:7a:ff:58:6a:
         7d:3a:29:3d:99:24:b7:21:6a:f9:83:4f:a8:b5:80:17:df:33:
         89:d2:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:16 2024 by rpki-client on console-ams.rpki-client.org