Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7a147640-c09c-38ee-960c-54b816209fbb.roa
File:                     7a147640-c09c-38ee-960c-54b816209fbb.roa (raw, json)
Hash identifier:          owMnM5dGtdUDb+6VmPoGMglA3+5W01cpNr1wtdJSGrk=
Subject key identifier:   D3:39:1B:D0:21:AC:6F:7B:C8:C3:E1:46:82:40:2D:AD:4B:46:25:50
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845D39E59ABC61695F625C34B80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7a147640-c09c-38ee-960c-54b816209fbb.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     212996
IP address blocks:        2605:dd40:2600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:59:ab:c6:16:95:f6:25:c3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=b036bc19-09b9-4967-94e9-65d9c9b04aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:43:5b:f0:6d:a7:da:3a:49:af:d6:f5:43:
                    89:5c:c1:9e:47:6b:3e:c9:39:00:94:ac:60:cd:a2:
                    4b:6c:13:51:2f:44:45:27:30:12:53:fb:2e:3c:98:
                    a5:9c:08:87:83:54:5f:bc:d8:69:45:02:5e:19:4b:
                    f0:4a:e1:4f:52:11:8d:f2:4c:8a:8c:cc:cc:13:51:
                    d3:a3:f4:65:70:15:8c:50:89:0c:53:8e:65:b4:ee:
                    93:bf:3e:95:1e:1f:93:ab:8b:fd:34:2f:82:44:45:
                    25:b1:ec:42:b1:5e:3c:e2:16:7c:91:ae:cd:8a:40:
                    3d:a9:38:1b:fa:82:a2:16:89:64:88:49:d3:4d:f1:
                    7b:c1:b5:71:8e:aa:77:43:1f:a1:dd:f9:12:07:28:
                    35:b0:79:97:0b:ea:fe:b3:f3:99:94:1b:25:3c:de:
                    69:b5:96:32:37:28:d8:79:1b:5f:bf:3a:a2:56:ae:
                    39:27:49:e8:16:17:87:a6:ff:e1:80:26:9e:c5:47:
                    02:ea:d5:b7:7e:34:25:10:28:dd:ec:43:04:8a:37:
                    fd:62:a3:d3:57:3e:dd:09:07:24:79:e7:cb:bc:55:
                    57:62:56:3b:6c:fb:aa:ea:a6:03:09:15:93:dc:04:
                    e5:f9:de:9d:cb:de:c5:78:7e:b5:2b:b4:78:a1:ba:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:1B:D0:21:AC:6F:7B:C8:C3:E1:46:82:40:2D:AD:4B:46:25:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7a147640-c09c-38ee-960c-54b816209fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:48:14:28:0b:6c:24:e5:67:bf:f2:fd:7b:e4:67:7b:7b:
         ed:4d:bf:2a:4b:39:b1:72:9e:7e:cc:86:6c:82:d4:bc:68:5f:
         7b:f5:81:06:60:0a:96:5f:b8:40:f1:a0:05:3b:44:a0:af:f8:
         cd:ae:37:14:4f:ce:e5:91:e8:52:bf:13:7d:1d:93:c5:21:72:
         b4:2c:ea:72:25:53:41:b5:76:60:c6:54:b2:93:dc:98:53:65:
         05:2b:81:98:d7:b2:68:9a:74:96:4c:88:ab:f1:26:a6:57:78:
         99:37:e1:8a:9a:97:04:05:b6:77:ee:23:8a:ea:4b:89:a3:b8:
         9d:22:9e:56:07:ec:4a:94:bf:86:e8:1f:4e:28:5f:09:c6:df:
         79:1b:98:d7:4f:f1:04:95:62:23:50:e7:75:20:c4:ab:d0:d4:
         57:db:51:65:1e:f8:e1:f6:d1:a4:28:d5:72:cb:8c:df:67:f1:
         11:84:2f:32:d8:56:85:c7:3f:6e:3d:54:66:cd:6a:1a:5a:85:
         da:f4:d4:c7:64:dc:de:c4:84:79:a9:ba:38:4c:a6:1f:62:a4:
         04:14:07:c4:0a:5a:a3:3e:f8:f9:cd:1a:a2:75:40:a7:16:f1:
         34:08:b7:39:01:05:f1:51:f4:a0:35:5a:93:5f:83:0f:db:d8:
         29:2d:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:16 2024 by rpki-client on console-ams.rpki-client.org