Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
File:                     98cce9a6-cadc-36fd-9326-cc765ef424a0.roa (raw, json)
Hash identifier:          SjE4zvO0TI+4kKx/RTd2rDDjN5ENGhnKN3XaXCfplHM=
Subject key identifier:   6C:06:0C:A4:01:9E:AC:6D:9C:67:F8:FC:F2:22:9F:0F:B1:CA:19:E6
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845D39E59BC931BAF40599D8800
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     398549
IP address blocks:        2605:dd40:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:59:bc:93:1b:af:40:59:9d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=e13ee975-af09-4b41-bfd3-1b2423ed730b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:70:d7:00:6b:76:8e:30:c4:00:f3:71:ff:
                    57:c8:9c:fb:d1:a1:e7:05:aa:55:38:99:f4:3e:c1:
                    f7:52:eb:56:67:f7:ee:fd:15:35:9e:e6:f5:92:c2:
                    dc:37:3c:41:78:8b:19:da:30:f6:2b:2d:c2:df:2f:
                    3b:9e:93:dc:bd:f2:1f:20:c1:50:2d:b3:d3:e0:2d:
                    4d:64:22:01:c3:7f:ee:01:2b:1b:32:ce:a5:a1:b3:
                    e3:86:db:17:72:68:16:33:28:d4:f8:27:92:37:2a:
                    99:31:d6:86:44:67:38:17:38:f5:93:f7:ed:9e:8c:
                    42:a9:21:73:55:14:01:84:7a:9c:95:64:2d:f6:f4:
                    8b:bd:96:39:7b:97:d5:08:6b:fe:d5:3f:74:ff:b8:
                    a3:25:24:1a:79:53:d9:af:39:a3:ef:07:b5:60:b1:
                    e8:55:b1:6f:de:0e:5c:0c:07:5f:a0:28:62:8f:c0:
                    1d:6c:99:23:ce:81:f4:68:4f:c0:da:c9:5d:45:2c:
                    6f:20:04:52:69:70:04:20:d5:fb:53:1a:83:6b:bb:
                    31:4e:7d:59:1f:a2:c5:43:83:aa:a8:10:c6:57:d8:
                    9f:3c:b5:17:a1:41:06:18:8b:56:6a:e5:8a:5d:3c:
                    18:b3:68:b0:f0:4c:e6:65:31:d4:3f:57:fd:40:6f:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:0C:A4:01:9E:AC:6D:9C:67:F8:FC:F2:22:9F:0F:B1:CA:19:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:87:19:d1:43:99:75:1b:05:cf:fc:96:67:9c:8c:89:fc:09:
         0a:de:e6:11:dc:5a:ef:e8:b7:fa:42:ce:63:51:70:f2:3e:ec:
         96:66:84:b7:1b:b8:50:75:59:29:91:77:b6:6b:c2:d1:82:57:
         90:f8:93:71:de:3e:85:14:71:10:fa:8c:e3:70:45:ef:59:be:
         5d:93:ba:62:0b:ba:03:16:1a:77:88:ab:5a:49:63:17:0b:59:
         0f:65:ff:46:4b:ed:c3:d6:e7:d4:59:58:51:47:03:48:6a:6f:
         0b:23:0d:a3:ab:b6:b8:d3:ce:62:d1:2d:2d:03:7c:a6:54:58:
         ed:5b:0b:d6:b4:c3:83:25:5d:ce:f6:0f:64:51:a5:55:19:c4:
         f5:5c:0e:60:84:ec:d5:92:07:a6:9e:26:41:8f:67:46:27:cb:
         94:e0:15:be:49:90:cc:30:c3:f6:af:52:b3:4f:56:7b:14:68:
         38:a9:6e:48:49:b5:89:de:01:e2:a5:bd:3c:c7:a3:97:ad:d7:
         87:d0:21:2b:96:20:28:8b:b9:c4:af:2d:2d:bd:7e:45:15:28:
         b2:2b:c0:ef:6e:6d:ba:c7:51:3e:6c:ee:cd:e4:6b:23:83:7f:
         78:00:e5:c1:ca:bd:8b:55:6c:79:46:4c:f6:fe:33:ca:64:1e:
         95:35:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:59 2024 by rpki-client on console-fra.rpki-client.org