Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File:                     d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier:          zDlLsW0uVPpfVw9Uaa3mlxrzqEbGYVsfqhEiK0O9BAU=
Subject key identifier:   15:F6:B7:42:09:06:94:2E:6C:68:83:16:07:CA:FF:EC:89:53:F5:19
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845A9BE09EEC4766754C3682680
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     398549
IP address blocks:        2605:dd40:8260::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:09:ee:c4:76:67:54:c3:68:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=d4abd85f-63aa-4b47-a4ff-6a57e6f623e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:75:85:97:0f:a6:6d:9e:cb:85:54:81:ac:
                    78:fa:b8:26:8e:c7:c3:42:94:69:42:d6:c2:4a:4e:
                    77:5e:ef:5b:05:ec:e2:44:a3:ca:c0:6d:0c:a4:6b:
                    7b:e5:d1:fb:71:13:7f:aa:83:1d:c5:b9:7b:1b:86:
                    4f:04:92:d1:c2:14:1f:25:72:5d:cd:7c:d8:a0:28:
                    9b:bb:f0:ee:5c:66:1f:b7:60:5c:c9:7f:1a:0c:12:
                    2e:f8:7e:df:5b:24:67:4b:69:7e:76:92:a4:6f:5c:
                    af:59:03:35:d3:c0:e8:87:d4:7d:9c:80:b1:be:04:
                    90:fd:47:48:5b:71:43:98:6b:3b:3f:14:6c:53:c3:
                    85:ef:35:5f:33:ed:ca:0f:7b:87:b6:18:d7:09:4b:
                    d3:7a:91:6c:83:ea:82:f1:6a:4c:77:1d:50:a9:70:
                    a8:ce:ad:69:ee:d8:17:15:4e:1d:ed:1d:f3:f0:54:
                    ec:b2:75:00:b7:d0:71:43:3d:45:bb:b5:62:49:a3:
                    a1:51:40:f2:3a:c9:16:5f:b3:8b:10:79:95:fc:d4:
                    17:73:b4:66:c3:7c:76:8e:01:cd:1f:f6:f7:49:bd:
                    cb:82:25:4e:23:a0:61:4c:ef:ff:b0:0b:04:51:04:
                    dd:7c:6a:53:01:5a:d7:59:6f:b3:d2:2d:04:89:47:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F6:B7:42:09:06:94:2E:6C:68:83:16:07:CA:FF:EC:89:53:F5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:34:25:69:e3:65:dd:b6:22:f3:09:33:57:68:7a:7d:c9:
         ea:41:0d:bc:33:ea:ee:06:9a:b5:5c:19:2b:de:84:ed:9e:11:
         24:8f:11:ba:92:0f:8d:fc:ac:fa:31:00:4e:8c:37:d6:a8:98:
         ac:ec:b0:7e:0d:d2:eb:0b:95:0a:c6:ab:5d:4d:9e:20:1f:2a:
         d6:8a:50:8a:d2:ed:c0:08:4b:ea:bc:d1:b0:a4:f7:15:22:83:
         52:d7:28:74:ec:ba:d8:99:d5:ab:4c:58:4a:97:1a:7f:68:6d:
         d1:67:c4:70:1e:51:70:2d:34:7b:5b:72:d2:5e:14:a4:e4:bb:
         a2:fa:fb:89:c2:91:f9:b6:7a:4a:83:cb:d8:41:94:0d:83:d8:
         ce:59:53:bd:3e:b1:40:fd:75:f9:9d:94:60:a2:2c:69:5a:e0:
         ba:fa:6f:ef:2f:4c:6d:69:58:ca:b4:43:38:55:ce:41:4b:2c:
         0e:0d:d7:31:9a:16:f0:a6:17:38:56:2e:8b:f8:79:74:4a:e9:
         5e:c0:bd:f7:74:0a:94:a9:d7:fc:64:c2:07:81:bf:52:db:7a:
         2d:ff:c9:11:9e:d9:bf:e8:8f:a8:87:b6:6a:a8:d7:52:05:d7:
         81:98:3a:ef:42:6e:bb:2e:d9:11:9b:0b:04:1c:db:e3:aa:d9:
         3f:bb:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:58:16 2024 by rpki-client on console-ams.rpki-client.org