Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
File:                     05243640-ba9f-3af3-a94d-0215983cabee.roa (raw, json)
Hash identifier:          bKyeWuPq4dPjkLWdidu1bilUyua88leDN8dkk9WR0iY=
Subject key identifier:   A8:7A:DF:8F:D3:19:B8:CA:ED:6E:AD:9B:C0:79:95:90:37:99:06:D8
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848A1360DDEE7D3E405B84012C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8d00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:0d:de:e7:d3:e4:05:b8:40:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=68f78f3c-abef-41b3-bc3d-8b1235f78068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:c7:86:74:a1:9f:90:94:ea:7b:40:58:3b:
                    de:c6:af:c5:28:40:e2:65:2b:04:c0:fb:8f:fc:40:
                    cb:d0:9e:ab:ce:4a:ea:d3:bb:1a:18:68:e9:e2:50:
                    35:0e:dc:88:26:92:cf:8d:83:3d:06:7c:0c:eb:da:
                    c3:3e:9d:f5:61:9a:1d:a5:d9:8a:e9:27:a0:e7:d1:
                    40:0c:11:3d:95:b4:7d:25:1c:06:1c:41:e1:28:ac:
                    ae:de:3c:05:3a:2e:49:11:0e:4a:73:a1:53:79:ac:
                    59:47:9e:e9:13:4e:90:fe:27:53:89:19:79:04:18:
                    10:cb:77:d9:a9:ca:49:2a:42:fd:66:72:9b:d2:a2:
                    38:4c:55:c9:64:b0:d4:2e:33:6b:37:76:b6:57:d1:
                    27:a0:74:4d:01:0a:a8:0b:8e:45:19:19:e6:8e:ac:
                    29:62:1b:00:44:2f:75:52:35:1c:2e:bf:6b:16:f3:
                    72:21:82:50:f8:e8:65:e0:44:82:ed:e0:c0:bb:36:
                    63:b6:59:1b:51:18:f7:44:38:1f:94:47:d0:bc:d1:
                    cc:e4:f3:79:a9:da:74:03:e5:ac:57:6a:94:2f:2e:
                    a1:49:4e:ae:8c:0e:45:f9:dc:a3:96:c2:be:34:fb:
                    7f:8d:f9:d8:19:72:44:70:65:c7:38:e4:c2:25:92:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7A:DF:8F:D3:19:B8:CA:ED:6E:AD:9B:C0:79:95:90:37:99:06:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:14:97:50:c3:bd:33:18:3f:7b:1a:ef:1a:27:65:2a:fc:
         0b:83:9f:f2:2a:7c:f1:d0:7d:41:06:3d:ed:bc:a4:a1:72:e4:
         ca:ea:32:08:ba:6e:96:e2:dc:9b:d5:f5:15:e9:05:ac:b8:2c:
         10:80:1e:ef:ee:ae:98:1e:58:3f:a7:4c:60:27:75:a6:f0:63:
         5a:fd:6e:99:0a:b9:e8:06:ba:6d:4c:df:b2:4f:e7:f4:0c:aa:
         dd:c2:91:b0:52:b2:5d:0d:37:97:e6:30:c3:0c:f5:01:24:20:
         31:b9:81:b2:a9:10:5f:29:22:62:ab:cc:29:55:a0:e9:02:c4:
         77:46:dc:29:cd:a6:40:32:be:5c:46:47:a3:a6:66:c8:23:48:
         84:d9:39:13:48:de:c0:46:c8:c3:69:ea:e2:c7:7f:32:fa:45:
         9f:e0:18:17:8c:f0:05:7c:54:00:c0:a9:d5:0f:84:31:0c:e5:
         2c:16:af:fe:e3:2d:62:75:ae:a9:83:92:50:0b:c4:ca:9c:ef:
         30:f4:29:59:33:62:37:a9:ee:60:a0:2e:d2:a8:6a:dd:c0:05:
         38:49:94:35:29:dd:b3:9f:29:f5:d5:43:e9:b8:8a:b0:af:ae:
         0c:da:43:6e:f7:c2:e3:bb:2e:5b:d6:16:f7:29:1b:0d:f5:fe:
         fe:29:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:40 2025 by rpki-client