Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
File:                     0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa (raw, json)
Hash identifier:          DZXgEnYwG7LGrUkBQX3dW4F3TFafX+mSK7Qk6DuY4+s=
Subject key identifier:   15:CE:FB:CF:16:81:8D:C7:C5:E4:92:C8:95:59:E9:30:BA:AE:F1:DE
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584919417C663FD3D1CD807CA6E0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7c:66:3f:d3:d1:cd:80:7c:a6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=c0b4254e-514b-448d-b7a0-615b941d2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:fe:78:63:ec:42:7e:cc:ac:93:ac:aa:55:
                    cb:a1:52:bc:18:01:4c:32:fa:b3:96:6f:cc:8e:e8:
                    34:b2:f2:1e:3e:f3:62:99:b5:2b:52:d8:91:d2:e9:
                    22:ab:1c:b9:7a:60:9c:3a:39:d6:4d:69:98:aa:ac:
                    3b:ab:7a:31:58:6b:d2:0f:21:45:9e:42:e8:36:44:
                    88:eb:98:f2:6d:3c:96:8a:4e:bd:9d:59:fe:25:f6:
                    10:c3:4a:c8:68:0b:77:47:00:bc:14:bc:1e:2b:53:
                    d2:dc:b9:b7:d8:2c:e8:1e:39:1f:17:29:55:b9:0f:
                    b6:4d:8c:ba:34:a8:06:8c:ae:d2:6e:1c:12:61:dd:
                    86:2c:6e:0d:03:6d:6c:a8:03:1b:0a:95:de:76:44:
                    0c:b0:04:5c:44:bc:28:02:ab:31:8a:14:8a:7c:bc:
                    af:e5:b4:73:4e:49:63:7f:f2:63:d1:62:14:14:56:
                    e2:03:84:b7:3f:2d:f2:4f:53:98:d2:44:0f:b0:85:
                    34:80:20:c4:54:6a:66:fd:f7:39:bb:d5:07:32:65:
                    c8:52:31:aa:8d:be:48:25:18:cc:fc:05:46:a4:9d:
                    9c:3a:be:d4:df:67:f5:36:d3:5f:fa:91:15:de:08:
                    e5:e1:44:0f:da:07:cc:d7:07:9a:c0:b5:86:fa:1e:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:FB:CF:16:81:8D:C7:C5:E4:92:C8:95:59:E9:30:BA:AE:F1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:6d:9f:fb:fb:b9:e3:1d:54:13:17:36:ab:f2:43:00:68:
         03:79:0e:27:ae:3f:b1:e8:52:34:bb:5e:e7:d5:a3:65:64:1d:
         08:3f:40:63:e7:7e:0e:6e:e4:cf:b2:fe:1c:2a:d1:da:cb:ea:
         ab:52:bc:ea:99:6d:53:bb:65:91:e2:8d:b3:ba:49:f9:16:69:
         8d:80:02:dd:89:52:07:3a:fd:24:6a:38:41:c5:db:00:7e:ed:
         b5:17:e8:50:65:b8:33:ce:48:cc:50:c5:18:e1:3e:cc:b7:eb:
         5e:91:a5:a7:3e:d3:49:0b:25:63:8d:02:fb:6d:31:12:95:b2:
         ba:d6:fe:42:d4:ac:55:36:88:f5:ed:f3:f7:2c:9b:9e:7b:11:
         51:76:60:ad:ec:a1:66:3f:a7:3a:aa:c6:2e:50:dd:cb:bd:dc:
         e9:38:bf:04:ba:20:6d:1a:f9:a7:95:74:23:c2:57:90:e7:ff:
         f9:62:3d:b3:e4:16:7a:64:a7:fc:3e:08:db:3a:9a:ab:88:28:
         d8:07:af:04:92:64:89:11:82:42:20:94:84:b8:2e:b8:24:20:
         a4:51:66:e1:f9:71:14:fc:35:bd:7f:00:2b:9b:ea:2d:f6:72:
         99:04:8a:f4:ec:c1:0b:b1:e9:64:2e:68:15:30:e9:45:e3:aa:
         f7:aa:f2:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZQXxmP9PRzYB8puAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
YzBiNDI1NGUtNTE0Yi00NDhkLWI3YTAtNjE1Yjk0MWQyMDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTH+eGPsQn7MrJOsqlXLoVK8GAFMMvqzlm/M
jug0svIePvNimbUrUtiR0ukiqxy5emCcOjnWTWmYqqw7q3oxWGvSDyFFnkLoNkSI
65jybTyWik69nVn+JfYQw0rIaAt3RwC8FLweK1PS3Lm32CzoHjkfFylVuQ+2TYy6
NKgGjK7SbhwSYd2GLG4NA21sqAMbCpXedkQMsARcRLwoAqsxihSKfLyv5bRzTklj
f/Jj0WIUFFbiA4S3Py3yT1OY0kQPsIU0gCDEVGpm/fc5u9UHMmXIUjGqjb5IJRjM
/AVGpJ2cOr7U32f1NtNf+pEV3gjl4UQP2gfM1weawLWG+h4JRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBXO+88WgY3HxeSSyJVZ6TC6rvHeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvMGNkNzc1ZTgtMDUyZi0z
MWU1LTk0YjItYzkyZmU1NjU0Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJw/bZ/7+7njHVQTFzar8kMAaAN5DieuP7HoUjS7XufVo2VkHQg/
QGPnfg5u5M+y/hwq0drL6qtSvOqZbVO7ZZHijbO6SfkWaY2AAt2JUgc6/SRqOEHF
2wB+7bUX6FBluDPOSMxQxRjhPsy3616Rpac+00kLJWONAvttMRKVsrrW/kLUrFU2
iPXt8/csm557EVF2YK3soWY/pzqqxi5Q3cu93Ok4vwS6IG0a+aeVdCPCV5Dn//li
PbPkFnpkp/w+CNs6mquIKNgHrwSSZIkRgkIglIS4LrgkIKRRZuH5cRT8Nb1/ACub
6i32cpkEivTswQux6WQuaBUw6UXjqveq8q8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:34 2025 by rpki-client