Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa
File:                     10517acb-f135-3f1a-a552-6f002949958c.roa (raw, json)
Hash identifier:          IVU4J0m8Y4sGgMubuAJuJnqYx9tMybWr5Ik81SnD+8o=
Subject key identifier:   D6:76:53:AB:E1:3E:60:E6:68:BB:44:E0:C8:A1:04:10:08:02:A0:82
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285849218400541B9E42F2D0CA1380
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:00:54:1b:9e:42:f2:d0:ca:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=695b3ef9-081b-4970-a9bc-c90a516801df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:56:9f:b0:e8:77:f7:05:52:1c:fd:dc:c2:
                    6b:e4:38:58:bb:2c:e8:22:8f:d3:77:ac:4a:b9:b6:
                    7c:30:0a:02:41:95:d0:a6:13:79:32:d9:81:01:3f:
                    f6:3c:e3:e7:25:9e:ab:07:8b:bf:0d:b9:cd:55:9a:
                    e8:25:b7:86:9c:12:a5:62:62:b5:c6:38:ae:ff:64:
                    2c:a3:6b:91:d7:ce:d1:fe:38:af:20:cc:d3:84:fa:
                    61:ad:44:5a:49:b4:ad:2b:63:8d:ef:87:60:4d:4d:
                    ac:61:ac:2a:74:29:75:2d:94:ce:c9:2d:cf:92:e5:
                    0f:d0:3a:13:b2:7a:d1:c6:b4:d0:7d:44:05:2c:97:
                    c6:af:9a:20:fb:68:99:06:83:4b:aa:f2:4b:78:cc:
                    ef:01:c1:1e:19:a9:c3:a6:ca:d6:85:d7:32:0e:7c:
                    0e:61:fe:a4:90:3d:5f:21:4d:3e:92:c6:4a:98:50:
                    d0:a8:45:8e:54:8c:70:ce:c2:e7:44:d7:0f:cd:84:
                    a5:bf:c3:e6:af:51:26:1a:8d:b7:30:3e:16:a0:c9:
                    ee:7f:12:a8:b5:b2:25:65:ca:c7:d2:ab:84:14:39:
                    75:e9:63:88:78:61:4a:8b:71:2e:4b:bb:ec:da:ef:
                    ec:09:ed:f3:f5:13:6d:8d:a0:b7:8f:c3:9a:20:3c:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:76:53:AB:E1:3E:60:E6:68:BB:44:E0:C8:A1:04:10:08:02:A0:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/10517acb-f135-3f1a-a552-6f002949958c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8118::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:80:79:d7:4c:88:b1:06:fd:fa:d1:48:6e:0d:bb:a2:67:
         a5:bb:df:be:01:93:2f:38:d7:a0:46:34:64:d0:e7:d0:79:56:
         1b:31:94:c5:5d:39:0f:69:48:61:9d:47:46:83:33:6c:4e:85:
         bf:5b:d2:2a:62:99:4c:54:6a:94:8c:1c:1e:11:5e:6b:fa:34:
         6e:7c:56:7d:31:44:a9:d0:10:92:ea:b9:95:da:6b:ce:8a:9d:
         9f:9a:cc:a4:f0:b6:17:b5:6a:6d:9a:73:ec:8f:1e:03:88:d8:
         e4:96:1c:75:c3:45:88:2c:37:d1:3b:c1:b9:18:5b:83:f6:3b:
         a8:76:84:99:88:d4:21:dd:ad:f9:7a:9f:74:bc:d1:8b:94:f6:
         2c:be:56:30:8f:99:7d:c0:6b:59:9a:8d:2d:02:49:5a:05:af:
         15:96:5e:f7:c4:36:d1:ca:67:12:a3:95:b9:21:f7:ff:dc:c0:
         53:18:1a:e2:49:93:8c:54:cd:c8:3f:f4:0b:08:79:42:42:e3:
         8c:98:25:38:9d:ea:f6:4e:53:6b:45:73:0b:62:01:6f:e1:22:
         ca:4b:45:64:8f:91:5a:3e:6b:4f:f7:14:f1:cd:d7:65:33:91:
         79:26:a3:71:90:7d:e8:0a:34:ca:89:4c:aa:67:fe:c8:a9:65:
         00:52:71:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhABUG55C8tDKE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
Njk1YjNlZjktMDgxYi00OTcwLWE5YmMtYzkwYTUxNjgwMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9FWn7Dod/cFUhz93MJr5DhYuyzoIo/Td6xK
ubZ8MAoCQZXQphN5MtmBAT/2POPnJZ6rB4u/DbnNVZroJbeGnBKlYmK1xjiu/2Qs
o2uR187R/jivIMzThPphrURaSbStK2ON74dgTU2sYawqdCl1LZTOyS3PkuUP0DoT
snrRxrTQfUQFLJfGr5og+2iZBoNLqvJLeMzvAcEeGanDpsrWhdcyDnwOYf6kkD1f
IU0+ksZKmFDQqEWOVIxwzsLnRNcPzYSlv8Pmr1EmGo23MD4WoMnufxKotbIlZcrH
0quEFDl16WOIeGFKi3EuS7vs2u/sCe3z9RNtjaC3j8OaIDw/PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZ2U6vhPmDmaLtE4MihBBAIAqCCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvMTA1MTdhY2ItZjEzNS0z
ZjFhLWE1NTItNmYwMDI5NDk5NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIEY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKP7gHnXTIixBv360UhuDbuiZ6W7374Bky8416BGNGTQ59B5Vhsx
lMVdOQ9pSGGdR0aDM2xOhb9b0ipimUxUapSMHB4RXmv6NG58Vn0xRKnQEJLquZXa
a86KnZ+azKTwthe1am2ac+yPHgOI2OSWHHXDRYgsN9E7wbkYW4P2O6h2hJmI1CHd
rfl6n3S80YuU9iy+VjCPmX3Aa1majS0CSVoFrxWWXvfENtHKZxKjlbkh9//cwFMY
GuJJk4xUzcg/9AsIeUJC44yYJTid6vZOU2tFcwtiAW/hIspLRWSPkVo+a0/3FPHN
12UzkXkmo3GQfegKNMqJTKpn/sipZQBScVc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:21:36 2025 by rpki-client