Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/19e6bb8f-3636-3585-90a3-f20bbd99c196.roa
File:                     19e6bb8f-3636-3585-90a3-f20bbd99c196.roa (raw, json)
Hash identifier:          JpsrMRlIuMQjh+SnmwKt00acDH/BhYP6CUlkiClbOc8=
Subject key identifier:   9B:DF:29:F3:13:A0:6A:CC:8C:EA:9A:3B:66:00:99:21:DA:C3:27:9F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844E23FD9AFEB18CB218EC9C220
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/19e6bb8f-3636-3585-90a3-f20bbd99c196.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        2605:dd40:8700::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d9:af:eb:18:cb:21:8e:c9:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=feb97893-d52c-4022-a061-3dc95dcf5fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:8c:70:82:20:33:92:dc:0e:30:93:86:05:
                    4c:7f:13:74:9b:ce:30:8c:d9:36:f6:3d:1c:dc:ff:
                    ee:a0:73:30:91:33:32:bd:01:4d:9e:29:49:90:1f:
                    c5:cc:db:0a:bc:e7:ad:c1:dd:a1:26:74:37:2b:17:
                    3d:70:8f:a2:a2:ad:f0:23:95:d8:97:a7:e1:a2:53:
                    1f:3e:87:f1:86:b6:25:9f:a2:52:a7:29:7e:7a:91:
                    35:2c:fe:d7:f8:f1:89:39:ae:d3:51:2e:c0:3b:e1:
                    01:ff:17:ee:68:41:c2:b2:90:f0:fd:35:be:0a:12:
                    4c:a2:90:c5:4b:f3:ec:8e:f8:b1:21:c7:e1:e7:5d:
                    1d:26:5f:5f:37:37:f9:f9:81:13:66:89:4a:07:45:
                    f0:ce:8d:37:d1:9a:67:61:b6:c3:9f:3a:eb:eb:6f:
                    c0:2a:60:91:8e:b3:5d:28:40:67:86:21:2c:e6:d0:
                    68:2e:e7:c0:f5:a5:87:a1:b6:9a:ec:d6:c5:77:8a:
                    77:03:fd:27:53:88:56:1c:c6:2e:d6:1e:46:c3:c2:
                    8c:13:ce:2e:7b:3d:d0:01:d8:0a:be:75:23:03:75:
                    e1:8c:dc:0a:cf:14:11:4a:34:04:20:b1:e3:e5:57:
                    a4:6f:26:4e:aa:13:eb:d0:c5:35:9c:74:d6:c9:e2:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:29:F3:13:A0:6A:CC:8C:EA:9A:3B:66:00:99:21:DA:C3:27:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/19e6bb8f-3636-3585-90a3-f20bbd99c196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:cc:4e:61:c9:d6:ac:64:8d:31:97:71:73:c2:f9:f9:9e:
         c0:16:31:a9:3b:fa:c9:df:56:78:1b:b7:b5:78:a2:5a:c5:46:
         d5:12:0b:0e:d2:61:9f:c4:ea:32:da:65:bf:8c:90:6d:d9:af:
         05:11:7d:15:a2:36:c6:c2:0c:49:f6:89:51:96:9e:31:79:04:
         93:e6:d0:45:13:e4:5e:19:f5:67:5e:47:d1:34:3a:48:b7:8c:
         42:cd:85:1f:6d:0c:19:14:c6:da:2f:15:35:89:03:44:4c:ad:
         66:09:9f:68:10:e1:1d:be:2e:21:7a:1b:e1:f1:d7:16:06:1a:
         02:b1:44:e9:28:c8:f3:b2:c6:bb:6d:81:88:2f:93:2f:99:e7:
         21:bb:f4:f8:6e:d7:8f:04:76:96:b2:23:2b:6c:e0:66:74:16:
         bf:6a:e3:9f:90:b4:47:52:5a:8c:1c:56:e1:b5:d4:15:5f:9d:
         4b:60:4b:9e:5c:c4:c8:a7:76:de:20:aa:c9:67:d0:ad:cc:f7:
         f4:b8:53:d0:9c:52:e7:26:74:7d:28:13:1f:90:ce:38:26:fc:
         f3:bb:83:a4:11:99:0d:b3:d5:90:2e:46:0b:3a:c3:4c:23:21:
         d7:6c:48:43:5c:22:fc:a6:8c:d9:2d:1c:cb:38:83:4a:8f:77:
         d6:bf:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:36 2024 by rpki-client on console-ams.rpki-client.org