Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa
File:                     1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa (raw, json)
Hash identifier:          8Q+Kxuprr5zWTAyKKxbkGupMTq9Wl2iBUX11tfU1MfI=
Subject key identifier:   38:9D:68:6A:B2:DA:18:35:17:0F:0F:AC:98:3E:CC:61:2D:71:37:A5
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584523DAFA94613F22A72FCC4100
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        2605:dd40:8d00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fa:94:61:3f:22:a7:2f:cc:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=5a6a766d-d100-45ef-b14e-bef8b55f2177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:ed:92:d2:7c:0f:09:b0:40:d8:24:68:bf:
                    c4:56:96:98:cc:d2:07:4d:64:61:af:74:b0:34:c9:
                    f7:f6:50:77:a5:e4:f6:86:86:83:3d:db:00:db:d4:
                    d2:f5:ee:21:31:16:73:0c:b1:f7:57:50:56:1a:fa:
                    a9:67:ca:8b:e1:6a:40:9a:31:0c:9a:e8:4b:78:ca:
                    aa:10:04:74:ce:cf:93:2f:f4:9c:80:e0:fd:db:5b:
                    36:11:33:1c:bd:fa:3d:1e:37:cb:be:84:d5:9f:83:
                    d3:a7:1d:3c:77:29:d3:82:ae:c0:24:41:b0:0f:82:
                    f7:66:4b:38:a9:24:3d:3d:29:a7:65:4b:32:c8:ca:
                    79:fe:b7:6e:3c:b7:56:68:94:6b:84:59:4b:a2:9d:
                    de:9a:0d:ff:d8:24:f4:1d:06:aa:36:3f:e4:f1:1b:
                    4e:91:a4:82:01:9f:e8:fa:91:96:2b:64:53:e9:4b:
                    81:09:ba:67:75:04:cc:40:39:f4:9a:c8:12:10:ce:
                    ca:75:1d:46:6f:3f:8a:12:df:70:81:9e:f0:8d:88:
                    4e:b1:1b:fd:d2:ee:2b:dc:9b:da:db:f6:48:62:e4:
                    d2:39:ac:1e:64:e6:9a:ce:23:78:32:3e:7c:0f:f3:
                    75:36:d4:2a:e5:a4:0c:16:c0:0f:c4:3a:5e:1e:cd:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:68:6A:B2:DA:18:35:17:0F:0F:AC:98:3E:CC:61:2D:71:37:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a344d99-3e82-3ff5-ae58-a88b4cbf4ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:d0:ab:71:18:08:dd:85:bf:89:31:d4:63:e6:6e:a6:e9:
         25:56:88:2c:1f:24:1a:35:45:c2:b7:a5:b1:3f:4f:32:54:3b:
         92:e5:e9:03:78:34:22:39:93:80:54:03:6d:04:2c:05:0b:95:
         af:1e:88:1c:a6:08:36:63:6b:50:f6:22:27:23:6f:10:7a:47:
         12:5e:b8:a8:c3:fa:9e:70:4a:d7:3a:b0:f7:b7:b1:27:17:bd:
         12:e1:0e:dc:0c:0c:65:4a:08:fd:d2:a3:66:29:9b:ff:80:e8:
         de:b0:43:39:e2:5d:03:13:c8:cf:1d:2f:9d:fd:5f:61:b9:e7:
         25:11:2e:b6:40:13:ec:7b:28:80:21:84:21:d2:eb:8f:c5:18:
         a8:bd:d1:a6:b6:06:87:e6:87:30:92:6f:1c:36:69:fe:bb:c1:
         be:dc:2f:09:d2:cd:2a:e8:40:91:73:e1:f2:05:cc:0d:8f:23:
         f0:28:2e:a0:a2:8b:39:9f:fa:8d:fb:eb:ce:92:f0:ef:9b:15:
         8c:73:4c:a3:0a:d8:9a:b3:13:a1:bc:aa:c1:78:6e:9e:a9:a5:
         6e:d9:6b:00:dd:23:73:88:ab:d0:ba:80:70:57:b2:43:59:1d:
         bb:ba:87:0a:13:72:41:22:c5:63:99:aa:12:46:17:1f:c2:16:
         a6:d0:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:24 2024 by rpki-client on console-ams.rpki-client.org