Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa
File:                     1a34a966-44a5-350d-9877-e7f7880cdf0e.roa (raw, json)
Hash identifier:          25R2e1oytAu1mnhmDMAvyeKK/UmHPzYO2qupcRje6eU=
Subject key identifier:   7D:69:85:22:00:CB:30:F3:96:72:E7:57:E8:5B:B4:53:F7:A1:F7:75
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848E9CBF201EA3A50D9BAED3D00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:2500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f2:01:ea:3a:50:d9:ba:ed:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=ba8a844e-60ad-457c-821c-800cca1ef8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:82:0e:50:85:6f:ed:64:c2:95:ce:11:15:
                    cc:30:30:2b:1e:03:80:9b:dc:ac:f6:e1:a0:6e:a1:
                    a5:b2:d3:4a:d9:57:4d:98:cc:3a:46:46:23:72:97:
                    61:7b:46:d7:77:42:42:65:8f:45:40:20:bf:82:0c:
                    a1:d5:31:c2:36:f3:95:b5:91:39:5d:d9:80:de:89:
                    9a:29:d1:51:59:cd:b4:7b:cb:61:42:d6:bd:6b:d3:
                    8e:b2:39:2a:b1:89:5e:36:66:31:35:e9:85:ed:8f:
                    a7:a8:0a:85:17:3a:ed:0f:20:1f:e8:25:05:13:43:
                    66:8e:59:39:23:af:9f:85:3d:2a:b3:a3:b8:97:52:
                    6a:01:27:80:1b:24:65:f2:ce:b8:4f:04:19:60:44:
                    99:87:33:cd:f4:50:08:39:7e:2b:e0:25:30:b6:a3:
                    7e:43:75:81:9e:4a:17:de:3c:25:d8:f4:14:a7:13:
                    2a:45:57:41:5e:04:be:c2:8c:d8:d1:1c:c5:4d:84:
                    17:91:1d:67:21:40:81:5f:7b:ba:ba:9f:86:ed:b1:
                    6a:bc:9f:31:89:d8:fd:df:cd:e1:6b:79:b8:4e:fa:
                    9e:b7:25:da:7f:8c:23:9d:08:ee:b6:19:3c:6a:c3:
                    a8:c8:a8:6b:ae:85:6d:d6:8f:0c:ae:e8:25:9d:0c:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:85:22:00:CB:30:F3:96:72:E7:57:E8:5B:B4:53:F7:A1:F7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:76:66:3b:e8:33:9b:bc:6b:f2:4e:fc:cd:14:ed:69:06:32:
         49:40:dd:1e:34:94:b4:79:df:ea:7a:0a:67:95:de:92:9e:18:
         c4:50:4b:28:eb:ca:7c:d9:8d:05:53:b5:4e:5a:76:39:ce:64:
         40:2e:b2:2a:58:29:56:54:10:77:66:78:12:42:13:2a:bc:5f:
         32:8e:eb:5c:e9:59:d1:a5:30:5f:6d:e0:b0:c8:e8:00:7f:67:
         9f:07:89:6f:a6:d5:60:4e:43:96:fa:10:41:43:6e:3c:2b:e8:
         4e:cf:d9:73:f3:26:34:3e:69:03:38:92:b6:12:56:45:94:62:
         85:58:ea:fd:cd:cc:cd:f8:cc:d0:79:f8:b0:e4:e3:33:7a:32:
         fa:c4:21:b1:dd:c4:e3:37:75:37:79:7e:27:a6:a5:90:07:3b:
         c7:f1:9f:0e:25:89:d5:73:29:92:ef:38:ba:56:64:bd:30:7a:
         21:9b:fa:3d:56:e7:70:e2:f5:2b:2d:a4:d7:93:d0:01:22:7e:
         dd:f6:c4:e4:25:53:cd:f6:e5:49:e3:2d:a5:48:88:87:55:07:
         86:cc:1f:52:62:d7:23:f5:53:63:ba:d4:e7:8e:96:f4:b6:a6:
         e4:94:4d:b2:dc:2b:b3:8b:f7:50:e7:92:67:9f:f0:fc:52:8a:
         a7:44:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:12 2025 by rpki-client