Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf 2475e9f7-3ef4-3dcc-9bbe-37d32c80142f.roa
File:                     2475e9f7-3ef4-3dcc-9bbe-37d32c80142f.roa (download)
Hash identifier:          zDsOdgM+xtDmzPNyCj79Gpi15qLnpPGn++izLJGrA6M=
Subject key identifier:   9D:98:B8:BC:05:38:6A:D0:27:BF:5A:E5:4F:05:8D:0E:C4:A4:38:E1
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583CCB234455231A77B519D99DC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2475e9f7-3ef4-3dcc-9bbe-37d32c80142f.roa
ROA valid until:          May 07 04:00:00 2025 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:5215::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cb:23:44:55:23:1a:77:b5:19:d9:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : May  7 04:00:00 2025 GMT
        Subject: CN=773fa8bd-81ea-47a3-a4ac-6ac4342545f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:45:06:70:ef:04:c2:18:c6:e2:77:4c:12:
                    51:b1:a5:b3:84:81:c2:b3:f6:a6:0e:90:84:50:a1:
                    b0:38:f0:0f:98:f5:9b:68:4d:5b:42:e8:0a:2f:20:
                    90:61:b5:85:41:c1:3b:82:ae:cb:5b:dc:78:96:21:
                    31:ea:16:15:ec:87:74:89:3f:37:fa:84:6b:a7:18:
                    62:64:bd:d3:9e:37:13:60:25:f6:c2:c2:d0:a0:2b:
                    57:0e:f2:cf:c1:82:9e:77:00:ca:96:d6:65:4f:86:
                    14:d5:00:37:04:e1:ba:3d:de:be:9c:4e:95:f9:4c:
                    7a:de:ad:d4:d4:c5:9e:e3:2b:a8:00:9f:69:f4:57:
                    7f:e1:2f:e8:95:d7:50:d6:cf:1d:51:c9:ec:f2:ed:
                    5b:3e:89:a0:3b:ee:66:58:af:60:ec:4b:4e:84:ca:
                    ee:c1:d1:35:19:d5:c1:3a:35:61:54:78:bd:c5:83:
                    35:5e:c1:cd:12:90:7b:76:1f:98:3d:7b:45:8c:18:
                    a8:f5:98:98:82:6e:92:8e:22:fa:22:49:77:53:bc:
                    9e:e6:b4:23:34:c9:c8:8e:26:67:d4:30:cf:e8:3f:
                    e6:c1:0a:1f:0b:13:ab:dd:b6:39:f5:65:98:17:77:
                    b1:d1:60:40:98:fb:a5:79:a9:f9:a9:46:bf:13:b1:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9D:98:B8:BC:05:38:6A:D0:27:BF:5A:E5:4F:05:8D:0E:C4:A4:38:E1
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2475e9f7-3ef4-3dcc-9bbe-37d32c80142f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5215::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:7e:9e:cf:f6:59:48:ea:4a:82:cf:51:7f:fe:77:46:89:
         21:15:2d:9c:c7:6a:4c:8b:d9:d0:09:b7:e8:d5:13:11:ba:22:
         68:b1:90:13:bc:90:35:09:62:95:db:ef:c5:35:e1:bb:c8:10:
         da:4d:d6:f6:0b:7f:0f:a5:cb:20:c8:d8:c1:44:b3:35:76:b6:
         f7:ef:d5:b5:70:ee:ab:c9:69:41:be:9e:70:78:39:e6:94:b9:
         1a:b2:d1:cc:11:3e:17:35:48:07:72:73:b2:fa:3b:86:79:a1:
         20:04:60:f3:0a:ab:5f:23:32:d5:0d:97:77:1c:7c:cb:c6:d9:
         ed:42:91:d4:a9:28:42:71:c9:21:54:71:c9:dd:9d:ac:75:f7:
         69:0d:39:0b:bc:42:60:c9:76:46:b5:d6:16:a5:12:58:4b:9e:
         6b:01:c1:4d:f3:6e:99:34:4f:6d:10:b9:b4:63:a7:39:f3:88:
         f3:52:59:bf:19:32:a1:62:19:e7:02:76:27:a5:11:8b:01:7f:
         0b:80:39:54:b2:b4:85:44:2b:fd:09:67:47:3e:54:8f:6e:ae:
         44:7a:43:87:d4:59:72:2c:ff:f9:6b:ea:f3:11:16:b4:ad:3b:
         bc:b2:05:76:40:14:04:09:43:c1:29:ea:32:6c:03:df:62:80:
         e4:fe:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:00:34 2022 by rpki-client.