Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
File:                     2984541f-4d58-31b5-beab-58cd4ef8404e.roa (raw, json)
Hash identifier:          PK6JGX9temzE6uRRMvbOcZT2z3SiJGJBTFpuCQOQAcA=
Subject key identifier:   3C:01:FC:AD:6D:F5:49:41:11:FC:EF:A8:89:24:E1:5C:64:FF:47:93
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844CA851B67BC12A07D39C1E480
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
Signing time:             Mon 05 Feb 2024 14:00:31 +0000
ROA not before:           Mon 05 Feb 2024 14:00:31 +0000
ROA not after:            Sun 05 May 2024 13:00:31 +0000
asID:                     398549
IP address blocks:        2605:dd40:8009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ca:85:1b:67:bc:12:a0:7d:39:c1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb  5 14:00:31 2024 GMT
            Not After : May  5 13:00:31 2024 GMT
        Subject: CN=683bdcbf-fc07-4bd1-b095-016cc9a64163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4b:5d:f6:ce:af:2a:a9:8d:12:8a:15:77:72:
                    f0:95:20:5c:ed:f2:9e:a4:a6:b9:9f:65:83:dc:78:
                    35:64:26:43:57:76:1f:9b:78:ee:80:c3:e2:a6:c2:
                    b2:02:b2:f1:d8:56:8b:6e:75:9a:dd:75:a2:82:31:
                    0c:ec:83:b8:39:26:b4:db:c2:3f:52:5a:8d:29:a7:
                    14:61:44:00:0d:f8:92:d8:f6:da:81:da:f7:e9:fd:
                    27:59:d2:6e:0f:36:c8:e1:96:48:d0:cb:d3:ee:d7:
                    fc:ec:04:28:95:a0:a1:50:fa:c5:a7:2c:18:f9:99:
                    fd:f0:21:82:47:97:43:0b:e5:c5:d7:35:6c:56:93:
                    f4:c0:dd:d4:fb:42:4c:52:e7:11:48:c1:9d:b7:8c:
                    46:26:f9:d8:cc:87:0c:29:ba:5c:20:d0:1d:2a:8d:
                    8d:5e:9a:fb:31:4d:98:d7:55:6a:92:20:8a:f7:5a:
                    c9:be:c1:77:0c:57:f6:7e:fc:11:9f:0f:94:61:12:
                    21:2a:c2:4e:3a:19:21:06:28:fc:2a:31:69:2a:5d:
                    6c:56:6f:3a:02:70:90:7b:12:51:4c:e1:38:a8:30:
                    10:5c:75:99:18:db:31:9b:5d:0a:cb:7e:af:70:45:
                    41:94:39:b2:f5:5f:51:14:92:86:10:e5:07:66:9d:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:01:FC:AD:6D:F5:49:41:11:FC:EF:A8:89:24:E1:5C:64:FF:47:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:30:c5:72:7a:23:5d:98:21:30:c8:d9:e1:bc:66:0b:a4:
         bf:3e:3d:f8:2d:5d:15:67:a7:c2:7a:6c:d4:b6:11:89:3f:62:
         6d:01:93:cc:72:eb:48:53:f2:e6:09:5c:56:10:7e:8b:17:ff:
         d1:8f:6c:ed:e2:cf:44:24:94:7e:e7:4d:b1:3f:85:18:43:9e:
         dc:d8:f5:7d:51:a3:83:80:29:1c:70:2d:a8:7f:f6:74:87:fe:
         6e:d6:0a:52:48:b1:b0:15:2c:09:c3:dd:d8:ef:55:8a:0f:59:
         45:fd:26:b1:f9:9a:aa:af:df:f4:7f:4b:a5:93:4c:66:1d:57:
         88:0e:74:e7:9e:fa:e2:63:03:4f:30:45:2d:42:d5:59:42:2d:
         d0:89:25:4a:30:24:df:dd:1e:9d:f0:07:cc:c5:24:9a:70:a5:
         38:df:9f:07:eb:4c:4f:57:d2:a6:c6:eb:e6:42:11:a6:ea:e9:
         1a:f2:7e:e5:64:3a:15:00:2a:8d:7a:0c:b9:59:f1:87:86:b3:
         c6:cc:b5:1a:4f:84:3c:26:db:74:8b:93:66:85:aa:8d:cc:95:
         00:76:4d:90:7a:32:3e:9c:63:92:a2:d6:35:6d:69:93:65:6d:
         bf:be:48:20:bd:2b:61:1d:3d:f2:1f:ce:83:00:2f:ea:e1:29:
         32:66:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 06:36:02 2024 by rpki-client on console-ams.rpki-client.org