Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
File:                     2984541f-4d58-31b5-beab-58cd4ef8404e.roa (raw, json)
Hash identifier:          Eobq+7ZFV3sfhSSVvDM4XrdjIUuB1UzKse65VFMJln8=
Subject key identifier:   B0:92:71:AE:C9:02:B9:D4:3B:36:97:05:62:97:49:BC:2C:50:4F:BC
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285849287E652F15F509405B5CBEC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:8009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:65:2f:15:f5:09:40:5b:5c:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=b6e250c8-dd4b-4e94-b43b-0f25067def2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:96:45:1e:c6:53:35:4d:d8:92:d5:56:81:
                    ff:75:c8:29:36:1d:c6:b8:e0:e8:87:aa:dd:28:fb:
                    7d:3a:3d:5b:1f:c6:90:f0:86:7c:6d:d4:8e:22:f8:
                    cf:c8:ba:82:c6:00:84:e0:c5:38:9e:58:e1:7e:71:
                    16:2e:0d:20:4d:ef:54:f5:dc:92:6a:02:42:f4:22:
                    4d:84:0e:6c:1b:04:1e:e1:4d:c1:2d:e2:04:fd:7d:
                    d5:65:3c:25:4f:03:b2:d9:cb:c6:13:c3:e6:d7:4a:
                    6e:cc:67:4f:c1:2a:68:49:47:e1:94:b4:6e:f2:eb:
                    6a:4f:b7:59:03:b0:96:73:c3:7f:83:77:15:cf:92:
                    30:a6:97:d9:be:3d:9d:15:f8:95:f1:44:0a:38:d8:
                    15:31:64:76:ed:8e:91:86:33:36:c3:dc:a3:f1:61:
                    e8:5b:65:1c:cf:cf:76:c6:a7:3a:76:d9:c0:46:6e:
                    8c:e1:28:ae:79:fa:80:28:03:d3:f5:68:7b:ff:40:
                    68:3a:80:81:e7:89:f3:75:39:3c:eb:7b:8e:6d:c0:
                    96:e8:74:c2:17:80:79:0c:ea:ae:d6:8c:cb:5e:fb:
                    ce:24:b1:f7:ca:ed:e4:b9:c9:3c:d3:79:dd:7b:d6:
                    f9:46:0c:64:11:9e:0c:5d:73:92:e4:79:5b:00:57:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:92:71:AE:C9:02:B9:D4:3B:36:97:05:62:97:49:BC:2C:50:4F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2984541f-4d58-31b5-beab-58cd4ef8404e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:c5:ac:97:17:77:8f:48:39:f7:f9:10:cf:cb:d5:91:fd:
         05:0d:b8:80:16:09:d0:f5:77:de:8f:ba:08:7d:9d:4f:51:5c:
         a9:95:d3:87:97:7e:47:dd:c7:f5:86:f1:d4:48:2e:96:da:80:
         60:d1:bd:33:38:65:17:eb:f9:5e:4e:ab:66:a3:64:61:7c:da:
         be:09:58:90:35:dd:1e:d5:58:c3:10:3f:10:55:e3:e6:6e:c0:
         54:b4:6d:09:de:67:1d:05:49:18:8a:42:d2:01:77:40:fd:00:
         cd:b0:15:87:73:f6:12:ba:98:78:cb:8d:9c:e7:64:27:cb:0d:
         ec:29:6a:94:c3:44:e5:0a:d7:95:79:df:16:1d:2e:0f:1c:b6:
         3f:cd:e9:11:d8:e4:2e:00:0c:c0:f0:82:af:a2:5a:a1:9c:50:
         12:5c:65:8c:5b:23:ae:b9:fd:b4:21:cd:9c:56:67:68:4c:55:
         d6:b0:46:d2:59:b7:75:67:01:b0:3b:93:fe:6a:fe:fa:e5:88:
         d3:3e:01:9c:76:8e:f7:b4:e0:b8:a4:42:4b:7c:a2:43:59:1a:
         ec:a5:fe:65:11:2b:44:8d:7b:f1:24:1e:93:f0:84:62:05:ca:
         94:ff:29:06:d0:d8:09:46:c7:d8:82:12:0c:cd:12:2d:1b:6f:
         19:72:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:51 2025 by rpki-client