Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf 2d0cea4f-94c4-309e-a5a2-a8e62ea62f88.roa
File:                     2d0cea4f-94c4-309e-a5a2-a8e62ea62f88.roa (download)
Hash identifier:          Ce70SXf39gfBgANoBEg/Fa2qSs4hhemr8jGGIa3M3dM=
Subject key identifier:   F2:21:8E:3C:E0:C5:65:85:FC:2B:C1:48:EC:3D:17:3C:67:23:36:AE
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583E898782F5201CC415C79453C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2d0cea4f-94c4-309e-a5a2-a8e62ea62f88.roa
ROA valid until:          Jan 14 05:00:00 2024 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:8880::/44 maxlen: 44
    2: 2605:dd40:8990::/44 maxlen: 44
    3: 2605:dd40:8260::/44 maxlen: 44
    4: 2605:dd40:8f80::/44 maxlen: 44
    5: 2605:dd40:8f00::/44 maxlen: 44
    6: 2605:dd40:8ff0::/44 maxlen: 44
    7: 2605:dd40:8570::/44 maxlen: 44
    8: 2605:dd40:8700::/44 maxlen: 44

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:89:87:82:f5:20:1c:c4:15:c7:94:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul 10 12:00:00 2022 GMT
            Not After : Jan 14 05:00:00 2024 GMT
        Subject: CN=fe8abbc9-6672-4e3a-b89d-3de1b570c438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:8a:8c:c5:61:1d:25:13:47:af:d9:ad:3c:
                    52:50:2e:97:b8:b7:14:55:a4:fa:a2:02:19:1d:71:
                    78:1d:9d:df:24:d4:e9:88:1a:38:00:94:59:6a:bd:
                    a0:c1:6d:c5:1e:d2:61:82:05:30:5b:41:ce:38:06:
                    55:96:0d:a5:5c:13:31:58:da:26:9a:b6:5a:67:0f:
                    c9:f8:a3:66:95:ce:a7:c8:e1:65:94:d2:12:98:18:
                    f9:e2:d8:97:ba:00:01:52:0c:80:67:24:1a:80:31:
                    8d:08:a9:27:f8:82:95:53:aa:f5:ef:ce:9b:93:b9:
                    47:7b:a6:2c:d4:2b:34:c5:0b:46:34:77:32:c7:fa:
                    e3:b1:25:1c:c3:7f:d0:d1:6a:ee:4a:91:90:4c:56:
                    2f:0b:38:e7:c0:46:6d:5f:24:5a:e9:cf:f2:5e:8e:
                    ed:27:49:67:b3:45:6c:09:56:49:c9:70:49:2e:1f:
                    23:76:04:e5:7f:26:89:43:3a:c9:0c:9b:28:f2:23:
                    5d:27:5d:31:ca:df:b2:57:e1:f9:0d:23:b0:fa:b9:
                    2d:18:8a:3d:81:02:1f:b1:42:60:fe:94:f5:91:b1:
                    4e:20:f8:e5:c0:0d:e9:95:e8:57:21:e9:1b:80:f9:
                    13:b1:6c:9e:0c:c9:7f:97:bc:0e:7b:3e:dd:cc:65:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F2:21:8E:3C:E0:C5:65:85:FC:2B:C1:48:EC:3D:17:3C:67:23:36:AE
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/2d0cea4f-94c4-309e-a5a2-a8e62ea62f88.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44
                  2605:dd40:8570::/44
                  2605:dd40:8700::/44
                  2605:dd40:8880::/44
                  2605:dd40:8990::/44
                  2605:dd40:8f00::/44
                  2605:dd40:8f80::/44
                  2605:dd40:8ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:d6:3d:0d:8c:6f:ab:1b:4f:99:3b:c2:1f:17:42:30:36:
         fd:12:ae:7e:37:ce:63:be:7b:01:ff:c1:14:6a:c6:f6:52:f2:
         52:c1:a9:58:aa:22:be:19:47:51:dc:2e:c7:4e:98:fb:7c:7e:
         20:82:24:c9:b4:97:95:cd:8e:8c:79:b1:02:7e:7f:59:bd:ec:
         73:b4:23:f7:3d:23:b5:ad:87:93:d7:42:c6:07:87:3a:d3:07:
         10:6e:0e:40:c2:03:50:35:1a:2e:6b:c0:a5:b8:c9:38:51:2c:
         fa:dc:e8:d4:31:fe:74:eb:a0:cc:2d:30:c9:06:fa:17:b2:2e:
         04:30:f0:c6:19:95:8c:b4:9e:ed:8a:42:f4:95:95:3b:81:bc:
         07:c7:18:53:19:e3:70:67:cb:a0:08:35:a5:57:f0:90:0b:58:
         ae:10:5c:d7:1d:80:17:b2:1b:fe:33:11:96:98:3f:9a:c7:e1:
         ce:38:54:dc:d8:cb:24:c6:3f:dc:e4:b7:82:fa:f1:d0:7a:6f:
         ac:eb:9b:80:df:22:50:76:91:c6:e8:51:41:62:ca:61:07:72:
         08:d6:30:55:06:9f:81:7d:e4:67:69:ab:76:9d:ff:63:1c:83:
         bd:bc:70:28:7e:94:67:5a:74:08:7b:2c:b4:ca:1e:b5:78:16:
         37:40:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:00:33 2022 by rpki-client.