Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/31f1b889-1be5-3f2a-b43b-c88274639da3.roa
File:                     31f1b889-1be5-3f2a-b43b-c88274639da3.roa (raw, json)
Hash identifier:          Uc9w30b6N1ztXXKGHKC9CxT9ILAqs6mMBaRVd3fDxxY=
Subject key identifier:   F0:71:39:77:CA:2F:8E:20:E4:CA:77:DE:3A:61:E3:25:26:8E:CC:2F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858456BC0F39C03A9870EF55E3080
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/31f1b889-1be5-3f2a-b43b-c88274639da3.roa
Signing time:             Wed 03 Apr 2024 08:06:20 +0000
ROA not before:           Wed 03 Apr 2024 08:06:20 +0000
ROA not after:            Tue 02 Jul 2024 08:06:20 +0000
asID:                     216321
IP address blocks:        2605:dd40:2800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6b:c0:f3:9c:03:a9:87:0e:f5:5e:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr  3 08:06:20 2024 GMT
            Not After : Jul  2 08:06:20 2024 GMT
        Subject: CN=d75a2780-b3b0-4145-9f6f-2bed75cf6946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:90:84:db:58:f1:f0:61:3c:f1:d6:b5:41:
                    a0:98:ce:d2:f7:1e:8e:70:2e:6b:16:43:55:f3:1a:
                    85:1c:ae:1f:8f:de:86:11:44:f9:22:7b:59:e3:c2:
                    d5:21:66:92:39:3f:c8:08:e0:a6:ab:f9:e5:27:7e:
                    0e:e7:1e:b6:7b:b5:b6:32:cf:58:e5:e8:9a:fa:7a:
                    7d:e9:91:1a:0b:8f:eb:7f:cd:55:9b:d1:72:73:f9:
                    6e:ca:5a:6a:17:ce:67:75:0f:89:c4:1d:2a:b7:7c:
                    fd:0a:83:57:38:bd:21:f2:ae:37:6a:95:d9:c6:1a:
                    cd:84:db:82:c6:77:9d:8a:8f:8e:a8:c2:dc:a7:cd:
                    e1:63:55:b6:cd:9d:ec:e8:d3:0f:c0:ca:9f:6d:a6:
                    b9:5f:b3:97:a7:5e:03:07:45:6f:ca:87:fd:e1:f8:
                    16:7c:83:0b:29:a5:4b:d2:87:4c:7b:7a:21:8e:1d:
                    5c:cd:a6:cf:74:4c:50:fb:8b:cc:6a:20:52:4c:2a:
                    03:1c:7b:e3:ed:f4:4d:23:cc:b0:f7:7c:7c:38:1c:
                    56:f9:f0:2d:50:2b:1d:c3:96:2c:c3:d2:62:d3:ef:
                    05:bf:5e:1c:df:3c:8f:f6:51:12:a1:cb:cb:1d:e2:
                    7c:16:ee:41:43:4b:ca:9b:79:d9:1e:be:3f:40:dc:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:71:39:77:CA:2F:8E:20:E4:CA:77:DE:3A:61:E3:25:26:8E:CC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/31f1b889-1be5-3f2a-b43b-c88274639da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:63:b7:c9:af:8e:d8:4b:9a:49:cd:0e:bc:f4:b6:66:19:
         ca:8f:4b:e1:36:ba:e9:5e:20:32:d1:29:42:7e:01:a0:bd:ce:
         67:31:7c:b4:50:f1:e1:70:e8:15:0d:d4:1a:4d:24:b3:43:33:
         27:e6:95:ba:a6:d1:42:5a:b7:e0:e1:74:7a:84:b6:12:f3:28:
         16:1b:4e:66:b1:23:64:14:6c:dc:8d:24:f5:0e:fe:2d:ca:bd:
         b6:52:f3:f4:8a:b4:58:0d:b2:56:5f:ff:77:52:c1:ff:26:2e:
         f1:a2:0a:28:a8:ad:69:3a:fb:e5:b6:ad:86:77:6d:e4:13:30:
         61:5b:8e:61:3d:39:84:42:6f:fe:8e:30:17:7f:31:e6:12:cc:
         57:ca:2d:f7:c4:f4:f1:1d:f8:f6:7d:0d:0b:d3:60:33:cb:07:
         bb:36:42:e9:54:09:c9:af:0f:24:0f:55:19:d4:0c:ec:1e:b0:
         84:c9:34:dc:da:fa:76:eb:cf:57:d7:25:90:84:1f:87:75:30:
         ea:30:c0:b8:81:8e:f4:5d:36:07:b2:24:58:02:ec:07:82:24:
         b6:1b:73:84:83:41:61:07:33:98:7b:49:e5:f4:14:80:80:17:
         92:fc:b4:c7:b6:c9:2c:16:e3:b0:ee:34:07:f3:d0:9e:06:93:
         86:bf:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:51:25 2024 by rpki-client on console-fra.rpki-client.org