Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa
File:                     45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa (raw, json)
Hash identifier:          8cwexAY+rv/Js8gRzLdhY09PpMJA5yEqhEVpZpxBfaw=
Subject key identifier:   F2:EA:C4:08:B4:11:F3:08:66:05:A2:D0:24:83:37:56:23:30:0C:27
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858457D132C6F0B75B6B744AF1FC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     398549
IP address blocks:        2605:dd40:8208::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2c:6f:0b:75:b6:b7:44:af:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=9a232d60-786e-43d9-aa00-dff1042c3287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:e2:96:10:d8:37:a4:cc:6c:7a:f7:36:fc:
                    22:27:19:fa:35:28:c9:7c:f9:d9:f3:ac:56:07:d8:
                    5b:89:34:9b:8d:fe:1a:4b:6f:84:04:04:11:d9:25:
                    ae:3f:da:9f:01:57:ec:89:14:26:d3:e3:c8:70:c4:
                    18:5c:e5:74:02:d2:63:a2:0d:d8:5a:c3:a1:fe:f2:
                    38:39:d3:11:01:d8:92:54:24:29:d7:10:b8:03:3e:
                    7f:79:13:83:f3:54:d8:a6:21:5e:42:f4:aa:fc:ad:
                    38:95:cc:5a:16:ec:82:56:ab:fc:4c:53:a6:ab:40:
                    ac:06:b7:b0:26:b4:5c:40:30:8c:0a:0c:f6:ce:88:
                    b5:58:0d:58:ff:36:92:26:d5:b7:97:83:de:79:eb:
                    4b:47:5c:4e:3c:52:1f:54:5f:f5:7d:d9:48:d6:43:
                    b4:10:c6:96:6a:19:49:40:9e:d5:d1:e1:ba:e0:10:
                    bc:af:94:3d:62:6a:9b:f5:a4:2a:5f:9e:61:28:90:
                    b6:54:76:c8:94:91:f8:d2:fb:e8:a3:06:65:4c:14:
                    dd:df:c7:a2:d3:9c:63:df:e1:49:f3:d8:be:20:5a:
                    7f:87:48:be:d7:2b:5c:cc:9b:c9:13:1d:88:22:ed:
                    53:7a:3a:8c:bb:a3:7c:79:f9:4e:0a:68:68:e4:e9:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EA:C4:08:B4:11:F3:08:66:05:A2:D0:24:83:37:56:23:30:0C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/45f96e55-cf0b-33c2-b994-cce7bedc3e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8208::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:ca:96:45:3b:23:04:9b:86:a0:02:46:76:8c:6f:19:24:
         75:71:50:f2:ac:e8:a1:a9:6a:f9:ae:50:88:02:2b:30:88:2e:
         a5:0a:6c:fc:1c:5f:cd:b1:2d:38:8f:65:2d:bb:00:f3:3c:02:
         0c:44:65:ec:f8:88:a4:be:17:10:f5:4d:74:70:31:af:24:95:
         71:e3:52:f1:e9:24:18:fd:5f:c1:96:20:9f:f0:d5:17:65:d3:
         61:68:93:e5:78:3e:3d:a7:a9:22:b0:a8:47:b1:1c:49:ab:2b:
         6a:d5:42:4a:42:e9:bb:97:aa:8f:e8:80:f8:95:dc:3d:1d:21:
         b8:42:3a:17:bf:55:15:c0:d1:3d:87:85:2c:7c:5b:97:cf:6c:
         2d:6b:c6:4c:22:76:b1:07:be:78:e2:80:2e:f6:cb:ab:4c:bb:
         a2:42:43:ac:4d:71:f3:2f:3d:0a:3b:36:55:b2:bc:cd:58:2a:
         80:ff:c6:fc:42:ac:58:27:0e:c2:37:1a:f7:89:9b:68:1b:f5:
         f8:73:86:6e:cf:ed:74:70:a9:f5:6c:2b:4c:45:8b:7b:65:ff:
         a3:4a:92:04:54:86:69:3b:37:7d:31:52:ac:f3:ec:63:4b:a4:
         c1:6b:b3:d0:fd:ae:b7:3c:23:d4:a5:64:75:e7:b2:3b:ad:3d:
         74:d5:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 06:50:38 2024 by rpki-client on console-fra.rpki-client.org