Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf 4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa
File:                     4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa (download)
Hash identifier:          NitGjKArue+M26yK2LvbefwTxG9VVBdxZw1zyFO/ViE=
Subject key identifier:   F6:BA:8D:29:C1:6E:9A:07:06:93:A3:F4:43:65:32:EE:7D:6E:5B:50
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583E1A84C1670BC57FF23D054A00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa
ROA valid until:          Nov 04 05:00:00 2024 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:8700::/44 maxlen: 44

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1a:84:c1:67:0b:c5:7f:f2:3d:05:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 31 12:00:00 2022 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=4c91d619-7b62-46ea-b263-348df83b7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1a:50:fc:cd:db:75:e5:b1:46:a1:22:93:3f:
                    c5:b3:d7:b0:f2:f0:de:08:49:87:0e:d9:6b:e5:66:
                    86:ef:3f:98:46:92:9e:dd:63:c1:02:1b:9c:96:f4:
                    65:be:04:64:1a:cc:3a:1d:2e:37:4f:62:ac:55:4a:
                    40:65:93:d5:d8:ac:40:ac:4e:c2:a3:c6:06:d8:f6:
                    ac:d4:cb:fe:c0:f2:d4:13:50:6d:59:9d:51:57:ec:
                    80:2c:04:cd:2d:4f:aa:db:7c:04:ef:cf:12:26:a8:
                    0d:57:2d:7c:9e:f5:a6:03:08:c8:38:3f:79:6d:80:
                    77:64:90:71:57:37:4f:13:a6:ce:4b:7a:9c:97:28:
                    d2:57:22:71:9c:13:97:46:6d:a9:7e:d9:26:b0:d6:
                    b3:b9:97:b4:99:da:0e:42:21:1b:17:80:65:bb:1b:
                    e1:5c:9b:3e:1c:2b:99:cb:e4:93:b2:b7:98:fe:9f:
                    c8:e3:f5:cc:f9:0f:ab:cd:68:fc:67:df:79:c2:37:
                    e0:3a:8e:dc:82:f4:94:10:d9:b2:ab:79:25:ab:84:
                    1c:9e:fb:7e:2e:2f:a5:d1:0d:9b:a6:15:f6:0c:97:
                    66:1a:0b:c8:29:82:7f:d8:4f:98:0b:08:0b:d3:68:
                    51:6b:bd:2b:62:4e:86:09:50:0d:d7:69:d2:3a:d4:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F6:BA:8D:29:C1:6E:9A:07:06:93:A3:F4:43:65:32:EE:7D:6E:5B:50
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:89:df:21:f3:60:f7:ed:8e:65:4a:a0:5c:29:f0:31:34:46:
         e9:7a:32:ea:1e:1e:9d:3b:b4:f1:df:88:ca:8f:0e:83:dd:95:
         64:79:fc:b3:60:b8:65:aa:5f:d5:6a:f3:08:6b:56:56:4e:d7:
         43:59:ef:dc:21:d5:34:c7:82:db:dc:93:21:5b:7a:28:d9:4b:
         61:25:2e:30:d5:7e:6a:63:f9:da:db:7e:d7:5b:9d:bc:65:d7:
         3e:1f:5a:aa:b3:d8:34:e3:4b:80:31:20:ff:82:fa:ba:2b:eb:
         fa:9f:6a:9e:09:88:44:35:64:76:d4:de:cf:86:9b:b3:0c:e7:
         be:91:a5:a9:53:00:9f:66:37:52:79:98:83:5a:c0:88:0b:cd:
         6b:9b:9f:78:29:8f:3e:e4:eb:f7:d2:c1:9e:88:74:0b:4d:e5:
         86:84:d9:07:ec:23:3e:4b:d9:60:63:ed:ec:46:8f:6d:e2:23:
         ae:0b:85:4a:dd:93:4b:75:ea:59:64:51:18:78:84:72:d0:36:
         bd:31:73:67:01:56:e3:ca:5d:d2:58:b4:69:00:f2:9a:27:60:
         df:37:74:41:96:fc:18:35:2b:fb:12:90:ee:7a:07:ab:e2:2e:
         a9:2a:30:05:a2:f9:7a:f1:49:29:69:60:f6:9b:60:5e:37:5f:
         b2:0b:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:52:01 2022 by rpki-client.