Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa
File:                     4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa (raw, json)
Hash identifier:          vVYC3IwWssHX7qKeHEUp4nZ4IMvMAB7pBttjS0e8xYE=
Subject key identifier:   83:39:AF:F0:6C:C2:E1:AF:CF:E2:5A:B1:5B:E5:FA:64:5C:97:46:4C
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584919417A693B45373C77207940
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7a:69:3b:45:37:3c:77:20:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=4e9cb607-69d8-47f0-9929-372ecb13f695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:ce:c0:db:87:37:98:1c:43:32:ae:f1:87:
                    58:2d:9b:a0:f9:5e:e7:45:97:88:37:dc:f1:85:4f:
                    27:72:a1:b0:9d:72:ba:ed:32:fd:61:53:9b:05:84:
                    da:5a:df:c4:b9:9b:fe:e7:49:cf:04:30:90:72:d7:
                    c5:c1:84:68:51:4e:2c:86:80:a7:08:19:67:4a:aa:
                    86:c9:0e:63:87:a8:2f:e6:a2:02:3c:50:04:04:6a:
                    02:99:cc:14:3b:7d:26:3c:0b:a4:01:5f:40:15:06:
                    58:39:32:89:87:a3:79:8c:e6:77:73:48:a5:c5:6c:
                    c0:d1:c3:95:ba:9b:d2:69:d3:d3:98:c6:26:8b:fd:
                    9f:b3:b7:a2:57:4a:59:98:b8:d9:28:00:1f:c2:ed:
                    90:aa:1d:4f:73:8c:02:ee:64:25:65:f3:48:bf:a7:
                    15:2f:eb:a4:f6:a8:2b:75:33:47:4a:f7:80:c5:f0:
                    fb:cf:f8:ea:d7:c6:81:c3:89:1d:ab:ee:b2:f6:63:
                    92:c5:a3:0b:bd:ed:f6:b0:a2:f6:fe:13:e2:6f:39:
                    ae:a4:16:f2:fa:56:5b:81:f0:ca:ba:ef:7f:f2:4f:
                    3a:03:4e:b7:bc:74:be:06:42:9c:cd:75:dd:3a:d2:
                    61:01:17:b7:0b:07:03:5e:1e:99:70:a2:3b:02:cc:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:39:AF:F0:6C:C2:E1:AF:CF:E2:5A:B1:5B:E5:FA:64:5C:97:46:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:11:a3:7d:1f:e6:f4:e6:a6:e3:f6:4e:a4:4b:ff:18:17:13:
         23:d0:7a:45:de:28:eb:a8:e3:be:d4:d7:42:c7:f2:5f:fe:24:
         7e:3e:2f:f8:eb:dc:40:51:19:a3:c1:62:cb:f7:86:27:bb:9c:
         17:5e:ff:24:db:49:cb:41:dd:96:02:27:4c:29:c6:fd:d9:c3:
         16:82:d8:a3:1b:0d:99:70:b4:94:1e:a5:1b:e5:77:82:75:52:
         ce:ba:49:c0:c2:42:32:21:c0:d0:7f:53:3c:b4:55:16:8e:a0:
         49:c4:75:e3:ec:c1:77:98:01:d4:c2:e9:c1:c8:38:8f:76:20:
         d7:c9:e8:13:ac:c4:62:e0:74:4d:4e:fe:07:23:e1:2d:20:9e:
         a0:b3:0d:66:c8:7b:b5:7c:de:e1:7d:d1:0a:7f:d0:29:24:6e:
         28:43:90:05:d4:a6:3e:56:bd:6b:95:56:c5:bc:9c:e0:d9:49:
         6a:a7:6f:40:69:31:34:73:36:cd:0a:5e:1a:59:4a:18:c4:18:
         a1:49:7f:8b:05:cb:bd:ba:53:67:f4:60:77:73:08:6f:51:9f:
         c6:5d:0d:cc:db:5b:e3:c1:5d:1d:05:07:ec:a6:b4:e5:0d:dc:
         4c:28:3b:03:73:51:89:09:40:4e:05:49:9f:b7:82:07:99:db:
         d9:61:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:58:01 2025 by rpki-client