Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa
File:                     584ab823-3d75-339d-957f-a33db84341c2.roa (raw, json)
Hash identifier:          uSbc7pam8ePiKHJ6d6p4KwyzcEjOlJFMgLhwG7YV+Eg=
Subject key identifier:   2E:42:6F:87:3D:2D:22:82:14:40:5B:DD:CA:88:43:67:5A:3D:D7:84
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848451582FDC2949A4A1A4EFF80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     212996
IP address blocks:        2605:dd40:8007::/48 maxlen: 48
                          2605:dd40:8008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:82:fd:c2:94:9a:4a:1a:4e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=70cfe137-0784-483e-9627-96e5f21aaf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:2f:8f:de:80:eb:4d:ef:58:72:4c:a4:dd:
                    31:90:d7:a6:4f:c9:10:be:6c:86:e3:e2:30:07:a6:
                    22:7e:3d:c2:01:f7:b7:9c:35:fa:fd:a4:30:4f:be:
                    0f:6f:b7:4c:e0:15:78:a5:2b:01:a0:30:17:04:2e:
                    5b:23:25:60:2f:09:73:f0:35:29:cc:d0:36:d2:21:
                    74:00:1e:9c:b8:34:8e:9e:bf:f1:2b:64:4b:cf:8b:
                    93:25:1f:1f:61:32:0b:4d:69:ed:fe:03:c9:2f:66:
                    e3:e1:64:d6:e4:1d:b1:3d:12:f5:84:27:c7:1b:e8:
                    13:10:99:f3:f7:22:48:0d:48:73:7e:60:56:a6:56:
                    da:69:49:42:29:e8:e7:9c:86:18:60:dc:00:67:88:
                    f7:1b:6f:77:33:cb:a7:5f:c6:61:20:62:2a:30:aa:
                    49:1e:a3:fd:9e:3d:c6:1a:e0:87:6c:1c:53:2c:42:
                    8f:66:60:eb:40:39:16:1b:2e:23:31:a3:60:f2:2e:
                    41:7f:64:8c:c9:da:1c:cd:2b:59:28:e5:6f:2d:d6:
                    c1:3e:ef:34:85:09:bf:e8:90:74:9e:a1:86:27:26:
                    53:d7:92:54:7e:97:1d:f7:44:c1:1d:52:47:aa:fc:
                    30:bb:9a:ad:c7:90:86:39:ed:79:16:f0:5b:4a:00:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:42:6F:87:3D:2D:22:82:14:40:5B:DD:CA:88:43:67:5A:3D:D7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8007::-2605:dd40:8008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:b5:dc:63:66:c8:ce:ad:2d:16:e8:1a:95:29:e5:94:1a:
         ba:94:0d:48:3b:d8:4c:17:02:e3:42:7a:db:29:08:25:b4:0f:
         15:bc:10:4d:8f:a8:91:54:b7:67:27:6d:8a:4e:d2:70:c0:58:
         4c:f9:3f:26:88:8a:c3:72:8e:8c:50:ab:0d:c0:80:e8:88:26:
         fb:76:69:44:46:10:02:23:5b:ce:9a:33:8f:4e:af:a4:2d:b4:
         1e:eb:a5:c9:f9:8d:e6:e7:19:f1:0b:23:5c:cb:ca:7a:38:b7:
         49:5e:2c:df:81:5d:c7:dc:79:1d:66:59:02:b2:98:9b:02:92:
         42:7e:25:0e:49:4f:cc:ef:db:a8:08:f6:e2:f3:71:eb:5d:ab:
         86:84:c1:32:70:35:96:11:2b:07:f2:70:a4:38:d8:c0:1d:38:
         04:6a:2a:30:75:f9:cf:b6:ec:78:56:08:12:55:27:bf:05:3c:
         63:75:ec:2c:75:15:ae:9f:53:54:47:bc:01:2a:0e:c2:76:b7:
         29:31:c7:b6:a7:16:38:78:cc:3c:9f:b8:97:55:89:74:ef:53:
         37:35:00:7e:7f:d3:ed:04:97:3b:a8:8f:ba:f9:d3:94:28:e2:
         1c:31:05:bd:90:8f:af:66:a8:63:ad:3c:58:b5:de:49:dc:92:
         50:93:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:49 2025 by rpki-client