Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa
File:                     5a92c1cb-8171-3746-9840-5294314655b0.roa (raw, json)
Hash identifier:          ET5LGa40HpT98XOlLLY/t3TJpEvbwzcxhiGVWcJYxQM=
Subject key identifier:   C8:79:9A:87:01:71:E2:C5:0E:82:1B:DB:33:F4:0F:61:52:9E:13:B9
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858486C2B15B4663C451DFC664F00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     398549
IP address blocks:        2605:dd40:9030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:15:b4:66:3c:45:1d:fc:66:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=18b149ba-1f2c-496c-a5d5-7860e7fdfc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:3e:f4:50:f7:97:d3:41:05:d3:b6:55:0c:
                    cb:70:b9:75:de:e3:5a:2c:52:29:51:60:cb:56:8a:
                    6d:a8:92:b5:fa:c7:07:49:c3:b8:cf:23:1b:7f:c9:
                    29:e6:41:1d:5e:3a:65:c1:ee:f3:d8:33:01:11:bd:
                    e2:77:c2:a4:8c:8c:b7:13:ca:29:bb:bd:a4:3d:2f:
                    1d:7e:f7:7c:e4:c2:81:9e:e8:82:e8:5c:6b:b9:7e:
                    08:fd:85:9e:af:21:04:35:d4:2b:0b:e7:a7:bf:d7:
                    e3:02:2b:a5:6b:b0:67:8b:7f:1f:42:57:0d:d0:e8:
                    fc:f1:c6:56:d0:b9:31:89:77:a7:94:a3:31:35:d4:
                    f4:23:f5:fe:59:74:a0:e4:28:e7:3e:a3:4f:f8:44:
                    60:d6:a4:68:06:3b:a6:ec:d6:96:a9:c5:b9:17:6d:
                    bd:a9:12:2c:59:8b:86:ce:00:e5:e2:cb:45:5f:54:
                    3d:57:60:a8:62:73:7e:3b:b2:10:ad:5b:1d:a6:7c:
                    56:e0:41:87:09:c3:b6:8a:9c:11:ac:47:96:b3:4a:
                    c2:b3:d6:d7:e7:c8:06:01:39:d9:07:70:bf:f8:6b:
                    7d:19:0b:83:e9:ff:ef:f7:45:eb:0a:cd:4d:f3:90:
                    16:d5:e2:e5:6b:ab:cd:1b:d8:f4:93:e2:de:75:7c:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:79:9A:87:01:71:E2:C5:0E:82:1B:DB:33:F4:0F:61:52:9E:13:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5a92c1cb-8171-3746-9840-5294314655b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:21:92:19:22:05:90:d3:fc:b4:0f:d2:d6:20:fc:69:a8:20:
         a9:53:e1:e5:5d:72:51:c7:bf:48:1b:68:05:1a:12:4e:69:0a:
         e8:8a:73:17:33:9a:a3:f7:72:59:bb:0f:aa:b4:0c:ea:ac:f9:
         17:59:86:61:70:f6:60:a1:67:b5:ed:8d:19:56:69:12:63:89:
         08:cf:c8:07:f4:e2:19:d1:41:d8:d1:16:d4:e7:e1:05:5d:a8:
         6d:bf:b0:67:de:e1:04:fd:d6:fd:ff:4d:a6:93:d3:62:fa:ff:
         26:47:9c:22:cd:d0:1e:01:23:87:52:f6:18:81:3d:60:64:f7:
         9b:3a:43:73:62:60:3e:df:4b:4e:c8:41:37:1d:a4:75:aa:93:
         b0:e2:ee:f1:84:01:0c:02:b5:3a:df:89:cc:26:31:11:b1:22:
         fa:c8:ad:e2:f0:ae:53:92:d3:9d:b1:64:33:57:b4:b7:eb:25:
         69:c7:eb:a8:3d:cd:07:9b:44:11:bb:5e:d2:4b:9f:7a:b1:63:
         f9:f6:3d:b0:88:04:7a:38:5c:d6:79:81:2b:4b:c6:94:77:fe:
         af:e2:0e:09:a8:76:1e:8f:f8:fb:56:4c:9d:66:64:fe:b6:97:
         87:d6:c3:72:49:7f:8c:5f:9b:a3:4b:c1:b5:03:f8:7d:60:70:
         ba:8b:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:39 2025 by rpki-client