Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
File:                     5be2e925-6eeb-349e-ad3e-ab3178d20506.roa (raw, json)
Hash identifier:          UnJW99bc56EUPyMC0VNh/P4+BTLcUuPP/kB/md+ZO1o=
Subject key identifier:   D3:FC:FD:1A:FF:7C:7E:5F:4A:B9:BB:AF:97:C8:A5:16:95:B6:7A:CC
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285847C34489323F4475750E8EB420
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     398549
IP address blocks:        2605:dd40:8333::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:89:32:3f:44:75:75:0e:8e:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=b6145b97-73f5-42e8-9178-8c54ff543230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:98:46:8d:1f:de:96:16:9e:90:f3:b3:8a:
                    e3:43:bf:f1:a5:fe:73:e5:53:6c:0d:78:c0:e0:41:
                    33:e4:91:86:90:50:b5:1d:13:95:41:22:f9:c2:a6:
                    1f:ab:d2:ac:db:de:0d:e8:64:12:d1:b0:42:52:0d:
                    b1:51:62:fe:9f:8f:e4:b8:50:a1:c9:9a:2f:08:a1:
                    d8:5a:55:45:65:35:d8:72:cb:8f:6d:1a:8d:a0:ee:
                    ba:4d:b6:d3:24:d7:9f:84:d9:3b:67:10:09:28:8a:
                    06:d1:08:ab:14:18:7b:d7:e7:20:ec:a1:83:2d:de:
                    bc:00:32:72:a4:14:f4:59:2c:f4:63:e4:35:bf:0e:
                    fb:03:be:a0:15:8d:3c:70:75:71:89:ae:8f:3e:e1:
                    32:76:67:c0:2a:e3:c8:48:18:20:09:1b:c2:99:30:
                    db:8e:16:0a:43:a0:39:c1:9a:f7:53:91:f2:60:c8:
                    c8:79:8c:53:40:da:e3:31:96:5d:25:84:81:d0:77:
                    17:6c:31:e2:6d:74:21:69:48:ad:a1:9f:76:3b:0f:
                    58:d1:f9:ff:01:75:c9:93:3d:2a:f2:57:d0:04:f1:
                    56:29:2e:a5:e5:33:7f:e2:8d:bd:97:c5:00:d7:e0:
                    5d:f2:2e:ed:75:8e:2a:9f:64:73:d1:dd:17:85:36:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:FD:1A:FF:7C:7E:5F:4A:B9:BB:AF:97:C8:A5:16:95:B6:7A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:5c:27:5b:2b:7a:b5:1d:d8:d0:85:ed:d0:e4:15:84:40:
         96:f1:8b:44:83:bf:9b:6f:2a:7d:8b:eb:e2:fa:d7:0c:69:2d:
         ab:43:d9:8e:8a:17:63:07:a1:11:7a:31:a7:54:fd:9d:5a:9b:
         6a:58:c6:c0:54:f3:33:5e:74:f7:6b:5d:57:f1:c5:95:a5:f1:
         71:6c:16:fb:7a:e0:d7:5e:e5:ad:08:60:30:7d:5a:40:08:df:
         c7:8e:ad:fa:71:0a:7f:4e:51:88:2d:21:2e:c9:b1:86:13:3c:
         cc:ee:7c:5d:81:16:ae:df:7e:0f:12:9f:a4:06:76:d2:d1:76:
         e9:be:32:e5:45:f4:47:f3:35:b9:f9:be:89:af:60:d8:68:b3:
         74:59:ad:3a:8e:87:e9:05:91:ea:50:f5:ed:f7:94:6a:0d:8e:
         5a:51:1c:cb:da:6d:26:94:a8:32:81:07:aa:05:d3:b2:68:c2:
         a9:23:bf:5d:84:3f:f9:19:95:50:59:21:ef:94:27:b9:f8:55:
         cb:6f:c5:5e:1b:3f:c0:9f:43:92:f1:a5:10:91:8b:55:f5:2d:
         3e:42:03:63:54:8f:43:59:ac:3a:0d:46:7a:7e:f5:56:0f:b1:
         e6:8b:ba:e7:ae:d8:34:4d:e1:f3:c5:dd:dd:72:3e:a4:63:b1:
         1b:1e:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:54 2024 by rpki-client on console-fra.rpki-client.org