Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
File:                     6d411e6e-e32c-387b-b928-9a25b67f2285.roa (raw, json)
Hash identifier:          d2YR+eJEpiRfO4I07z44H2Anya52qyfHSbSpAEoqjLw=
Subject key identifier:   EC:F0:35:0D:77:EB:20:43:C3:CD:4D:14:11:43:00:40:4C:75:92:4B
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584795168AD9176CC7D7A952B600
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     212996
IP address blocks:        2605:dd40:8009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8a:d9:17:6c:c7:d7:a9:52:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=f03f5ed2-3ca8-4c96-89e5-16c5162c2ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:cb:65:24:50:42:ae:7f:31:cd:c6:d1:2a:
                    67:16:21:6c:d6:9e:67:1d:58:39:0c:10:d3:94:2e:
                    ad:dc:66:18:80:c1:d7:ae:4f:ea:35:9c:aa:8e:01:
                    49:ad:d5:b0:c1:d4:1d:3c:b8:6a:08:06:a0:cc:35:
                    8d:d1:4a:c9:31:81:69:db:cf:35:6b:f3:e4:d3:d2:
                    a1:f0:cb:c8:a6:e7:ab:8f:7a:ad:b0:d6:01:1f:9a:
                    59:62:a9:d6:0c:e4:4a:27:8b:37:4d:af:a7:c2:2b:
                    30:16:e2:42:4f:e6:cc:d3:99:f0:c0:60:98:a6:d3:
                    7d:68:20:db:9e:cf:11:80:be:f1:2b:4a:32:25:5b:
                    e5:4e:26:4e:1a:ad:75:e1:f2:e9:9e:89:36:5e:fd:
                    1e:cc:11:25:e8:43:dd:9f:00:3f:81:44:31:45:50:
                    a9:c3:7d:ac:51:fd:8a:2a:8d:1a:c1:bd:03:ad:bf:
                    f2:94:8e:31:2d:48:f6:b2:8b:82:0a:8c:02:f3:21:
                    df:79:8b:cd:ca:f5:f0:0a:ac:06:f4:65:a8:2d:4a:
                    b8:4a:ea:f3:14:2a:f1:41:c7:1f:25:59:3d:b8:da:
                    ae:88:18:01:a6:22:cb:cf:18:04:c7:fb:96:db:89:
                    44:09:50:80:2d:0f:3f:f5:09:33:d9:fa:bf:da:64:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:35:0D:77:EB:20:43:C3:CD:4D:14:11:43:00:40:4C:75:92:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1f:47:08:c5:3b:9a:57:64:69:83:6c:99:e8:40:05:1b:9e:
         f0:ec:f9:13:e0:40:c9:1f:f8:32:c3:fe:04:a4:e0:a0:36:95:
         cf:6b:3d:f9:68:3a:c2:ec:ef:5a:f8:f0:aa:76:c5:3c:81:54:
         66:a4:79:69:b7:12:7f:b9:1e:77:24:b9:ba:06:41:c5:4d:b8:
         c1:43:66:67:13:9e:23:bc:fc:4a:ef:59:f6:3c:a7:4b:98:43:
         7c:9f:f1:3f:19:b8:0f:33:c8:55:8e:6b:3c:07:db:e2:cf:36:
         71:0e:ab:d2:c1:7c:2d:25:c1:08:62:44:02:01:6e:72:21:67:
         21:30:b7:58:01:ea:99:89:df:04:9e:89:35:54:03:c8:a0:49:
         7c:c4:5f:b0:e4:c3:4b:d0:94:d4:2e:42:8d:b6:94:ad:67:70:
         22:ca:8f:87:e8:22:82:77:6e:0c:03:dc:30:2f:4a:ae:ff:07:
         9b:1b:4f:e6:81:bd:10:dc:26:da:76:08:4f:49:40:1b:a5:78:
         53:b6:00:a9:97:7d:80:d7:87:c4:cf:d3:3c:c0:b4:52:b1:39:
         74:12:fd:72:a1:ff:db:72:2e:55:1f:da:da:57:48:76:9b:f8:
         55:13:49:f5:80:62:8b:94:75:69:a0:e9:01:9a:f9:29:97:04:
         80:0f:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:03 2024 by rpki-client on console-fra.rpki-client.org