Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7379c347-ce73-3883-b99d-a21f3db6c59c.roa
File:                     7379c347-ce73-3883-b99d-a21f3db6c59c.roa (raw, json)
Hash identifier:          sN7k3zMW76j5F8+wNVMnVgfhNwg4uJ7pxn/7pmxwSSg=
Subject key identifier:   12:D6:86:34:B6:68:EA:23:AB:EC:0E:A1:76:21:CA:02:1A:7D:1E:5A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848222FDE3EA1B56CA78388F800
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7379c347-ce73-3883-b99d-a21f3db6c59c.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:8f80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:de:3e:a1:b5:6c:a7:83:88:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=5d13d2a0-c72e-4666-a02c-d79c2f64f6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:e8:da:37:bd:2f:ce:a9:c6:c0:08:3d:70:
                    b3:bb:8f:b5:50:b3:34:55:98:a9:ab:79:e7:67:dd:
                    0e:a0:ad:46:c3:9e:fa:dc:ad:13:60:07:46:ab:99:
                    a4:6b:f0:6e:1c:57:ed:b0:db:11:9b:f0:48:3e:9f:
                    cb:61:c7:5d:bb:5e:51:e4:d3:a2:a3:c2:f0:99:6e:
                    7d:88:5e:c0:13:e1:ab:50:1b:12:bd:8f:7e:80:3f:
                    50:a5:2e:0c:3f:fc:3e:f8:33:99:b8:96:8b:ed:d2:
                    d8:ee:95:38:ec:7b:8a:a4:aa:9e:b0:b4:c8:c3:da:
                    9d:5c:c9:e9:68:bb:da:4a:ab:62:95:8e:fb:6b:e0:
                    10:fd:a3:8c:92:42:6a:7b:bb:af:96:21:6d:d3:df:
                    09:ec:3e:c5:c1:83:8f:68:6d:3f:3e:11:12:3d:89:
                    d4:46:b2:eb:21:6d:69:08:dd:7b:5a:96:8d:7a:c1:
                    b9:0e:68:af:e9:14:fb:00:40:09:d1:26:b0:83:28:
                    24:21:cc:b9:14:d6:99:34:ec:2a:12:c9:bd:30:31:
                    17:af:94:b6:c2:46:e3:45:83:4d:2a:66:38:ab:31:
                    4c:6a:f0:d9:92:ae:6c:6c:ea:6b:b9:56:ac:89:57:
                    25:9e:96:cf:46:cf:c5:4f:73:41:7f:af:df:07:41:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:86:34:B6:68:EA:23:AB:EC:0E:A1:76:21:CA:02:1A:7D:1E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7379c347-ce73-3883-b99d-a21f3db6c59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:ab:fb:0f:78:6d:35:59:85:c2:48:f6:21:49:da:25:aa:
         89:c4:c1:d6:67:f5:36:ca:41:28:49:67:a8:dc:48:59:5c:ee:
         4d:f7:d4:91:a3:fe:9b:9e:a7:4a:df:a2:fb:c7:5c:8c:88:19:
         d7:b7:bf:2b:2e:c3:5c:c2:bf:c3:bd:85:55:78:c5:77:29:49:
         f6:c0:65:a2:74:28:79:b0:d6:e1:dc:b8:8e:77:83:d4:b0:13:
         36:fa:c3:ec:3a:5d:f2:0f:3a:ef:48:8d:39:8b:e7:a8:3d:86:
         96:22:05:a6:34:fb:7e:06:da:cb:5c:41:e4:b2:c6:5c:3d:e1:
         70:1c:20:0c:59:96:a8:9e:82:f9:37:77:da:d6:47:86:90:57:
         15:70:53:cb:db:04:29:c2:28:64:b7:4f:bb:54:a4:57:3d:36:
         26:e2:1e:b1:5b:5f:b6:ab:d7:5a:49:ed:4b:91:d6:6d:42:82:
         c1:35:0d:1d:9f:fb:31:ac:38:af:17:ea:92:98:5f:52:07:04:
         8f:77:33:ac:3a:4b:da:a4:7d:f7:e3:33:40:f5:8c:a2:47:ed:
         b6:e8:ed:98:db:10:3d:7f:dc:0f:39:f7:a5:8d:87:fe:7a:80:
         17:ae:9d:05:4b:f3:61:2d:8c:b8:28:fb:0a:4c:49:5b:16:e7:
         12:62:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:55 2025 by rpki-client