Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa
File:                     7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa (raw, json)
Hash identifier:          YblVmK6XV9DlhMWpMYmlxK1bFp86OEW7Lc8ak7IMeGc=
Subject key identifier:   15:68:74:21:8C:88:D9:69:F3:B8:4A:F0:80:9D:1F:57:4B:D9:66:0E
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844F5CAAACCFC55C968D1DD4480
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     398549
IP address blocks:        2605:dd40:9006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:aa:cc:fc:55:c9:68:d1:dd:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=de61d1e4-0210-4b17-96f7-b7e9d8c26bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:4d:88:87:f0:7b:36:9b:5d:ab:62:a5:eb:
                    d9:32:cc:7b:9b:1b:7a:16:ce:6d:21:3f:30:75:d9:
                    66:31:ea:66:d5:8d:7a:6a:ae:c8:96:45:1c:de:9f:
                    b7:41:b5:79:bb:11:94:79:c3:58:3b:4e:b9:95:bb:
                    bf:75:0b:03:f1:75:bc:42:3e:50:91:86:6b:0c:a4:
                    4d:30:3e:8d:ce:33:e0:0b:5f:55:1a:55:41:4b:39:
                    ab:c5:f9:c4:ba:0f:f1:0d:89:d3:c5:dd:f5:c5:8d:
                    a6:1a:af:c9:0f:c5:8d:a0:ee:dc:8b:e2:42:a1:90:
                    ca:8b:3f:a1:d6:4f:9a:46:21:cb:08:34:22:a2:fb:
                    89:b5:94:f8:bf:b1:d6:7f:87:3b:dd:e8:5f:01:67:
                    81:0b:4b:e9:a6:0b:f4:24:df:48:ee:16:73:90:f6:
                    a2:97:7c:ad:6d:d8:23:a1:12:d5:eb:ef:52:bf:3a:
                    bc:f3:5a:e4:15:f9:34:6d:ec:1a:27:1a:a9:63:55:
                    70:7d:d5:27:9c:2d:98:a7:92:ae:88:f9:e2:a0:0f:
                    49:27:89:70:6c:fb:dc:82:c2:94:39:97:14:92:a8:
                    3f:08:ef:7c:40:f5:21:0b:91:e2:91:6e:24:86:a2:
                    3b:d5:0b:25:58:8c:78:a0:25:eb:22:4f:71:19:f4:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:74:21:8C:88:D9:69:F3:B8:4A:F0:80:9D:1F:57:4B:D9:66:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:47:6c:ce:64:f5:98:62:0b:b8:1b:1f:23:43:40:48:14:3b:
         8d:a2:03:f0:91:1c:8c:f5:64:f9:95:de:f2:4d:84:e0:7d:ce:
         51:cc:c3:80:df:e6:36:87:54:db:c2:26:0d:1d:95:1d:43:d7:
         63:e5:d8:97:0e:fd:5b:b5:1b:7c:97:70:8e:c4:20:a2:02:44:
         bf:39:72:7c:64:72:a1:9b:b6:2c:ff:79:fc:d5:e5:07:f0:3a:
         74:52:2c:2b:63:ea:9e:7e:99:70:20:08:d6:c3:ed:5c:b0:1a:
         d7:37:dc:1a:1c:1f:56:b7:c5:8d:27:7b:f8:b7:97:ef:77:23:
         50:c4:35:6a:84:43:81:26:9c:96:fe:e9:b1:a0:f1:cb:26:15:
         de:a5:eb:fc:76:2c:c5:cf:73:2c:6d:5a:0b:4b:88:a3:13:d1:
         27:2b:c6:76:07:ca:cb:6b:03:de:37:70:86:f2:61:3e:75:b1:
         f5:a5:8d:73:60:8b:65:a6:04:64:d3:3a:af:54:c5:93:e2:b5:
         57:98:48:63:fd:0b:9c:05:79:0e:e2:60:59:4d:73:81:61:fc:
         49:8f:b0:01:d6:b8:1e:8c:41:92:46:1a:f1:61:f4:36:b8:05:
         e3:8e:27:35:94:59:61:20:0e:69:85:29:25:87:71:b8:95:7d:
         76:41:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:30 2024 by rpki-client on console-fra.rpki-client.org