Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/84ca0aa1-111c-3095-beea-c98d984555c1.roa
File:                     84ca0aa1-111c-3095-beea-c98d984555c1.roa (raw, json)
Hash identifier:          o4wscHQZX3phjYsFvkxVKbtJ1hkAnS9P1d9e7thDuX0=
Subject key identifier:   A7:01:61:13:B1:93:67:AA:B3:11:A1:AD:C0:8B:57:72:21:23:58:52
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584523DAFA7EAF754D9C7ADB9280
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/84ca0aa1-111c-3095-beea-c98d984555c1.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        2605:dd40:8d00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fa:7e:af:75:4d:9c:7a:db:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=94df2625-c247-4310-b8fa-51b54eccc93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:6e:f5:a2:7c:4a:6c:ba:bc:ab:5f:10:a4:
                    1f:70:95:00:36:ae:b7:05:07:38:d1:34:60:cd:cf:
                    ba:d2:3d:73:91:04:4e:f7:7a:fb:08:93:c5:d9:db:
                    96:cb:e0:07:d8:c9:6d:9f:7c:0e:80:ba:50:3a:05:
                    c2:d1:44:84:c4:81:e1:8b:e3:53:81:d2:46:50:59:
                    ab:63:11:04:73:74:99:46:32:85:c8:41:44:62:44:
                    56:50:3b:fc:77:fe:d3:c2:c9:11:07:e6:ca:15:e4:
                    34:7c:d6:c2:26:5d:d8:22:a5:62:4a:0a:18:ec:25:
                    89:a7:a4:95:d9:72:73:c5:7a:26:b2:0c:d8:4f:75:
                    db:99:3c:62:1f:5f:95:02:6e:0b:5b:de:cf:2c:cd:
                    11:c7:53:e7:e8:1f:f4:ed:9d:2e:55:d5:ea:ae:2f:
                    bc:c0:5b:d6:05:7e:c8:19:88:41:ab:91:cf:9b:3b:
                    bb:71:fd:94:b5:f8:4e:55:91:10:66:1a:72:23:3d:
                    09:a9:c0:91:bb:7d:47:21:75:21:83:dc:5e:b7:31:
                    40:56:2a:b4:e8:c5:6b:82:71:bf:f4:a1:86:84:21:
                    b5:90:05:ef:5a:54:dc:e6:39:e7:c0:3f:5c:22:94:
                    3d:b4:f9:2d:f2:9c:53:59:a4:07:0a:5b:66:13:38:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:61:13:B1:93:67:AA:B3:11:A1:AD:C0:8B:57:72:21:23:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/84ca0aa1-111c-3095-beea-c98d984555c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2b:14:34:55:56:18:41:a3:0f:7f:e4:a2:d3:f0:09:26:92:
         2f:af:b3:4a:fc:7b:fe:56:d3:8c:96:d2:25:10:1c:4c:e3:a4:
         4b:70:88:e1:9e:16:3b:15:35:2c:de:2b:3f:d3:b8:da:69:eb:
         5f:b4:86:36:14:2e:e5:d5:e3:d2:f6:3d:94:ae:c7:be:42:4b:
         6b:7f:63:19:f4:e1:fc:ee:c2:94:c5:1e:43:05:41:41:80:68:
         fd:09:63:28:76:68:c2:28:fd:fa:47:bc:26:f2:b8:33:a4:08:
         05:7b:e2:17:cc:00:32:d8:f1:5e:78:33:79:99:e0:8c:c6:8d:
         4a:87:7d:b9:a9:b9:c1:15:51:ac:33:19:89:2a:d3:9b:db:56:
         da:71:9d:e0:de:be:75:e5:93:2d:0c:da:e3:53:cb:87:50:87:
         be:9a:1c:9c:7d:81:74:20:7c:7d:43:79:8f:dc:0b:67:b9:66:
         db:ca:71:3c:57:74:c7:33:73:44:7c:6e:c0:8e:76:51:58:ec:
         d5:0e:90:1a:c6:e7:b6:3a:e8:8e:ac:30:37:d1:d9:fc:d2:f4:
         4b:e7:b3:d9:ce:b6:28:fd:d9:74:1c:85:22:56:b7:ae:5c:b3:
         5c:55:2c:99:07:7b:30:56:66:cf:b9:aa:6d:9b:97:d8:a3:3b:
         7f:9b:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:30 2024 by rpki-client on console-ams.rpki-client.org