Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
File:                     98cce9a6-cadc-36fd-9326-cc765ef424a0.roa (raw, json)
Hash identifier:          b4ylECLzp5LF8YahMueuwLYNfvBkqzxkpqfumLjY/HQ=
Subject key identifier:   A8:5D:AE:F0:6D:14:ED:6B:F2:A9:A3:23:5B:1C:30:94:44:FC:AB:BB
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844F2FFFBFB0684E97F77EDFA00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     398549
IP address blocks:        2605:dd40:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:fb:fb:06:84:e9:7f:77:ed:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=c04c7dff-2efa-41c3-9d5d-51cc1639b03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:0c:83:14:ec:d7:b6:a6:b7:fe:a4:53:c6:
                    84:f1:c4:20:56:5a:e8:d0:14:c3:cf:9d:e4:11:d8:
                    e0:30:7c:8b:84:98:2f:81:68:7d:1a:39:60:dc:bd:
                    a4:c6:fc:91:ed:49:57:32:31:a0:37:62:16:37:48:
                    f4:7f:4a:13:9d:16:50:c0:15:ae:87:57:cd:68:fb:
                    3e:42:ce:66:50:82:57:f5:4a:f5:bf:75:1e:a0:2c:
                    b9:93:8e:88:91:22:7c:c8:b8:7a:a5:a0:f9:a8:09:
                    d5:6a:8b:26:b4:e0:01:6c:a5:b7:70:2e:21:e1:25:
                    ba:59:21:25:f5:a7:18:0d:b4:cc:b2:fb:db:8c:73:
                    16:80:27:7c:29:82:a7:9a:4a:d8:82:02:c7:06:10:
                    8b:49:34:b8:bf:73:5b:54:ea:0f:b2:6f:3e:11:2c:
                    02:04:42:75:9d:33:f4:6e:89:0a:a2:b7:06:99:38:
                    18:f1:19:e5:b3:68:94:1a:88:82:46:e9:78:97:c9:
                    89:03:08:8a:98:16:b4:46:3c:b0:cd:ed:77:5a:cb:
                    87:fb:e1:2d:d6:a4:58:62:ad:38:60:29:c1:4e:0b:
                    40:c3:ff:0d:84:54:55:0b:56:56:68:61:28:00:fc:
                    2f:df:74:71:e0:4c:a4:6b:a6:0f:19:5b:e7:76:8a:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:AE:F0:6D:14:ED:6B:F2:A9:A3:23:5B:1C:30:94:44:FC:AB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/98cce9a6-cadc-36fd-9326-cc765ef424a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:c5:9a:ff:ea:00:da:c2:66:34:5d:21:2f:c3:4c:73:b3:
         59:cf:9a:29:85:d0:3c:c7:2b:eb:2c:09:e7:c0:a5:bb:f7:8f:
         93:af:30:5e:71:bb:9b:d9:4e:99:e3:52:d4:47:d8:74:d1:b1:
         24:e4:a8:3b:3d:f6:68:b3:8c:b8:f5:57:97:d9:49:5a:d5:fe:
         fb:27:44:b6:82:39:6f:42:50:58:52:b8:7f:27:ea:ce:38:a4:
         ac:bc:1e:5a:68:27:29:4c:11:c7:b3:2a:27:c7:58:1d:98:ce:
         e9:c4:10:f9:77:59:fd:77:48:b1:e5:d9:0b:f5:87:38:db:7c:
         e6:69:a8:86:54:4d:fb:5b:b1:ed:4f:00:27:81:1a:44:16:1d:
         c8:b5:97:2c:ae:f0:f9:14:71:f5:b3:3d:56:08:ab:13:1d:03:
         fe:5d:e8:b7:c6:77:f0:21:c3:c2:d1:84:8b:0c:0d:61:41:7c:
         04:71:48:78:48:30:00:9b:07:4b:24:13:12:a7:6d:6b:f8:34:
         2d:99:29:24:df:e9:9f:bc:bc:26:b3:ec:9f:54:05:1f:27:5e:
         51:85:ac:94:5c:24:71:f2:eb:1d:56:5d:ca:de:bb:33:44:c5:
         43:d0:0e:ed:0e:9e:38:f6:fb:f6:a5:de:bc:1f:7c:87:dd:eb:
         23:0c:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:11:29 2024 by rpki-client on console-fra.rpki-client.org