Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9aef17e0-7d27-307b-a21c-3b9cc16c306b.roa
File:                     9aef17e0-7d27-307b-a21c-3b9cc16c306b.roa (raw, json)
Hash identifier:          LI0yZfTKoVv6YD1TzoSVxFqmOcBRxSp/zZvcvLsluwk=
Subject key identifier:   2A:62:B8:6B:A2:7C:E0:64:EF:DE:CB:60:EB:A4:F2:33:FA:8D:17:EE
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F432858485E35B779A0CAB17DCEC10700
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9aef17e0-7d27-307b-a21c-3b9cc16c306b.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     398549
IP address blocks:        2605:dd40:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b7:79:a0:ca:b1:7d:ce:c1:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=3702c9e9-55ae-4324-8d86-ed1f8774698a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:f5:f8:4f:7e:74:17:ea:72:c3:52:d7:92:
                    fb:4f:65:8a:5a:e4:14:15:f7:88:3c:09:31:93:0e:
                    73:29:7f:cb:fb:d0:cc:37:0d:d4:cf:25:0b:9a:a5:
                    ff:34:e4:5d:fe:f0:06:37:44:57:7f:ee:6f:e9:19:
                    a7:91:85:25:b0:b5:20:14:33:fb:85:e7:5d:8c:47:
                    e5:e7:84:29:bd:0c:37:16:e7:80:6a:00:a4:b9:ab:
                    e0:0f:01:29:18:43:99:68:f7:aa:b3:ef:9a:d6:d4:
                    01:e8:77:cf:6e:e4:fe:1c:bf:8e:83:36:79:7f:59:
                    03:09:ec:60:a8:6f:92:06:91:33:f1:56:ec:76:8e:
                    e8:d5:e6:e4:9c:30:a0:27:21:3a:fb:57:d6:33:8f:
                    16:e7:68:a9:6c:85:6d:f7:57:d3:eb:77:65:6f:87:
                    73:6a:a6:57:dd:2c:c9:84:34:17:ca:c6:8e:dc:ed:
                    9d:c9:e2:bf:e7:7d:48:e2:7d:91:0f:88:f4:db:27:
                    80:9e:a9:8f:99:69:7d:13:22:19:c8:8f:1c:02:71:
                    9b:64:26:c1:b1:0a:ed:f0:a4:a1:d8:f7:35:dc:3e:
                    06:33:ca:81:60:ec:e2:07:17:46:52:e4:b2:0a:a1:
                    78:15:83:76:1c:fd:50:79:bb:1a:5b:98:b9:04:90:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:62:B8:6B:A2:7C:E0:64:EF:DE:CB:60:EB:A4:F2:33:FA:8D:17:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9aef17e0-7d27-307b-a21c-3b9cc16c306b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:3002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:22:0b:55:af:83:7e:d5:e6:e7:f9:8b:8b:84:b9:f9:bc:4f:
         bc:08:ec:f9:99:c3:02:de:d7:14:7e:53:e1:22:cc:e1:90:dc:
         68:fa:8d:34:1a:9e:55:72:9e:f9:a9:f3:64:86:bc:a7:b0:4a:
         84:58:1f:7e:8f:2b:7c:e0:b1:4a:27:5a:f4:9f:f2:90:00:2c:
         a1:ca:0d:a4:cd:ef:e8:ea:20:88:9b:75:de:1e:89:3d:85:17:
         5b:ab:f0:15:68:75:30:98:41:34:19:61:b8:16:d8:66:f9:8d:
         8f:f1:41:ad:2f:6d:6e:63:01:d5:f8:6e:9b:ac:f4:5c:6e:a7:
         40:50:29:85:61:8e:0b:66:8d:44:cc:bc:ca:b8:26:9e:e5:bc:
         d4:5c:cf:62:f8:22:63:88:d2:64:c7:40:3c:9c:19:8c:cd:87:
         6e:54:a7:9b:fe:ee:9a:e0:ca:8f:74:5d:09:14:6f:ad:59:05:
         38:1b:39:b8:36:71:78:86:1a:77:d3:cb:13:3e:5a:f8:7a:fe:
         ed:bb:71:f7:2d:5d:f6:cc:1e:da:b8:db:01:47:ff:ed:35:2c:
         0f:65:73:c4:04:d2:0b:67:a3:85:01:1f:01:e9:cf:78:27:14:
         c7:a1:0e:c2:22:19:35:fb:ad:5a:85:bb:ff:60:3d:4f:60:d6:
         94:84:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:23 2025 by rpki-client