Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9fb7d72b-a560-351d-8e47-1cc9dc16d272.roa
File:                     9fb7d72b-a560-351d-8e47-1cc9dc16d272.roa (raw, json)
Hash identifier:          rjDiElIFhJ+idiJb98W+BtxVcheKWGSzGMRX6RG0pZs=
Subject key identifier:   5F:D0:BF:FF:57:8B:E6:A7:B5:B9:C6:3B:DB:03:7D:1C:FA:9F:37:9D
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848B6261F91102BD87C72578980
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9fb7d72b-a560-351d-8e47-1cc9dc16d272.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     216225
IP address blocks:        2605:dd40:1b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1f:91:10:2b:d8:7c:72:57:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=e69aeaf6-f914-4ab8-b921-ab91f267835d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:d1:40:b8:49:01:81:73:fc:33:91:6a:96:
                    bd:fb:26:a2:dc:11:80:75:05:8f:23:d7:0b:2d:2a:
                    b1:b7:16:00:b0:cd:17:d2:4d:77:7f:c8:b4:de:c7:
                    68:2f:20:12:74:dc:9c:07:07:37:a4:c8:12:82:08:
                    32:93:30:cf:0f:71:da:15:f7:38:6c:62:99:e1:8d:
                    35:99:9b:6c:ef:07:38:e6:85:e5:64:3e:8a:21:61:
                    86:78:26:fc:08:9d:4b:c0:05:4d:95:03:f5:43:17:
                    30:e6:c8:aa:c9:d0:47:20:6a:37:24:ee:5a:98:5f:
                    76:74:21:19:2d:3d:82:48:67:27:bf:64:06:d0:51:
                    5e:b6:73:00:7e:2e:f4:64:e5:9b:4e:e1:bf:8e:cf:
                    05:24:fb:7e:0c:65:7e:26:64:b1:38:99:d8:f6:ca:
                    16:ca:8e:6e:84:92:5a:e4:14:65:16:f5:d9:48:7d:
                    5b:3a:97:1c:ca:ee:81:bc:ca:03:8f:8b:11:03:1c:
                    11:3c:e0:2e:fb:5b:80:85:dd:a0:f9:79:d7:ba:02:
                    17:bf:66:e7:b2:a4:d9:94:d4:24:e3:42:39:7b:e9:
                    7f:74:cb:7c:65:9d:57:33:c3:3f:94:2f:c9:a7:d3:
                    e2:04:bf:2f:50:bd:49:6e:e1:cb:86:bb:7b:c4:00:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:BF:FF:57:8B:E6:A7:B5:B9:C6:3B:DB:03:7D:1C:FA:9F:37:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9fb7d72b-a560-351d-8e47-1cc9dc16d272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:1b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:8e:6c:62:3f:89:05:9e:26:97:39:f9:ed:32:c9:fd:2a:
         51:66:3d:0e:0e:71:8d:93:0f:0a:ef:ef:de:79:ff:1d:e7:b6:
         4f:93:a8:c8:ea:96:e2:25:90:8a:ab:fe:8d:f9:3c:ac:a1:3e:
         ff:28:14:ae:01:1f:d3:34:88:89:52:5e:20:e1:f2:d8:85:f0:
         16:6e:e7:3e:f0:48:e8:1b:d8:ab:39:98:6e:13:c8:f6:a1:28:
         8c:c9:ff:72:bd:ab:1d:18:69:77:43:d3:36:94:d5:a1:55:d0:
         26:97:03:00:d4:2c:f0:a1:c1:6e:04:00:09:cc:63:46:4a:4e:
         95:e9:da:8c:cd:dd:55:03:8d:83:ee:57:77:80:01:38:9e:cc:
         c4:f3:ff:fb:e7:f8:18:db:34:9b:57:62:1f:bd:c3:0b:1a:52:
         1b:12:5c:53:bd:3f:28:c8:4c:29:66:84:75:35:45:f4:6d:ed:
         4f:ef:bd:22:ae:b0:eb:ba:89:11:7e:b4:b1:4b:94:dc:3c:0b:
         26:f7:dd:1d:ce:65:c2:2a:cd:c9:2b:ef:f9:96:77:dc:4b:50:
         f4:02:2a:47:f8:08:73:e2:1d:55:c1:23:09:de:ba:a8:d1:e1:
         31:d1:68:69:9e:ad:ee:11:c9:4e:8c:36:b7:1a:87:b7:8f:4e:
         ae:32:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:35 2025 by rpki-client