Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ac5555f7-7d34-37aa-877e-5e6af947bde1.roa
File:                     ac5555f7-7d34-37aa-877e-5e6af947bde1.roa (raw, json)
Hash identifier:          Vq1r5lpv7N+/zBdSbFC4Im5RSagjDKgAXFZBks/m8Fg=
Subject key identifier:   B5:E9:37:7F:D3:FD:F5:F4:47:C1:4E:6C:3F:2E:D9:85:E6:C9:AC:FE
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285849244E7978DC786D99FC61D7C8
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ac5555f7-7d34-37aa-877e-5e6af947bde1.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8007::/48 maxlen: 48
                          2605:dd40:8008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:79:78:dc:78:6d:99:fc:61:d7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=dfabb7a9-139e-48ee-b08b-9506d962c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:24:ea:61:20:19:70:19:3c:e4:27:d4:34:
                    d7:49:6e:18:1e:32:20:d2:f1:e5:68:8f:40:4d:a3:
                    77:8e:de:41:8c:31:75:74:65:65:d4:c7:ea:22:bc:
                    e1:33:51:6a:94:ce:84:00:9f:98:8e:ec:89:97:9c:
                    64:d4:e7:78:fc:50:e4:da:a8:90:72:6c:8d:45:15:
                    92:22:c7:eb:7a:25:68:6e:73:79:66:0d:cd:11:4d:
                    20:c9:10:c7:a3:c6:08:94:f3:f1:b7:d0:2c:7c:9b:
                    be:64:02:85:52:fe:bc:d9:68:d3:2d:b0:6e:30:ab:
                    a6:0d:eb:e8:c8:d9:e9:77:fc:9a:58:cc:ac:e5:c0:
                    78:d4:b2:6a:94:56:28:d1:a9:e2:99:58:47:e5:b0:
                    e3:40:28:9e:c4:a5:d1:9e:25:58:09:5d:04:25:85:
                    d3:8b:1e:56:a2:90:57:e1:15:9b:1f:f2:72:a6:d5:
                    81:63:d4:dd:12:23:66:c1:8e:2c:61:84:b3:ad:b3:
                    cd:83:29:2c:06:6f:2c:5b:f9:91:5c:94:16:1f:20:
                    2e:0d:e4:bd:96:69:74:f8:5b:c1:1c:b9:8e:76:f5:
                    b9:c6:bd:43:13:f1:4e:bc:14:3f:67:15:ab:c9:00:
                    c4:73:31:5c:1e:6e:ca:77:d0:8f:cc:12:55:43:f5:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:37:7F:D3:FD:F5:F4:47:C1:4E:6C:3F:2E:D9:85:E6:C9:AC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ac5555f7-7d34-37aa-877e-5e6af947bde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8007::-2605:dd40:8008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:fd:41:21:5e:9a:e9:c2:20:8d:b1:0f:b0:0e:b1:d5:4c:
         49:dc:f6:96:25:6a:b5:38:d0:29:f1:76:ba:76:50:1e:5e:5c:
         9b:64:81:a6:e7:20:34:4f:b9:05:24:a1:87:6e:30:9f:cc:b0:
         a2:0b:87:69:00:be:1f:58:58:65:38:0f:18:03:01:c7:ff:2c:
         84:59:bf:0e:9d:f7:87:93:58:35:95:8a:f4:28:af:72:a3:d0:
         16:5f:c7:d5:49:ce:39:98:ed:47:05:c5:14:50:73:af:72:e3:
         f9:11:6a:67:ba:27:4d:ea:bc:4c:99:a2:fc:24:db:90:e9:b4:
         3a:40:c4:25:5a:21:ab:21:cf:af:0c:00:80:9e:54:f0:a2:b0:
         3d:75:32:61:80:ab:ef:0d:03:dd:6e:4d:c9:a6:33:97:19:5c:
         88:00:9d:96:82:a8:7d:53:8a:f2:9d:e9:30:d8:f0:00:dd:2c:
         e3:81:32:70:98:77:55:b0:a2:d5:bc:2a:ed:77:99:ed:45:8b:
         2e:dc:9b:2d:e7:6d:9e:69:25:00:05:9b:24:9e:5f:4d:c5:ab:
         d2:f4:6e:c5:9f:9b:1f:21:ab:54:e5:35:88:e5:18:b0:48:48:
         1d:3b:f3:6a:ef:1c:52:d7:8a:b7:f7:c9:83:6d:50:e2:b9:21:
         67:6f:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:10:56 2025 by rpki-client