Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
File:                     ca1db00b-973c-3719-a596-87b6067e983c.roa (raw, json)
Hash identifier:          jnkvGVxpxiBF5Yn0ZtLB4ura1VAKs4KHnakWwYmth3U=
Subject key identifier:   E9:D7:3F:38:74:B4:17:B2:AA:2D:D8:F2:C8:4F:79:1B:B3:FE:B6:25
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845A9BE0A435579455D1977DE00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     398549
IP address blocks:        2605:dd40:8570::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0a:43:55:79:45:5d:19:77:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=f4f636b1-0a6a-452b-8892-e285134017ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:1c:8f:bc:f2:3d:d2:21:cc:dd:ec:ba:c8:
                    ed:cc:93:ab:f4:54:68:e9:82:46:3c:9e:e6:57:b5:
                    04:1f:00:1f:94:0c:a8:fb:6b:3f:78:81:e6:ab:d9:
                    31:45:1e:4b:88:e2:1b:e1:52:e0:72:ca:a7:57:b0:
                    ea:bc:28:e0:58:50:66:8d:65:b2:56:f1:b9:0f:ca:
                    67:a5:16:50:c8:1f:70:41:05:f4:75:d9:85:8c:46:
                    ce:bc:f9:83:af:64:03:75:f2:31:02:1c:8e:1a:05:
                    2c:ff:be:02:f8:9f:c4:08:20:b4:fe:3f:b4:40:5c:
                    0b:56:b6:ba:88:cf:46:9f:fd:58:ea:96:0a:db:70:
                    b9:49:e3:31:07:6b:a5:d2:ad:71:3c:48:91:c4:89:
                    1a:38:8e:11:3c:9e:19:4b:07:24:1c:37:02:f4:6a:
                    61:6b:99:3f:fa:4f:bb:96:48:1b:43:62:d9:c8:77:
                    a1:ab:59:e2:96:0c:73:f6:10:89:ea:1e:59:6f:ac:
                    cf:c8:3a:5b:4f:5d:1f:60:20:a8:ab:80:69:22:81:
                    7a:50:5b:2d:e1:62:9b:99:77:c7:54:5a:da:bb:1a:
                    10:86:ae:3a:19:d2:1f:92:40:6a:11:8a:20:81:35:
                    11:a8:26:eb:50:59:a4:d9:2e:d8:08:2e:82:67:33:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:3F:38:74:B4:17:B2:AA:2D:D8:F2:C8:4F:79:1B:B3:FE:B6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:9c:b5:d4:a8:20:d7:71:b6:08:39:4b:a4:e7:84:16:31:
         52:61:84:e8:fa:66:fc:59:5f:25:2a:ea:d8:e3:f3:04:86:5a:
         f7:25:c8:65:55:25:23:12:73:ce:2f:ce:56:3c:ce:c7:8a:1c:
         a0:e2:29:ef:3b:7b:df:42:2a:ec:0b:d8:bf:14:fe:a5:49:03:
         bc:b7:08:9c:b1:eb:ad:f5:7d:3f:15:39:ba:3c:19:0b:98:e7:
         fe:c9:41:40:11:da:9c:e8:75:c3:f0:84:cd:5a:7e:4c:00:5f:
         e2:96:68:6d:cb:6e:7a:99:60:42:29:0d:be:7f:58:85:9c:c0:
         53:b9:d4:95:66:bc:37:75:6b:be:d6:a2:4b:04:cb:27:de:74:
         f0:c3:20:5e:61:6c:c8:19:87:97:31:bb:9c:44:05:aa:38:03:
         d9:7e:6f:16:fa:ef:61:69:9f:c5:06:f6:34:6b:c7:da:3c:fa:
         b6:91:7f:52:c0:fe:b1:f6:85:c9:75:5b:df:c8:cc:cb:ae:68:
         57:12:73:20:ba:9f:62:15:05:77:a9:b7:ea:02:d5:98:95:dc:
         6f:36:ca:b2:d8:08:c4:ff:ab:38:d0:20:a8:de:b7:08:b3:7a:
         7a:81:35:fa:ae:9b:5d:b8:ae:b4:12:9e:b4:ec:fc:8d:95:49:
         4f:5f:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:30 2024 by rpki-client on console-fra.rpki-client.org