Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
File:                     ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa (raw, json)
Hash identifier:          dqsOgyNR/pzwnOjt/wT24xHAQIj64M550uTKGLf7zRE=
Subject key identifier:   22:E1:89:90:6A:25:31:76:13:59:8E:64:A1:8B:24:E7:C7:1C:EE:42
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584812D531B195FC9EAA34DF7780
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     398549
IP address blocks:        2605:dd40:8225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:31:b1:95:fc:9e:aa:34:df:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=000eb181-8a57-48e2-a389-e3a4cf50954e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:46:d0:35:77:3c:a2:bc:34:b9:a4:1c:50:
                    8f:69:eb:57:b4:5e:33:f0:67:c9:32:f2:e8:33:38:
                    ad:c6:e9:0b:20:f2:4f:46:32:53:7c:86:9a:ff:6d:
                    97:dc:09:e7:58:9b:eb:4c:97:f3:85:f4:5b:2b:26:
                    15:bf:a6:dd:08:c7:d0:38:50:1d:5d:23:e1:06:85:
                    ee:aa:25:e8:d6:4f:41:21:de:32:17:63:d1:91:6f:
                    47:08:69:ad:8d:32:15:a3:85:6d:ac:aa:65:47:1e:
                    a7:bf:60:f6:bb:55:95:91:3f:e8:79:53:80:8a:78:
                    21:4c:8b:53:01:30:d9:40:e1:dc:4b:62:d1:2f:aa:
                    7e:a7:7d:3f:2d:fd:8b:fc:6a:ed:98:0b:18:95:2b:
                    c1:d1:d6:79:b3:38:ba:74:7e:df:25:8d:73:3c:77:
                    5f:b5:70:49:8c:53:8e:b5:c7:05:e0:f6:7a:c3:ab:
                    9a:11:ea:08:df:d5:37:c1:00:ca:f9:7e:52:23:ee:
                    9e:31:bb:09:95:f2:bc:c6:35:cc:b5:12:bd:c9:b1:
                    cc:5a:7f:c6:11:e7:89:82:c7:8b:56:3b:22:49:be:
                    89:9a:af:fb:91:b2:8f:33:6d:e6:5f:ad:fd:88:38:
                    35:80:05:e8:df:72:ec:3c:8b:7c:0d:cc:a6:b8:33:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E1:89:90:6A:25:31:76:13:59:8E:64:A1:8B:24:E7:C7:1C:EE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:c1:4b:90:96:a1:d1:b1:7d:42:36:5d:c9:b9:e7:c5:f6:
         21:23:d9:1e:bf:89:04:90:66:a9:96:55:d9:f5:7a:8c:be:06:
         88:47:cd:79:67:ff:b7:89:f1:96:75:5c:c0:86:24:02:df:23:
         0a:ec:8a:0f:4f:3f:96:7b:b5:d4:66:67:a4:42:28:3a:c3:d2:
         f4:cc:f8:6d:82:4a:7e:b6:c1:64:74:05:04:f4:d2:f4:5e:2f:
         c0:81:18:3f:cc:05:52:85:17:7b:71:53:30:e1:55:bc:42:88:
         a2:9d:c0:0b:cd:1e:92:07:cd:44:f2:44:23:ab:76:5d:3b:cf:
         ef:0a:f4:74:d2:e7:32:0e:60:03:ea:67:0e:99:a5:83:87:74:
         28:32:fa:c6:2a:8f:44:2b:66:e3:bc:95:10:5a:b7:e1:5c:1e:
         37:16:a6:bd:ec:d4:56:ab:ca:05:0f:c7:0e:9a:26:c3:74:04:
         f2:5f:20:c5:10:5c:5b:b5:ba:f3:23:a8:fd:75:a2:98:8f:af:
         2e:35:18:91:ce:27:ec:ab:4b:a7:69:df:f5:4c:d8:bd:95:11:
         33:93:b3:b5:ba:f0:93:cf:a3:42:a5:a5:87:02:7c:10:c5:03:
         d8:aa:40:76:41:e7:cd:be:51:c8:94:d0:99:d6:f2:5e:df:97:
         a1:67:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:32 2025 by rpki-client