Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File:                     d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier:          d25RbLPns3VJEOH6BqxlT0h/qTz/mlvcreWdkj3r4vk=
Subject key identifier:   DF:DE:21:A4:44:AD:7D:34:6A:88:36:94:3B:4F:50:82:5C:FE:B9:78
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844C91FB47E8F7EB8CF7D47DEC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time:             Mon 05 Feb 2024 02:00:26 +0000
ROA not before:           Mon 05 Feb 2024 02:00:26 +0000
ROA not after:            Sun 05 May 2024 01:00:26 +0000
asID:                     398549
IP address blocks:        2605:dd40:8260::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c9:1f:b4:7e:8f:7e:b8:cf:7d:47:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb  5 02:00:26 2024 GMT
            Not After : May  5 01:00:26 2024 GMT
        Subject: CN=f33539af-af55-4723-8919-171c4bf7e852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:48:87:09:42:00:f7:72:c5:21:b7:81:58:
                    ca:ff:6a:3e:e9:3e:98:9c:c4:6b:f4:4c:2d:a1:84:
                    9c:48:76:4d:df:a6:3c:90:29:09:6b:28:d4:e3:23:
                    73:e6:9c:25:16:c7:fc:32:51:70:d2:60:68:29:a3:
                    36:0a:7d:90:9c:3d:43:56:21:b3:68:94:35:9a:c0:
                    5d:4a:d9:12:c3:7d:71:9d:dd:d3:51:28:19:e0:21:
                    12:f3:fc:26:93:92:97:e7:84:cd:88:55:8a:96:37:
                    90:de:4b:c4:45:9f:a9:43:5b:08:3e:38:ca:81:10:
                    3b:dd:20:c5:b7:0b:8d:09:19:db:43:9c:dd:0b:91:
                    79:fc:cd:66:84:85:b7:ce:07:2d:8a:57:c4:42:28:
                    4b:96:77:31:d6:eb:fe:53:38:14:fa:b5:a3:8b:47:
                    34:1a:ce:e4:06:3c:02:df:38:1d:79:c3:9a:b9:10:
                    64:e7:1f:03:9e:91:16:26:53:a1:b9:f6:e3:71:25:
                    8b:33:28:33:61:89:ce:c1:b3:48:37:a7:93:a7:5b:
                    8c:d9:23:61:75:be:61:35:3b:0e:39:10:e5:22:d5:
                    4b:d4:79:a6:d6:20:e2:72:f2:73:7d:a5:b2:23:4b:
                    82:7b:d3:94:2f:61:1a:cd:83:e5:ff:9e:47:45:5f:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DE:21:A4:44:AD:7D:34:6A:88:36:94:3B:4F:50:82:5C:FE:B9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:89:62:ac:21:7e:b3:e5:b4:e6:2a:06:6c:e7:b4:ce:53:
         71:8f:5b:8a:30:64:ca:8d:9a:a0:bb:e4:55:aa:f6:6f:59:6b:
         b0:91:5f:1b:e1:e0:47:3e:5e:59:bc:09:b2:93:a5:52:36:ef:
         04:3e:7d:db:20:5c:2d:fb:75:1e:c7:80:33:ea:8d:2e:71:0b:
         47:d2:c2:b5:da:77:95:ea:bd:59:77:c1:7f:9f:1a:dc:07:f4:
         f0:28:ac:ee:60:11:09:2d:eb:d6:27:79:ee:17:e5:c5:f2:34:
         2a:e6:48:28:df:81:d8:e9:65:0c:67:ad:53:d2:65:ae:b8:2d:
         56:e1:fe:98:55:6f:2b:6d:af:6b:f8:cd:2f:0b:61:16:e2:f1:
         01:fc:db:ee:ff:77:26:12:ed:ef:f6:90:81:0d:cd:d8:37:74:
         1b:c3:28:31:35:2a:82:00:0d:5d:b8:40:49:c6:85:c9:1c:7a:
         23:d8:bf:6a:f1:47:3e:55:5f:14:d9:a0:e7:67:43:96:06:b9:
         e3:9f:9b:86:7a:ed:82:22:ab:f2:75:d0:83:56:44:77:92:28:
         f3:4a:cf:04:c5:fe:08:83:54:7c:66:14:2c:7a:b8:17:c4:a9:
         90:b0:59:11:ac:7c:ed:27:7b:fa:33:53:62:a2:df:4f:77:1b:
         a8:c5:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:32:26 2024 by rpki-client on console-ams.rpki-client.org