Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d9355b0c-69da-3702-8e88-3bd53de1024d.roa
File:                     d9355b0c-69da-3702-8e88-3bd53de1024d.roa (raw, json)
Hash identifier:          AqlEtlxv7SNG9/Z43isYzL3cYrVyVWd6uZSGUsvFUY4=
Subject key identifier:   8B:F9:A5:5B:F2:7F:C9:75:CD:B7:BD:35:20:1D:D2:CF:28:FD:A2:6E
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584913AC1A8D34F1694BD9309700
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d9355b0c-69da-3702-8e88-3bd53de1024d.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40::/36 maxlen: 36
                          2605:dd40:1000::/36 maxlen: 36
                          2605:dd40:2000::/36 maxlen: 36
                          2605:dd40:3000::/36 maxlen: 36
                          2605:dd40:4000::/36 maxlen: 36
                          2605:dd40:5000::/36 maxlen: 36
                          2605:dd40:6000::/36 maxlen: 36
                          2605:dd40:7000::/36 maxlen: 36
                          2605:dd40:8000::/36 maxlen: 36
                          2605:dd40:9000::/36 maxlen: 36
                          2605:dd40:a000::/36 maxlen: 36
                          2605:dd40:b000::/36 maxlen: 36
                          2605:dd40:c000::/36 maxlen: 36
                          2605:dd40:d000::/36 maxlen: 36
                          2605:dd40:e000::/36 maxlen: 36
                          2605:dd40:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1a:8d:34:f1:69:4b:d9:30:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=d9d9e8b3-2cb0-45fc-a242-e015a2ad5646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:30:fe:8c:d9:59:c0:0f:09:2f:fa:0c:2e:
                    d5:21:5a:fa:25:03:f5:c7:c2:aa:68:cf:ff:08:b4:
                    23:28:e9:69:20:9b:7d:92:36:d6:e8:0d:e6:92:4c:
                    9b:40:11:32:de:aa:88:d3:1c:81:31:19:de:3a:0e:
                    dd:8d:79:fc:83:ee:ef:b7:2a:eb:c2:bd:aa:f0:ad:
                    f3:b0:64:a8:7e:56:2b:55:b4:e5:1d:d3:b5:3f:22:
                    d7:85:ab:23:af:f4:66:93:f1:4d:62:74:79:33:8e:
                    72:b9:19:87:19:ca:ed:a6:2b:03:95:04:6f:04:b5:
                    ed:94:3f:cd:7b:96:99:57:5a:59:b9:ea:a3:64:3e:
                    9b:52:8a:8f:b8:c0:83:f2:05:1d:9d:69:8f:0a:68:
                    0c:b6:d2:14:d8:59:0a:10:19:a8:76:7a:f6:54:b4:
                    57:04:a9:41:c2:11:80:3a:d9:20:58:8b:75:ac:4a:
                    d6:6d:4e:01:17:2c:b8:a2:47:e1:be:d3:78:55:53:
                    e3:04:22:df:61:ce:7c:fa:e2:79:79:1d:b7:45:a5:
                    0d:ac:ea:3e:7f:25:52:82:f2:73:d0:80:6f:db:68:
                    24:ae:22:4b:9d:c8:f4:47:62:a1:fc:85:71:66:e2:
                    51:6c:36:4b:b6:16:1e:38:69:00:97:71:c9:40:a6:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:A5:5B:F2:7F:C9:75:CD:B7:BD:35:20:1D:D2:CF:28:FD:A2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d9355b0c-69da-3702-8e88-3bd53de1024d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:f8:c5:c5:ff:2a:ae:c1:26:8e:1f:df:74:d4:63:fa:c4:
         95:56:48:fe:c0:cf:88:c2:14:84:1c:a2:43:32:75:35:ef:30:
         30:93:de:db:25:61:6c:c8:f3:ff:c7:0e:03:f8:03:32:fa:82:
         de:e1:a0:4a:b8:b2:18:00:b6:e4:76:1d:9c:c2:6b:ce:f2:06:
         54:64:87:30:89:45:a3:94:a0:36:69:7f:2c:ba:c5:9d:60:6a:
         eb:76:83:d9:1d:dd:34:63:b8:4b:c7:a9:a3:32:22:66:3e:52:
         1e:bc:cb:b4:8d:e5:39:54:e5:cd:13:69:48:58:fe:1f:ad:0d:
         7d:3e:9a:20:21:d4:be:1b:4c:57:58:21:f9:d9:ce:41:63:27:
         dd:87:16:b1:25:34:c0:55:17:0c:da:42:eb:8b:e4:e1:b6:78:
         21:20:ac:83:94:e1:02:7a:87:47:49:c0:8d:2d:00:6d:00:38:
         45:9c:55:1e:bb:4a:2c:d2:b7:3e:63:ff:43:f5:e7:ab:ab:46:
         8e:b5:9e:df:4f:f3:e0:c7:78:12:ce:54:1e:e6:8c:16:7a:26:
         e5:0c:e2:48:43:75:14:08:5f:6b:db:ef:21:ba:c1:17:bc:f3:
         e4:0b:e3:90:3e:76:36:9a:0e:84:3e:a6:5b:3f:b3:22:46:c4:
         53:02:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:14 2025 by rpki-client