Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf d9355b0c-69da-3702-8e88-3bd53de1024d.roa
File:                     d9355b0c-69da-3702-8e88-3bd53de1024d.roa (download)
Hash identifier:          dyM04eH1oEwB5UaX9c/qXcBnTaIypnSsY56djABL+kI=
Subject key identifier:   20:0C:3E:67:D4:8A:10:0A:7A:9F:C4:F6:0C:03:A1:A0:1A:26:F0:92
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583B92827C79EE344CA73E420830
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d9355b0c-69da-3702-8e88-3bd53de1024d.roa
ROA valid until:          May 08 04:00:00 2029 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:3000::/36 maxlen: 36
    2: 2605:dd40::/36 maxlen: 36
    3: 2605:dd40:1000::/36 maxlen: 36
    4: 2605:dd40:2000::/36 maxlen: 36
    5: 2605:dd40:4000::/36 maxlen: 36
    6: 2605:dd40:5000::/36 maxlen: 36
    7: 2605:dd40:6000::/36 maxlen: 36
    8: 2605:dd40:7000::/36 maxlen: 36
    9: 2605:dd40:8000::/36 maxlen: 36
   10: 2605:dd40:9000::/36 maxlen: 36
   11: 2605:dd40:a000::/36 maxlen: 36
   12: 2605:dd40:b000::/36 maxlen: 36
   13: 2605:dd40:c000::/36 maxlen: 36
   14: 2605:dd40:d000::/36 maxlen: 36
   15: 2605:dd40:e000::/36 maxlen: 36
   16: 2605:dd40:f000::/36 maxlen: 36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:92:82:7c:79:ee:34:4c:a7:3e:42:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 13 04:00:00 2021 GMT
            Not After : May  8 04:00:00 2029 GMT
        Subject: CN=eaadd16d-6a51-4575-b7d8-6a3453b13c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:33:da:57:b1:3f:f4:52:4e:92:b4:41:7c:
                    0a:f2:b0:66:98:8f:87:87:1e:6d:a6:1c:79:bc:60:
                    04:1b:66:7a:bd:a7:f3:5a:68:a0:d2:01:3a:e3:04:
                    c3:9d:1b:b7:06:c6:c8:62:10:d3:2a:65:16:67:52:
                    3b:67:7d:81:e8:4a:43:45:88:92:86:23:41:24:71:
                    15:ad:41:e5:53:a8:03:c1:00:45:d2:9f:7b:1f:72:
                    77:56:d0:f6:30:2f:aa:36:d6:74:9e:e9:0c:5e:d9:
                    60:b2:eb:0b:1e:5b:bd:92:13:e8:26:06:f6:7b:1e:
                    3c:26:49:2b:40:9c:a3:9b:b8:cc:1b:12:de:7f:99:
                    18:08:dc:0c:86:12:f8:42:9b:0b:f5:45:2e:d9:2a:
                    c1:fb:3b:e8:1e:db:e5:75:a9:5e:34:45:0c:17:9b:
                    e7:7f:03:33:88:2a:ff:e9:73:e1:1a:53:2e:8b:7f:
                    e2:d7:3e:2b:5e:7a:83:88:23:91:83:89:b5:aa:47:
                    2b:f8:de:21:54:e9:76:da:81:d4:98:7f:3f:94:3c:
                    c5:2d:f1:64:cc:74:f0:97:7e:e7:9a:48:20:f8:7c:
                    d2:ed:7b:e5:bc:50:58:5b:90:d2:67:cd:9a:bd:08:
                    c3:e7:a5:6a:bc:cb:be:20:49:87:d3:09:13:89:b3:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:0C:3E:67:D4:8A:10:0A:7A:9F:C4:F6:0C:03:A1:A0:1A:26:F0:92
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d9355b0c-69da-3702-8e88-3bd53de1024d.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:3d:c1:a7:1a:ff:d4:de:d9:f6:79:94:3b:38:12:ea:df:
         09:83:82:25:f6:d1:25:ee:54:5d:66:f9:04:44:02:2b:fa:92:
         06:76:44:33:af:d0:b8:98:23:ac:8a:1d:54:47:68:fe:09:49:
         95:8d:e3:8c:22:e0:03:a7:a1:ac:93:37:04:9d:9c:f3:f4:00:
         e9:05:67:84:79:41:f8:4c:06:71:1a:d4:49:09:bb:df:37:06:
         72:7f:68:a2:87:b2:71:00:04:6f:46:dc:80:32:8d:e1:88:82:
         d8:0b:98:ee:a4:f5:c7:91:26:67:e6:23:17:03:82:64:0a:aa:
         b9:2b:4e:3c:1c:46:c5:57:58:71:c7:31:45:1e:ce:94:fe:75:
         aa:29:07:57:5c:cc:57:9e:84:d4:93:b9:04:cc:b6:c1:1f:30:
         2e:69:70:b9:cf:71:56:1c:0d:b4:7c:4e:cf:4b:c6:10:da:90:
         af:9b:a3:84:83:42:b8:11:28:18:fd:5c:6a:9a:45:86:75:81:
         af:39:13:f3:2a:4e:6c:1a:05:51:e4:03:eb:ea:72:fd:ba:e6:
         54:9d:91:29:37:6a:40:fa:e4:2c:b9:52:a6:49:b0:75:11:79:
         be:11:df:ad:81:16:66:96:20:7e:4e:ab:81:e4:33:6c:61:fe:
         1a:bf:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:14:43 2022 by rpki-client.