Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/dfb10502-b77a-3b8d-ae65-ab51a2a13d04.roa
File:                     dfb10502-b77a-3b8d-ae65-ab51a2a13d04.roa (raw, json)
Hash identifier:          UnT001N+JLgEYWlPi9JAdnxtCUNld5bVgRGrKzItyoA=
Subject key identifier:   27:10:D6:63:DB:5E:08:80:64:65:F8:5F:CE:4A:8E:E2:D1:26:74:EB
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844BB2A49E3C83B2CDA4EB15C80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/dfb10502-b77a-3b8d-ae65-ab51a2a13d04.roa
Signing time:             Wed 31 Jan 2024 02:00:26 +0000
ROA not before:           Wed 31 Jan 2024 02:00:26 +0000
ROA not after:            Tue 30 Apr 2024 01:00:26 +0000
asID:                     398549
IP address blocks:        2605:dd40:8cb0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bb:2a:49:e3:c8:3b:2c:da:4e:b1:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan 31 02:00:26 2024 GMT
            Not After : Apr 30 01:00:26 2024 GMT
        Subject: CN=a3f71b4d-93c0-4fe2-81d2-9662b366d6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:e9:7c:db:9b:67:28:3e:c4:1a:ca:f7:9c:
                    44:2f:39:a5:76:7f:c8:39:ca:b1:bf:38:9b:31:3b:
                    62:19:99:33:9d:00:74:24:dc:9b:1c:af:3a:e1:b3:
                    a7:fd:fe:a9:6d:db:ed:12:4e:01:0e:14:cb:4f:a2:
                    52:b2:4c:72:3b:9c:74:d9:bf:90:32:04:07:3a:4e:
                    46:21:8a:29:94:1b:71:02:e5:b5:38:21:f6:8a:eb:
                    e1:42:db:bb:25:b4:41:a0:6f:65:75:9e:3d:9a:2f:
                    ef:0f:50:5d:9f:93:58:71:c6:e9:90:6a:64:1c:54:
                    f4:ca:eb:19:6d:bd:f4:18:a7:24:1c:4e:11:11:e8:
                    d8:8a:9f:05:79:77:0c:80:bf:b9:43:fa:f5:58:5d:
                    a1:36:23:f5:b8:08:42:b3:a8:46:20:60:b3:be:4d:
                    34:54:73:d1:5f:a9:33:dc:c9:28:ae:a3:b3:f4:da:
                    91:83:02:1a:75:a5:5c:d6:96:44:63:b3:d1:92:bf:
                    e2:6c:59:33:49:9b:ec:b6:88:65:3d:8f:c6:ee:2b:
                    b3:39:bb:72:30:a3:cc:88:36:2d:75:27:f5:cd:83:
                    0a:f5:72:d4:e5:9d:97:f9:39:fb:42:f8:a3:94:f4:
                    0a:41:eb:62:78:ca:b9:e6:bf:a2:0f:af:cd:06:0b:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:D6:63:DB:5E:08:80:64:65:F8:5F:CE:4A:8E:E2:D1:26:74:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/dfb10502-b77a-3b8d-ae65-ab51a2a13d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8cb0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:10:74:87:f0:6f:55:6e:cc:08:ac:26:10:e0:24:14:f8:
         ba:66:61:a1:76:75:a8:0e:ab:ff:81:9a:14:21:3f:af:8b:ea:
         ac:54:42:59:7c:ed:f5:f7:ef:4d:8f:99:47:44:f6:59:4f:66:
         ac:ef:c2:f0:28:dc:d8:61:90:d9:b1:07:8d:49:23:4f:eb:ee:
         2b:60:5d:89:00:47:8e:3d:9c:36:db:4c:ce:4d:0f:b3:ec:ac:
         9e:c6:b9:f9:bd:a4:c8:9c:61:3b:55:30:b8:b2:8f:7b:b4:b4:
         cc:6b:ec:60:fb:21:c5:aa:bd:31:8b:a5:35:88:94:de:1b:da:
         6a:44:cf:73:15:d5:d3:a9:77:24:ac:fa:2a:84:2f:9d:d2:bf:
         3e:f5:59:48:1b:ea:25:f3:3a:f5:2d:26:d0:c1:7d:62:2a:95:
         db:cf:5e:3c:a1:62:c6:f9:91:7f:a4:28:c8:fb:bd:e3:3d:d8:
         b6:2c:94:a0:ed:94:84:10:8c:2a:4d:e2:a6:c2:c4:60:8e:bd:
         f5:18:f0:fa:e5:c6:4e:e1:f6:48:a9:79:cc:27:e4:80:dc:fb:
         d7:2e:a4:77:36:7f:0c:26:d4:8f:c4:d4:f6:99:13:05:41:39:
         58:30:a7:c5:6d:42:e4:6f:cb:a7:25:fd:6d:d7:55:a5:92:af:
         2f:ae:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:26:56 2024 by rpki-client on console-ams.rpki-client.org