Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/fd7dfb74-047a-3f29-bd3a-b6a42ef71b43.roa
File:                     fd7dfb74-047a-3f29-bd3a-b6a42ef71b43.roa (raw, json)
Hash identifier:          Q2azWMFJCHqw3m88iKFmg4bZL3zRfWyHgpl9seMrxVI=
Subject key identifier:   CF:17:E0:A6:30:16:DC:A3:B6:EF:A5:C9:52:BB:8B:62:39:26:7E:CD
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285844BB2A49CD88D53C6C30A28D80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/fd7dfb74-047a-3f29-bd3a-b6a42ef71b43.roa
Signing time:             Wed 31 Jan 2024 02:00:26 +0000
ROA not before:           Wed 31 Jan 2024 02:00:26 +0000
ROA not after:            Tue 30 Apr 2024 01:00:26 +0000
asID:                     398549
IP address blocks:        2605:dd40:8206::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bb:2a:49:cd:88:d5:3c:6c:30:a2:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jan 31 02:00:26 2024 GMT
            Not After : Apr 30 01:00:26 2024 GMT
        Subject: CN=2a598003-e7ee-4720-9791-3ab31f8a0d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:63:8e:51:b9:db:51:e9:aa:2e:78:aa:78:
                    cc:5b:90:04:3d:c7:4b:6b:02:bd:40:fa:ed:e0:a3:
                    35:34:57:ce:41:bb:d2:dd:dd:07:cf:8c:bd:60:09:
                    6d:5d:3b:5a:ba:c7:6c:52:ab:76:2f:fb:fa:1f:54:
                    e9:9a:1e:96:87:87:28:e3:6e:da:ee:49:78:8d:6f:
                    9e:4d:5b:f9:38:98:06:5b:2e:a7:ef:a2:93:ef:8e:
                    74:4f:3b:d9:23:ee:c3:b2:cc:68:77:57:f8:0d:c1:
                    64:d7:5a:ad:5e:ec:46:d5:d2:fe:70:a5:17:d2:d9:
                    86:7c:f8:00:f2:35:e3:b5:6f:93:14:48:e9:37:c6:
                    08:c1:26:e3:3e:9a:98:70:e2:cb:1b:95:03:4b:d3:
                    92:41:e0:32:43:64:e1:83:a0:7a:0d:c1:78:27:a5:
                    a9:8c:6c:97:11:53:43:c4:e0:33:f7:1c:32:de:66:
                    26:6c:10:9a:40:70:48:fe:45:1f:e5:62:48:51:12:
                    96:61:b1:5b:fc:04:6e:65:1c:ae:2c:7a:a5:ff:11:
                    9e:da:95:f6:e5:a5:dc:44:07:a7:9f:0a:3e:3d:5c:
                    c2:00:21:6c:66:0b:02:51:21:e0:ae:fa:69:f9:31:
                    ce:52:e0:5e:b8:d0:4e:64:c8:c8:e6:c3:45:14:61:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:E0:A6:30:16:DC:A3:B6:EF:A5:C9:52:BB:8B:62:39:26:7E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/fd7dfb74-047a-3f29-bd3a-b6a42ef71b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8206::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:2a:80:92:3e:3d:39:e6:01:48:0f:c6:8c:31:fe:58:9a:
         5f:60:97:62:21:1f:85:d4:4e:59:4d:da:f8:e3:c3:ed:6f:e3:
         8f:84:08:ef:9b:2e:9d:65:72:5d:c8:0a:43:c8:38:c3:58:f4:
         53:5a:cb:c2:c2:aa:5f:6d:30:df:8d:70:20:ec:d7:0f:9f:57:
         d7:a3:14:4b:bd:d0:ff:2d:d1:4d:c7:16:9b:19:b8:62:7d:04:
         6a:ee:c8:73:bb:61:df:fc:86:36:d2:cf:b2:95:3c:48:4a:8b:
         82:77:94:5c:2e:ae:f8:16:ee:58:5e:13:b6:11:7e:d3:77:db:
         ac:9e:3e:40:ed:6f:92:e7:d3:ae:52:b4:76:a4:44:ad:8b:bb:
         7d:ae:46:0c:f4:a0:eb:f5:6b:8d:c9:2f:9b:ac:a0:4e:cf:f0:
         01:18:e5:ae:cb:27:ea:7c:f9:d1:2b:16:72:1b:2d:14:67:cc:
         b7:87:3c:99:36:90:a9:85:0f:84:ff:d6:39:76:64:fe:a6:c2:
         b0:cd:ba:00:c9:b7:f7:ca:2b:73:e5:01:59:bb:f0:63:26:9e:
         20:77:e5:2a:39:bb:94:5a:93:e1:f2:6a:66:31:51:5b:88:5f:
         ee:2a:bb:c9:bf:c7:71:70:f1:9c:34:80:21:5a:05:16:b7:75:
         d9:56:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:25:17 2024 by rpki-client on console-fra.rpki-client.org