Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
File:                     05243640-ba9f-3af3-a94d-0215983cabee.roa (raw, json)
Hash identifier:          AyCskFW/hlWunOQXHnx6mYwrB1tuUAWXR1f+8NAKeVs=
Subject key identifier:   19:AF:B6:D0:0B:6A:39:17:9B:84:40:31:AD:4E:A4:CD:03:1B:07:BB
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A5FC5DA6CA3777FCEADB678C0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     398549
IP address blocks:        2605:dd40:8d00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:da:6c:a3:77:7f:ce:ad:b6:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=52549711-f761-40a9-8338-86b4e3d4cb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:a1:d9:bf:be:df:51:7c:d1:a5:a8:fd:a0:
                    6d:7f:3d:86:43:8a:65:fd:94:97:99:4b:90:5c:82:
                    5d:3b:e5:a7:0f:0c:df:91:bb:d6:e8:d7:1d:23:ba:
                    0f:b7:f6:ff:45:01:c1:e8:ed:cc:93:c5:c1:93:54:
                    98:af:32:a9:82:8a:ac:f4:c5:c7:e5:73:82:38:13:
                    33:ac:57:91:e5:d0:72:c4:83:ce:45:3b:52:33:59:
                    ab:2c:07:69:7c:f9:dc:21:0d:80:d5:d8:80:d3:2e:
                    5c:9f:72:be:54:a4:ae:8d:4d:fa:c2:74:1b:77:07:
                    02:2b:07:af:58:c5:c3:c9:34:f1:2b:4f:3b:49:a4:
                    fb:b5:b7:77:72:ee:b7:f5:7e:ca:13:dd:85:ee:12:
                    48:b9:63:1a:51:41:41:09:1b:aa:69:9c:63:1e:3d:
                    32:93:16:dc:e1:7b:d8:a0:41:c6:2c:9c:0b:2d:e4:
                    8a:76:c8:18:8b:e7:9e:8e:40:28:61:cf:55:68:13:
                    36:60:2d:c3:3d:56:1e:23:d9:d9:76:6f:3c:ef:a7:
                    2f:bc:71:13:5c:bb:25:53:3a:41:34:85:49:db:ed:
                    fd:02:b7:e3:8d:f7:e3:01:aa:8f:3b:f9:4a:de:db:
                    f4:2f:99:28:ab:5d:7d:9e:eb:86:cd:04:8a:96:e1:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:B6:D0:0B:6A:39:17:9B:84:40:31:AD:4E:A4:CD:03:1B:07:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:05:c7:05:ba:5f:72:85:5d:2d:e7:ea:96:db:9b:eb:7b:10:
         41:fd:fe:b5:fb:b4:b6:f3:ec:0f:e9:d7:5e:49:8e:7a:50:43:
         4c:ad:24:3d:d4:dc:45:47:3c:9f:c3:91:f0:4a:2d:56:8d:d9:
         d4:93:1f:29:3c:1f:f6:ec:a4:c1:42:f9:51:23:a6:b0:ab:5c:
         d7:a7:93:d4:23:56:c6:f8:30:d3:9f:ea:53:6d:2d:5b:c9:29:
         6a:8e:3c:51:cf:c5:4e:b9:dd:34:c6:11:6d:8a:83:ac:86:c9:
         21:58:b5:34:d0:4c:e0:62:6b:a4:c7:11:c3:4d:71:66:64:cd:
         3e:fd:81:41:d3:69:4d:ac:57:90:86:31:b3:3a:ce:4c:7b:a4:
         53:db:62:04:02:71:13:5e:8e:85:59:1d:e9:5f:41:29:be:59:
         bc:3c:79:61:8a:0d:10:bc:74:52:75:16:a9:43:e1:e1:1a:41:
         6f:fb:52:59:15:06:72:98:cf:a3:3e:dd:de:82:4b:db:3c:2f:
         f9:b8:db:b5:ea:1c:81:3b:8c:ba:97:f3:18:df:52:81:a5:8e:
         65:67:9f:07:bc:a0:f0:54:fe:02:2c:ba:f1:29:51:de:9b:ba:
         d6:4a:2c:0b:e5:11:08:00:36:f6:75:06:63:3d:54:f6:05:b7:
         f3:9f:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:06:08 2025 by rpki-client