Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
File:                     0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa (raw, json)
Hash identifier:          8TAU1OiJGuDON6Y1BoNxX6Krm3NrGpn+dYSPSXBTVJI=
Subject key identifier:   5E:2C:53:C8:06:9D:9A:97:D3:35:5B:F8:7E:E2:A2:55:DE:5C:64:B3
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AD93650FC5A968FA08D336680
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     398549
IP address blocks:        2605:dd40:8204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:50:fc:5a:96:8f:a0:8d:33:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=2dd374ef-305e-4598-a8ac-d4fe425fbe08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:92:74:96:7d:79:01:2b:de:0e:52:92:3b:
                    8c:56:35:b8:4c:bd:15:4e:6c:64:01:38:b8:40:c3:
                    0d:ce:95:ec:e8:48:e0:68:86:fc:5d:2d:a8:24:8f:
                    0b:36:ea:ed:94:21:d0:62:bf:06:9b:f9:05:8a:8d:
                    bf:0f:8a:e6:49:b3:94:74:6b:dc:c3:ae:ee:81:3d:
                    b1:ec:d2:83:78:09:d6:d0:35:3a:01:ef:2d:26:d1:
                    85:2b:2b:cb:26:23:b7:03:d3:53:3f:13:a5:e6:d3:
                    c0:09:e2:bf:e2:a1:dd:de:b8:dc:58:40:61:c7:55:
                    08:e0:54:fd:70:70:97:22:3e:b4:f9:04:d6:23:76:
                    7d:ae:3d:dd:61:e9:e9:3a:f0:6d:e6:61:78:e3:84:
                    d0:03:74:71:4a:6c:62:9b:6d:bf:e0:8f:c2:b6:31:
                    75:a5:38:06:14:d9:68:75:af:f7:92:7b:15:2f:4a:
                    25:fb:aa:14:d5:60:4d:ec:bd:5d:dc:09:0e:64:ba:
                    d9:d2:db:a2:41:58:32:46:f2:fc:21:37:b1:77:2a:
                    e8:54:b9:a0:4e:ad:22:10:3a:d5:26:56:ea:96:fc:
                    71:4c:9d:3a:e1:fc:25:0d:05:1b:56:03:4c:88:94:
                    ec:48:24:67:41:56:57:ad:bb:ae:27:61:26:4d:57:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:53:C8:06:9D:9A:97:D3:35:5B:F8:7E:E2:A2:55:DE:5C:64:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cd775e8-052f-31e5-94b2-c92fe5654ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:df:72:24:85:af:6c:85:f5:50:84:5f:7a:8f:e1:b4:87:8f:
         79:61:1b:b5:60:d3:f0:e3:49:f4:e8:59:14:7d:80:51:ec:ec:
         43:39:89:80:91:cb:28:3b:0b:ec:61:1d:62:97:0e:0c:91:38:
         91:f1:1d:79:40:1b:c0:b0:b5:3f:78:4e:98:63:4c:d3:b2:23:
         03:e0:db:28:64:0e:c6:ca:d2:d9:b7:25:73:a8:a6:2e:94:2a:
         6f:18:b0:d7:3b:7b:82:1f:78:5f:c8:78:be:1c:95:cf:40:23:
         9d:e6:4b:2a:45:a9:7c:63:87:90:02:51:35:63:1a:90:f6:bf:
         24:e1:90:58:53:9d:b8:ef:bf:86:3e:8a:c0:73:58:12:7d:76:
         69:3a:55:ed:0b:72:4f:11:bc:16:bf:a6:59:57:0b:6e:51:e8:
         00:f4:6b:a5:ca:b7:e9:0a:1e:60:3d:a1:33:21:3b:e4:0b:6c:
         be:5b:01:74:04:58:b0:a4:f0:d0:3e:b5:3e:14:93:43:aa:d3:
         bb:04:c3:f1:d3:97:fc:3a:5b:22:04:43:46:ec:43:7c:18:4c:
         2d:e1:bc:b9:a9:cb:3c:a5:1a:50:a7:76:5d:5a:5f:6e:b0:30:
         ba:13:f7:8d:c7:ec:f7:79:5e:4b:8d:b8:6a:38:2d:65:88:a9:
         c3:ef:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:15 2025 by rpki-client