Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa
File:                     4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa (raw, json)
Hash identifier:          GoWHAH40MxYYjiKOxCkV3L6wTjpptk6ZK4Zssx+R2ZI=
Subject key identifier:   93:02:6B:A0:E8:CB:50:BF:DC:8A:7E:54:B1:4C:A9:7A:41:36:A0:89
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AD9364EB0AF0B7D9F781DE540
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     398549
IP address blocks:        2605:dd40:8202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:4e:b0:af:0b:7d:9f:78:1d:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=c886cf99-f371-4aa5-9972-b5b5d9c1a227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:b0:05:62:72:08:a7:16:b6:e6:64:9a:42:
                    7c:cf:ed:53:d4:6e:2b:40:a3:d4:1d:7b:20:38:8f:
                    9d:1a:17:92:d1:84:a3:4b:77:9b:a2:d8:b6:5d:0e:
                    dc:66:25:c6:d1:e4:b0:8e:56:cd:ad:2f:08:50:ab:
                    ba:c1:db:d8:f9:15:7a:08:1a:93:80:9c:26:14:79:
                    d6:41:bf:63:2b:fb:d6:f0:32:f8:0f:9b:fc:82:dd:
                    45:b3:18:72:4f:8c:b2:48:16:f1:e8:af:2e:f0:ee:
                    68:37:f2:38:e9:2d:b2:5f:86:70:78:65:36:7e:fc:
                    9f:3c:54:99:69:cc:f3:7a:b1:cb:62:e6:c2:2a:a8:
                    ff:45:8d:e4:e2:27:10:48:4c:bf:80:54:cc:6e:ec:
                    e9:29:35:21:c8:2a:9d:ad:1b:5a:68:68:84:38:3c:
                    98:d0:ac:45:0d:44:0b:7c:45:e9:91:04:bd:1c:bb:
                    5c:04:b9:d8:65:03:ff:e7:af:44:65:33:6a:49:04:
                    45:2b:9d:3f:07:aa:1c:25:6e:c3:5d:c3:50:cb:49:
                    05:08:f8:7e:61:c9:79:ed:5f:32:49:ef:7d:e4:0a:
                    f4:26:88:9d:43:5e:f4:f1:f6:94:9c:dd:d1:c5:ab:
                    99:41:7d:3f:4c:33:75:eb:86:63:00:a1:a7:20:37:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:02:6B:A0:E8:CB:50:BF:DC:8A:7E:54:B1:4C:A9:7A:41:36:A0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4ad8ef5d-23ee-3288-a6e8-649fd1666ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:29:a5:1f:09:7a:c9:0f:42:3d:8c:e0:60:49:ed:6f:6e:
         14:8a:f5:72:75:c8:ed:c6:a2:70:fa:9b:e4:b8:13:c5:38:72:
         48:86:b9:ea:4d:21:03:86:5b:f1:48:ae:be:8c:1a:10:9e:e2:
         1a:99:7f:be:19:1d:ea:2c:32:62:0f:6b:82:66:dd:8f:b1:23:
         44:1b:6e:0b:b8:e3:c6:61:01:7b:69:46:2c:74:a8:b6:40:f3:
         61:c0:66:cd:4d:e5:c1:67:48:36:7b:ab:b0:1e:e6:61:c3:30:
         b9:30:a8:c7:bb:e4:7c:a7:30:e7:3d:e2:57:aa:e7:f5:8b:28:
         04:42:f1:09:8d:2c:e3:9b:1b:db:3c:a1:2f:70:93:81:80:02:
         ea:d2:ab:16:29:5c:a2:cf:0a:dc:34:28:6f:ec:08:79:8e:15:
         28:26:3d:63:2a:ec:6b:9e:39:fe:6f:7a:18:d4:39:6c:fc:84:
         2e:fd:2e:49:b9:cc:52:d8:be:e1:42:f7:81:81:f1:50:e0:0e:
         4c:da:fd:6c:ff:15:72:45:bb:e2:59:0b:18:af:cb:83:7b:b8:
         8d:92:07:66:b9:96:66:7d:76:c6:b7:40:3f:db:e7:f8:5a:61:
         ff:1e:b8:4c:55:39:54:c5:b2:de:a3:8a:f2:bd:5d:4b:ad:b1:
         ea:59:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:06 2025 by rpki-client