Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
File:                     ca1db00b-973c-3719-a596-87b6067e983c.roa (raw, json)
Hash identifier:          GVNoDw+/hfzrMCwH+bAI8B8rYdXhtuxXaJvOfPvnxPM=
Subject key identifier:   85:12:E5:95:E0:88:5C:88:D4:CE:90:B6:2F:70:73:10:0E:4C:81:2A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AE891228C32D018DEBE29C7CC
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     398549
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:22:8c:32:d0:18:de:be:29:c7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=9ec1b72a-9aad-49a0-bf16-3536e43da518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:fd:de:7f:82:53:c2:84:39:9d:51:95:2f:
                    50:da:09:79:c1:84:8a:2d:6b:01:e6:31:9f:97:37:
                    d7:42:a2:1b:86:08:13:7c:4c:30:f5:e6:8f:15:f8:
                    22:5e:7a:f5:71:80:03:1e:a2:e0:47:32:c0:d0:32:
                    82:c8:49:59:be:45:53:6b:3c:b5:bb:ef:fd:8b:e5:
                    0b:b1:bc:05:12:0f:be:dd:ce:ff:e7:f9:ca:42:d2:
                    3e:99:c9:7a:fe:88:6e:f8:02:d4:62:3a:17:b9:13:
                    79:4f:5d:2e:39:51:2c:74:0f:be:00:d5:82:3a:c9:
                    1a:57:6c:1c:d9:2d:26:77:2f:c5:fc:fa:ec:c0:3a:
                    c4:74:dc:2d:b9:56:ba:41:ba:cd:19:9e:45:7f:ba:
                    54:99:8f:2d:c7:d7:3e:2d:9f:40:16:e1:94:8c:14:
                    8c:7c:36:db:d2:a8:17:e5:42:79:da:1b:59:8a:e7:
                    bb:f0:22:6d:cb:e2:12:99:db:a1:4d:12:9d:80:65:
                    96:31:da:44:d6:5a:b4:46:6b:0a:ea:e3:48:18:f2:
                    a9:bc:d5:57:7d:3a:d9:56:86:6c:c6:4c:50:72:35:
                    35:d9:45:3e:9f:25:12:c4:96:1b:ba:47:bf:ce:ee:
                    c8:6a:76:57:44:67:c5:91:fd:da:3a:97:e9:ab:c6:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:E5:95:E0:88:5C:88:D4:CE:90:B6:2F:70:73:10:0E:4C:81:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca1db00b-973c-3719-a596-87b6067e983c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:b0:a1:f1:48:39:7f:7f:38:e9:a9:78:31:99:0b:ea:e5:
         26:51:c1:bf:cc:6b:6c:e9:03:cc:ae:e7:64:bb:92:7b:11:b8:
         a4:79:f0:c2:8d:79:4a:1b:bb:0a:92:3b:6f:66:bd:32:63:af:
         15:5c:5a:de:12:d6:e3:96:e9:1c:6d:90:a2:87:b8:68:22:c5:
         8d:a5:58:2a:8b:21:d0:8f:45:4d:a0:2f:22:97:d2:55:3c:0b:
         55:1d:c7:68:ad:c9:cb:86:15:fb:9e:c2:71:e6:cb:03:cd:27:
         79:29:ff:85:74:3f:17:1d:97:42:16:4e:81:23:8d:03:a2:7b:
         90:b0:01:1f:7c:40:47:79:95:2e:17:0f:32:d9:2b:ed:23:ef:
         38:80:f1:f8:8a:9b:45:d2:51:b9:e1:bd:cd:bd:60:99:12:ef:
         2d:86:53:f6:37:44:e8:08:46:9f:17:85:03:cf:70:08:2f:01:
         95:18:ec:b9:79:5b:e0:4b:e3:b9:94:38:8d:14:29:5f:67:5a:
         84:3a:ac:02:54:41:7e:53:79:62:c3:a5:eb:95:5f:15:77:56:
         8b:94:74:ab:e9:0f:05:9e:87:bf:39:a4:1e:76:74:ac:20:6d:
         3f:fa:eb:60:1b:5b:2d:e8:8c:3d:84:d0:94:74:28:7b:a1:70:
         06:62:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:41 2025 by rpki-client