Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File:                     d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier:          hZCqStaIu5ZQz+cC3PNG5f4rJGRdUR0B4b7rrGRm1ZQ=
Subject key identifier:   A6:D7:13:BC:42:1B:86:B5:EF:B8:35:B0:E6:E7:7D:51:D7:98:19:61
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AE891223E26F25B9C5BAA9D80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     398549
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:22:3e:26:f2:5b:9c:5b:aa:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=906de695-f671-472b-befe-86da81f15ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:7d:4b:de:df:4c:51:19:6e:c1:e4:79:92:
                    e2:05:fa:e5:2f:40:a1:10:fb:82:fe:46:bd:91:23:
                    95:ea:26:c5:8d:d1:2d:1e:c6:55:51:b9:78:01:05:
                    33:5a:63:82:13:2d:82:7b:a6:26:d9:05:49:10:5c:
                    8c:38:5b:df:67:d6:11:27:c3:aa:4f:0d:63:6e:07:
                    19:f2:69:e1:a9:14:fe:00:20:34:8c:84:5b:37:86:
                    cf:df:17:4e:17:29:7f:f9:f5:61:1a:03:4a:c6:1b:
                    c2:f6:e9:43:77:10:43:94:4b:e5:d3:71:7d:71:ef:
                    dc:af:93:6e:08:85:3d:cd:b9:71:cc:5e:71:3a:3f:
                    87:05:d7:50:79:41:9a:12:3c:c9:39:4b:12:96:85:
                    40:c1:d3:42:66:83:21:08:bf:cc:91:3a:15:98:57:
                    56:e4:3c:37:79:32:a8:80:63:5f:c8:35:e9:f9:6c:
                    d1:fe:61:de:8f:8f:e5:76:35:3e:97:37:3f:35:f7:
                    ce:97:14:4e:11:0b:78:73:33:b6:f2:5b:92:0e:2d:
                    22:de:96:8b:25:5c:22:62:ee:2b:e6:8b:a0:ca:b4:
                    4d:b4:2e:07:1f:a8:cf:e3:be:7b:2c:09:fe:9d:79:
                    34:8a:37:ce:69:ef:e6:16:bc:d9:cf:38:a0:63:d4:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:13:BC:42:1B:86:B5:EF:B8:35:B0:E6:E7:7D:51:D7:98:19:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:e0:3b:ec:8e:db:62:0d:5b:fe:a2:7b:9c:62:4b:7b:7a:
         6a:97:b7:df:d9:de:c1:42:b2:57:26:1f:a8:5f:1d:f8:56:80:
         26:53:c7:b7:37:e8:e6:c3:c9:26:03:ac:43:d7:7b:eb:78:89:
         a7:af:de:81:fa:27:a7:52:6c:2d:a5:c6:c3:c4:c9:0e:54:ba:
         c3:91:82:79:f7:30:00:56:23:07:6e:f2:42:e3:5e:2a:20:ff:
         6a:c3:f0:81:5f:d6:74:e5:02:3f:08:76:50:89:a3:7d:13:3e:
         8e:45:38:4a:ac:50:ed:0e:97:68:b2:a2:08:24:fb:1f:10:2a:
         0f:c8:2e:a8:b4:4f:9b:a0:2b:e8:1a:ee:d3:24:78:03:d1:fe:
         f6:30:e0:5c:15:a2:24:55:54:38:7b:ce:62:3a:c7:d8:b7:f4:
         82:85:19:8b:7e:cd:df:cc:1c:54:2d:7a:2d:59:5f:14:de:b9:
         7c:9e:10:bb:ae:94:8c:5e:4b:ec:b1:22:e8:9d:8e:3d:1b:c1:
         a8:67:98:21:ac:17:ce:f8:63:2b:a8:66:c4:95:19:89:ab:db:
         a3:b1:83:bb:f5:fb:14:a6:32:c7:11:83:ba:3b:a5:65:44:05:
         ba:1f:9e:f0:b8:ba:b3:01:8e:0e:29:fa:12:92:52:b3:cd:e8:
         01:92:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:01 2025 by rpki-client