Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
File:                     d3b9852b-2053-3254-ba51-db1cf7758052.roa (raw, json)
Hash identifier:          ud89Wl4dJpP6acha7pDbr9Y/MT1emjqHMXpGN5jBcl8=
Subject key identifier:   83:E3:E5:95:DC:11:E2:7A:42:DC:2B:38:9A:7D:FC:DA:05:8C:84:07
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A07D528734DF92F296A17BC00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     398549
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:28:73:4d:f9:2f:29:6a:17:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=35c7406e-dd01-4601-80cd-2901ec223ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:e3:0a:55:ed:e0:71:c5:5c:02:ea:3f:12:
                    9b:0c:e2:67:b2:a5:f7:e4:14:57:fe:78:32:14:b0:
                    7f:52:56:34:d7:8e:4c:7f:d7:81:eb:b0:0c:2b:4c:
                    12:87:e6:0b:e0:41:f4:d9:a3:54:27:7b:b8:48:59:
                    18:3f:6f:ab:27:ee:69:95:81:39:04:90:c8:b5:3f:
                    48:89:da:0f:ad:82:40:b4:6d:74:c1:24:16:5e:11:
                    f3:a1:b2:e5:cb:a1:54:da:07:25:02:89:44:f7:52:
                    71:a3:b6:81:98:15:a3:a0:dd:7a:91:27:51:9f:81:
                    72:29:4d:24:72:e4:45:a3:4b:8d:a2:f3:e5:42:84:
                    1d:dc:78:eb:27:83:c3:a9:eb:b7:c4:5f:d0:b2:59:
                    fa:19:82:c2:10:37:30:df:1e:e5:39:65:e9:46:9e:
                    d6:32:aa:6b:70:85:13:e7:af:a2:f0:fc:6e:08:19:
                    6d:0a:3c:b9:03:80:2c:9b:d0:f4:3d:55:5c:7e:a0:
                    08:2f:5d:54:8a:b8:68:a3:60:c4:ff:b9:5d:e3:6c:
                    5a:b6:0e:65:97:98:2a:82:69:f6:d8:a3:0e:f0:eb:
                    9f:a1:1c:0f:2e:e1:41:4d:10:55:4e:49:52:6d:0b:
                    d2:15:24:0f:f1:87:fa:16:5b:c2:48:a5:e3:e3:d3:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:E5:95:DC:11:E2:7A:42:DC:2B:38:9A:7D:FC:DA:05:8C:84:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/d3b9852b-2053-3254-ba51-db1cf7758052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:c2:18:ba:8e:6f:f0:49:d0:4c:88:b6:e4:44:a9:bc:86:
         2a:60:8f:b3:d3:68:4e:e0:3f:93:3e:a5:a0:93:9c:d3:80:91:
         f9:3f:24:3c:01:fc:33:e2:9b:a0:42:d3:27:fb:f9:3a:d4:2f:
         05:5b:de:a0:56:48:04:5c:1c:61:17:68:0f:b5:9d:56:7a:c7:
         f9:6f:bf:e6:dd:f2:38:9d:e8:d9:2a:f0:8c:95:6a:0d:d7:c3:
         ea:c1:64:35:ba:94:90:46:93:08:84:fa:32:22:85:6c:1d:bb:
         1d:9c:1f:83:4c:52:71:e5:b6:43:27:81:d5:2c:45:9e:e6:2c:
         65:19:6b:70:d2:40:5e:b9:c1:d0:74:08:e5:1a:9e:01:41:a6:
         a1:e6:41:b1:82:43:19:a6:78:ab:4d:13:da:ab:6b:b0:be:96:
         2c:1e:6f:a2:ad:e4:1c:7e:d3:ef:bb:bd:2f:20:d1:09:11:74:
         4a:62:33:22:a7:81:49:11:94:97:22:be:38:45:03:3c:9f:34:
         9b:1b:0d:fe:78:9d:73:96:f6:62:65:5e:18:68:94:80:53:ae:
         96:d9:0e:cf:ef:d4:86:34:9a:3b:7e:f4:e7:18:6e:4e:8e:0a:
         d0:14:8e:07:4d:f5:d7:9d:8a:c7:bf:f8:e2:3a:a0:c6:cc:ea:
         6e:d1:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:27:45 2025 by rpki-client