Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa
File:                     4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa (raw, json)
Hash identifier:          lMkU8jaTJl4yKDsCoFYG2ZWTIVwe1uAF6gU5ymI/1d8=
Subject key identifier:   84:8C:D3:C8:69:14:99:14:B5:17:10:27:C4:51:25:9A:0C:0E:E1:9F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A1F9019E7E66E5E7A47785380
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     398549
IP address blocks:        2605:dd40:8700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:19:e7:e6:6e:5e:7a:47:78:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=075f2b49-97f5-4210-b3dc-f0c693bce6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:a0:6d:9e:f4:3a:f5:5f:51:89:87:22:15:
                    4b:f4:5c:b0:79:d3:3e:49:25:25:0b:a6:72:44:c6:
                    fc:ff:1d:ab:29:62:66:af:c1:29:76:a3:13:a3:f7:
                    08:de:db:a8:12:e3:c2:9a:15:b4:3c:83:9d:9f:d4:
                    b8:aa:89:f4:a2:7d:48:f6:15:26:fe:7b:91:77:3d:
                    81:b0:ee:38:4e:f0:85:f8:ab:4e:9d:23:f5:fe:16:
                    6a:d1:71:de:17:87:64:2c:0a:d2:f2:78:7e:55:a6:
                    88:70:2f:4b:ca:c4:5c:2d:60:e2:96:a0:67:1d:be:
                    d8:95:78:68:cf:45:4a:3a:80:ec:16:31:21:b7:f2:
                    eb:fd:a1:93:10:69:97:98:26:43:2a:48:c6:6a:1c:
                    d4:5e:0f:a4:5e:04:14:0e:8b:89:31:c3:bb:80:50:
                    fa:60:22:c2:10:15:20:fd:4c:b6:43:ab:d9:15:02:
                    fe:b9:fb:b3:94:d0:2f:7f:04:4f:b1:a4:22:00:d8:
                    99:fa:70:22:d9:cd:97:f1:8c:7f:e4:1f:bc:7c:96:
                    6d:fd:dc:5e:0a:59:a0:07:ca:62:c0:58:45:97:ac:
                    d9:4f:c5:a4:4f:9c:2c:4e:b4:df:76:67:2a:28:b0:
                    14:72:53:cc:4a:a9:58:8a:5f:26:8a:ab:36:77:86:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8C:D3:C8:69:14:99:14:B5:17:10:27:C4:51:25:9A:0C:0E:E1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/4a22b1ea-fe7b-39c7-8fe0-d5ddc74b4ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:65:e5:07:3d:d5:64:19:0c:0e:be:43:e3:6b:a7:8f:9c:
         1e:36:9a:38:db:ef:d3:f0:f6:dc:36:3e:72:79:10:a8:5d:9a:
         a6:94:ba:f7:79:e9:e2:fe:f5:73:b9:b8:31:70:ea:c0:e4:b0:
         d2:b5:88:5b:62:45:28:55:a7:db:2f:30:46:80:bd:08:a3:72:
         4e:05:e9:a4:96:f5:07:9f:5b:8e:6b:35:52:25:d3:c8:61:d2:
         30:59:62:32:6b:4a:89:fe:d6:b6:0d:da:04:eb:5a:8c:64:c2:
         6a:e1:73:39:12:b9:39:4e:91:36:3a:0c:a3:c9:de:c0:bf:12:
         fb:12:d9:fa:1d:37:47:f1:6c:5c:7d:b0:f5:c6:e6:9b:63:27:
         e2:ef:78:73:a1:95:be:90:e6:5e:82:07:e2:c2:85:2e:19:33:
         2c:bb:45:10:d4:49:62:3e:0e:b3:81:2e:2f:23:16:54:cc:93:
         0d:17:49:19:8f:75:16:d5:1c:b7:7a:06:5c:15:6c:11:8d:fd:
         8b:5c:ce:cc:98:57:91:c3:2f:49:07:09:26:bc:63:3d:d4:01:
         17:65:9e:12:41:68:96:0e:fd:72:60:14:d1:3d:2c:18:3c:c8:
         d7:2a:1b:1e:a5:a1:4f:06:55:b9:53:a7:c7:85:51:99:72:b3:
         d9:47:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:49:09 2025 by rpki-client