Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa
File:                     584ab823-3d75-339d-957f-a33db84341c2.roa (raw, json)
Hash identifier:          BFv1FqmLqrl0KBTyWbfvkFXOQiBecmq+zn3S2dk/nWU=
Subject key identifier:   89:37:12:F5:93:33:88:C8:C6:29:6D:6C:19:D9:DA:22:03:31:B4:B4
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A03A5427C519BAC91413D7180
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     212996
IP address blocks:        2605:dd40:8007::/48 maxlen: 48
                          2605:dd40:8008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:42:7c:51:9b:ac:91:41:3d:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=d902764d-39d4-49f5-917a-07a0b776a6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:16:ec:8e:76:60:a8:fd:5b:22:db:96:43:
                    0b:94:7e:3a:1d:42:81:18:90:33:dc:ee:5c:8a:e2:
                    8b:0f:22:b1:0d:42:b1:d8:57:08:e4:74:8f:3a:d8:
                    db:89:4d:a8:2d:34:b6:8c:24:85:05:2b:53:33:a5:
                    c9:a9:97:c7:29:e7:f2:60:17:ab:a5:04:07:16:4d:
                    57:65:7a:f4:06:67:17:cc:7f:7a:4e:1f:ad:5f:af:
                    8c:a6:c1:f5:f7:ed:c8:76:e2:ff:86:d8:6f:ac:13:
                    a8:93:ed:cd:d4:6d:90:4f:b7:fb:87:2c:ae:36:69:
                    f6:43:48:5f:28:6a:1a:1d:72:75:92:b1:73:a1:14:
                    31:e0:00:a4:19:30:9e:d3:d3:7d:0e:8a:b5:4f:15:
                    80:ad:07:4f:38:c8:41:ac:7c:dd:d4:58:92:4e:cd:
                    09:8c:9c:b3:50:99:0a:02:db:43:e1:27:2d:2a:03:
                    98:49:c2:ae:63:17:34:83:a7:33:1a:18:b4:da:98:
                    7b:0f:2b:a9:0d:86:64:21:c9:0b:af:e0:35:cd:96:
                    a7:91:76:68:31:2a:a1:46:ca:60:8d:9d:b5:88:e8:
                    a7:53:75:a6:24:71:99:ae:88:fc:25:05:36:cc:db:
                    ca:76:d1:53:f7:a4:1c:63:e7:ec:5a:8c:74:c6:2b:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:12:F5:93:33:88:C8:C6:29:6D:6C:19:D9:DA:22:03:31:B4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/584ab823-3d75-339d-957f-a33db84341c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8007::-2605:dd40:8008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:a8:c4:cf:bc:97:74:ea:aa:96:b0:12:62:fe:d1:be:1c:
         24:6a:85:cd:4e:28:e8:49:47:1b:70:a0:3f:41:5f:7a:ec:07:
         25:5b:ba:9d:1d:9d:d9:3c:d4:cb:26:87:96:56:fa:4a:63:a5:
         49:62:99:73:e6:1d:05:89:27:cb:06:ac:3b:48:bb:2a:35:f9:
         64:d5:77:5a:14:55:66:9d:7c:12:3b:33:2b:ac:ba:a5:a0:ae:
         40:c6:d9:3b:7e:56:75:b1:63:01:bb:cc:90:06:e3:8f:37:20:
         4f:31:5a:ae:aa:8f:3b:74:3a:12:34:ef:47:84:6d:2c:cb:bb:
         9b:ab:19:76:52:f5:9f:4f:ba:06:4e:16:96:7d:2f:b7:bf:f6:
         e7:13:e2:43:87:fb:6d:65:81:f2:a9:c7:a0:d2:37:9a:1c:47:
         04:49:29:a2:c0:10:ca:a9:7a:4c:a7:eb:fe:37:ff:01:12:1f:
         68:b8:b9:50:b7:69:d8:2c:ec:20:f6:d7:be:9a:cf:dd:6f:78:
         bb:41:0e:41:a0:c1:da:a4:47:b3:ae:ad:dd:f7:ca:a1:76:a0:
         e8:37:d0:52:bf:fe:d1:7e:19:c8:3a:be:83:78:79:3c:72:4f:
         fe:25:c4:0c:bd:f4:fa:de:0a:78:56:76:96:a3:0c:af:17:ec:
         4e:e9:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:50:14 2025 by rpki-client