Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
File:                     5be2e925-6eeb-349e-ad3e-ab3178d20506.roa (raw, json)
Hash identifier:          TE42PGNwHJlHgmNCqlalDco3/1gv4DkJomZIb0rNroM=
Subject key identifier:   D3:EE:66:6B:BC:71:76:F2:64:8B:DA:31:19:A6:88:EF:ED:E2:B3:68
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584981D4546CA5132A89802F5700
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398549
IP address blocks:        2605:dd40:8333::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:54:6c:a5:13:2a:89:80:2f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=97a99ea1-6f91-4e8f-ba5f-5af38c693c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dd:2e:6f:a2:de:69:41:a1:02:71:5e:9e:e5:
                    79:47:ea:3b:ea:37:62:93:59:e0:65:92:50:cc:d9:
                    d8:d5:ca:76:0a:a5:d2:0e:47:10:13:b1:2c:35:db:
                    26:f4:29:56:fc:e2:e2:2a:90:e5:41:a3:58:1e:56:
                    ae:68:39:59:3b:d1:04:cc:a3:90:cf:c9:54:ca:38:
                    88:2d:23:f3:2a:ee:05:3f:35:86:7b:48:7d:1b:88:
                    b6:65:59:00:0b:76:81:5c:ff:01:10:a7:bc:41:9b:
                    71:f1:4d:d5:b5:32:95:c3:4d:b5:46:a2:4c:cf:ff:
                    37:d5:5f:79:bf:c0:2d:c1:cb:db:73:36:42:9a:6b:
                    b6:e2:be:c5:4b:ff:08:c0:11:54:cd:af:ca:f9:60:
                    c7:cf:44:c4:08:8e:d0:aa:14:93:56:cf:de:9f:0b:
                    5b:ba:4b:1f:c0:87:39:70:42:e7:53:54:f6:8e:0b:
                    21:43:58:78:29:87:60:5e:70:28:c9:dd:72:ab:c6:
                    79:d6:39:fa:13:2c:a4:20:74:ec:6f:cb:52:de:0e:
                    b2:05:d4:2e:9a:c6:6d:5c:98:00:d7:44:79:32:c4:
                    d4:1e:d0:78:7a:af:c9:7e:d4:83:86:96:07:47:c3:
                    62:53:78:b7:69:61:cf:ca:a4:12:df:bd:cf:03:a0:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:66:6B:BC:71:76:F2:64:8B:DA:31:19:A6:88:EF:ED:E2:B3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:3f:f9:5b:67:7e:bd:6f:38:d5:16:5d:0e:e1:a2:e0:52:
         08:c2:33:20:93:8b:cd:39:70:a4:96:1f:a2:eb:c2:22:33:e4:
         fe:61:5f:3f:0a:8e:13:0d:15:44:88:1e:ad:07:70:af:77:f3:
         ad:31:2c:07:6c:8d:c6:12:a7:15:6f:ae:de:b4:54:52:80:5e:
         44:3d:fd:0e:1c:35:84:5d:01:e0:3c:f5:d2:ad:b3:56:f6:bb:
         5d:ad:82:07:14:8a:1e:51:ea:fb:6f:10:b5:89:c0:af:a1:12:
         6c:34:87:b1:06:40:7a:e1:9e:5e:c9:fd:81:bd:03:68:50:a0:
         32:86:9e:60:68:4c:db:26:41:29:65:0a:33:a2:d0:d5:4e:96:
         d8:54:60:04:eb:98:96:2b:c3:82:81:8a:67:a3:ae:23:77:02:
         d1:05:4b:e9:79:aa:d9:97:77:fc:2b:c7:de:a3:06:bc:39:ca:
         7a:56:8c:e6:7e:30:50:ce:fb:38:7e:33:13:82:1d:f9:4e:fc:
         28:48:2f:87:53:35:0c:da:d9:ba:b2:fd:4c:c3:c0:8b:6e:0f:
         52:7a:aa:ce:72:5b:07:78:00:aa:93:6c:80:3f:8e:18:5d:df:
         01:fe:12:03:53:1b:01:f4:92:81:19:6d:67:48:19:3d:f1:1b:
         f4:e2:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:07:13 2025 by rpki-client