Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/aa164057-3e2e-3ace-b51a-994282cb1de8.roa
File:                     aa164057-3e2e-3ace-b51a-994282cb1de8.roa (raw, json)
Hash identifier:          NldEundUSvwytY3C+521FR8AmrJpMH1kcmzBZPKCjVU=
Subject key identifier:   B9:F9:FA:48:7C:D0:D6:08:AE:A9:67:35:31:B2:61:44:C7:AB:20:E6
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A1E2AAAC98B7EC3C74C1A9D60
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/aa164057-3e2e-3ace-b51a-994282cb1de8.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     398549
IP address blocks:        2605:dd40:10::/44 maxlen: 44
                          2605:dd40:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:aa:c9:8b:7e:c3:c7:4c:1a:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=ea4162b6-deba-41cd-8181-36c500008556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7a:35:d0:0c:76:c6:c4:8e:9e:59:58:5a:77:
                    b3:11:d2:b7:f8:00:03:da:72:d5:b5:7c:46:08:fc:
                    09:bb:19:25:ae:bb:1f:25:ed:f5:58:4b:cf:c6:73:
                    f6:b6:6b:91:48:ea:35:92:0d:40:72:00:e0:6b:e5:
                    d8:0b:91:a8:dc:aa:b7:2c:68:0d:35:d1:5e:0f:04:
                    8c:7e:cf:0a:7e:33:6f:c5:e2:64:65:6b:32:f1:8b:
                    bf:95:b8:eb:36:63:3f:c7:c2:fd:73:63:d9:7f:9f:
                    cb:82:c5:6f:b4:2e:af:d0:d1:13:c7:c0:e6:52:db:
                    10:cc:15:42:0a:97:b0:c6:06:bb:f2:f2:00:d3:ca:
                    2a:51:8b:5a:5d:12:cb:83:f1:59:1d:f4:f0:c1:ad:
                    94:47:90:aa:60:7d:f4:b8:b3:b9:30:66:8a:96:69:
                    59:77:4c:3b:fd:a1:ca:05:41:11:60:b4:5b:ce:13:
                    b1:42:1d:b6:eb:a7:35:b6:94:38:7e:53:52:2c:74:
                    a4:37:35:1d:53:10:10:8b:6f:72:10:2e:d2:25:dd:
                    78:a2:b6:b3:00:77:66:99:ff:af:74:bc:2b:99:1c:
                    f9:44:0b:4a:19:4b:98:da:70:6c:d0:0b:32:d2:a8:
                    4e:5b:34:04:5d:0e:11:a3:78:fb:78:7c:07:60:99:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:FA:48:7C:D0:D6:08:AE:A9:67:35:31:B2:61:44:C7:AB:20:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/aa164057-3e2e-3ace-b51a-994282cb1de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:10::-2605:dd40:2f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:a3:e0:20:18:b6:d6:f4:84:57:5b:a6:ee:db:db:3b:0c:
         25:7a:96:bc:cd:32:7d:bc:dd:fd:8c:2c:96:af:88:54:c3:02:
         ba:cd:59:d7:a8:75:99:aa:f3:5a:c3:52:54:0e:89:9a:5d:be:
         c9:70:24:d8:dc:30:ac:6c:03:38:af:bc:c1:10:e0:cc:cf:e0:
         c3:06:3f:8a:82:e0:ea:7f:c4:3d:91:fa:97:90:48:7d:d8:e2:
         9d:9c:de:d8:0f:68:2e:b3:1f:d0:c5:1d:bb:a9:f0:07:b6:b5:
         54:4a:c5:49:d2:c7:93:0e:e5:8a:1d:b3:99:1a:46:8a:b7:2d:
         03:f3:97:5a:32:fd:0e:44:45:db:24:ce:b2:f0:57:7c:e3:a5:
         07:f3:63:45:e5:66:9d:ed:a4:54:9c:8c:73:a3:b7:6b:ef:c8:
         94:3b:97:14:58:3a:06:6d:de:34:7a:09:72:18:e4:b2:c6:52:
         fe:6e:b6:a2:4e:b4:ca:c2:a8:da:61:d6:3e:3c:71:32:18:93:
         3d:75:3d:ec:3c:f9:8f:ba:97:26:a2:54:7d:27:ab:d7:da:fd:
         b3:ff:de:90:62:e6:cf:7d:cf:4e:95:4a:a0:77:b7:80:2c:94:
         ca:f7:67:c0:6b:6c:85:0d:9c:a1:3f:f7:f0:7a:87:9f:b3:86:
         70:fe:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:45:36 2025 by rpki-client