Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
File:                     ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa (raw, json)
Hash identifier:          94UEGe1a5mJwneTk6ZaH/ak0Yg/M1cqilJE3MCEdtV4=
Subject key identifier:   AA:E8:79:84:BC:3E:28:67:9E:38:D3:45:EC:C2:F8:0C:73:37:61:94
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285849D16506A91A7AE1DA3BE75580
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     398549
IP address blocks:        2605:dd40:8225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:06:a9:1a:7a:e1:da:3b:e7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=285d6e23-10cb-4e23-b5f4-e6cbf3d00842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:78:86:26:47:b1:08:15:28:9e:c9:ef:58:
                    52:21:d6:3f:99:5d:53:78:08:a9:7a:45:72:3a:7e:
                    b1:25:2e:4a:8e:f5:46:79:b5:a1:6c:fb:eb:af:fb:
                    8c:76:dd:2e:55:e3:35:6e:cb:30:2c:a2:00:b4:63:
                    24:da:70:5b:ce:c4:cd:9f:74:03:3b:d6:9c:bf:00:
                    3b:ed:a8:df:8f:b9:5b:f9:df:60:46:0e:0d:88:35:
                    61:ea:44:84:4a:e1:20:d0:60:c1:1e:05:15:66:73:
                    55:ac:13:39:05:ce:ee:17:00:19:6d:cc:e9:13:47:
                    7e:94:c8:60:0c:05:e1:e8:4d:60:cb:2f:e5:57:7e:
                    9c:4c:18:bd:56:35:fb:ce:0c:c6:2f:ad:c3:77:41:
                    33:d6:b5:e3:72:cd:00:5c:d7:7c:b0:a2:83:f6:83:
                    5b:5c:8a:18:4b:2c:f5:0d:d1:31:6b:52:51:3f:af:
                    0d:93:12:aa:b7:d4:52:78:aa:18:7e:51:dc:a6:41:
                    92:3f:c8:69:b5:a1:a5:26:41:e4:d7:6d:59:4b:33:
                    fc:b2:d7:21:81:c7:aa:86:7c:50:82:5b:ec:e0:6d:
                    fa:1e:fc:f5:91:6c:f2:c1:28:4e:61:98:df:5b:49:
                    a7:46:8f:80:4f:a2:fa:6c:c4:11:4f:0b:78:e8:2e:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E8:79:84:BC:3E:28:67:9E:38:D3:45:EC:C2:F8:0C:73:37:61:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:d6:f8:0a:de:42:bf:ee:c1:dd:fb:52:8f:60:14:ef:8e:
         99:8b:bb:c7:45:ac:84:2e:68:e4:b5:f4:5d:5c:04:54:89:29:
         66:bf:24:57:23:65:5f:6a:4f:8b:03:82:9d:ff:3d:a3:3f:e3:
         16:3b:bf:29:5f:9e:d4:c5:cc:81:7d:5c:9a:73:cd:1f:c8:36:
         84:48:2e:1b:64:66:6d:d6:58:4c:e1:78:5f:6d:c1:4a:cc:ea:
         d3:05:b4:7f:87:d8:a4:b1:fd:92:d6:d9:65:58:13:a9:c7:26:
         a4:94:35:ae:fb:13:a3:81:d0:e6:9f:6c:01:04:a5:df:d7:b0:
         aa:93:d7:e5:b4:0a:df:b2:3a:6e:25:26:93:75:f3:7f:a0:db:
         be:81:a7:a5:50:ef:e9:5d:be:d8:a4:f6:dd:7c:f4:68:10:a2:
         db:67:2d:b6:7d:78:3c:0a:d7:87:d1:c6:17:f3:97:08:98:34:
         0f:f3:b1:3c:d0:80:08:97:76:31:a3:db:58:66:7d:a0:e3:51:
         98:4c:b1:b9:ae:e9:d5:f2:4e:6c:ab:73:cf:37:fb:c1:73:6c:
         03:77:2f:c4:ba:08:f6:62:c1:24:89:44:7f:80:7d:5f:2d:e0:
         bd:de:5f:db:51:94:c0:cc:59:2a:5d:ef:ad:33:82:d7:9e:9e:
         ec:90:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:08:40 2025 by rpki-client