Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa
File:                     cf3cda41-0474-3ce2-924d-84527b3062ff.roa (raw, json)
Hash identifier:          Bc2kZzZccHHG4n86Rt3BLSaZOIwDAITNdxLXi2F8xNA=
Subject key identifier:   DF:40:54:38:F9:00:76:79:A2:86:98:3E:3A:F4:89:04:D8:7E:28:12
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A07D528970BD4EBBE8808B820
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     398549
IP address blocks:        2605:dd40:5bbb::/48 maxlen: 48
                          2605:dd40:5ccc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:28:97:0b:d4:eb:be:88:08:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=c70a87db-482e-468e-a16c-66c4a63c59dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:df:37:13:9a:78:28:57:00:81:87:a3:7b:
                    6e:25:75:19:30:9f:89:64:43:05:b6:d3:62:cd:87:
                    76:60:72:7e:5d:65:df:6c:15:41:33:e5:83:9a:09:
                    f5:6a:5f:77:7e:3d:6f:42:85:2c:d2:1b:ce:ce:23:
                    ba:c8:82:bf:d3:fb:a0:9e:68:b6:8b:01:49:dd:8b:
                    71:6b:05:ff:95:65:62:c8:b7:ec:72:51:3b:d5:95:
                    a8:e6:4b:80:dd:61:c8:5c:c4:37:c2:84:fb:9d:b7:
                    18:0b:f1:ab:46:36:12:9e:7c:c0:a9:b1:49:a7:25:
                    7f:7b:31:5c:44:bc:73:54:46:55:bd:fa:75:1d:cc:
                    4f:17:56:0a:be:70:5d:27:86:d4:60:7c:e1:9b:8f:
                    63:d8:1c:56:68:c4:1b:9a:25:9b:36:32:62:d1:32:
                    0f:d3:55:1a:ad:33:77:34:ab:31:9e:05:ef:34:63:
                    c9:35:63:6b:b0:c2:ea:ee:de:fc:03:40:bf:45:e3:
                    57:e9:5b:bd:f9:c0:9f:42:cb:94:af:a4:90:2e:94:
                    ed:ff:93:70:f3:5f:3c:51:a7:42:c7:e6:7d:b9:51:
                    db:66:b2:8a:22:e7:85:2c:1c:de:dd:f2:69:7b:7b:
                    e7:f7:c7:06:58:f8:e9:c9:94:66:2e:74:17:3e:d2:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:40:54:38:F9:00:76:79:A2:86:98:3E:3A:F4:89:04:D8:7E:28:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:5bbb::/48
                  2605:dd40:5ccc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d8:1d:39:92:d3:68:da:52:62:cc:f5:f4:87:a3:8e:98:ca:
         28:ac:79:15:e3:d0:b2:13:98:90:cd:e6:fb:5e:38:35:7c:9c:
         49:e7:47:42:c1:42:fa:89:ed:9d:1e:81:5f:61:d7:3d:c0:de:
         98:73:06:fb:bc:44:31:11:6c:6b:f7:b1:72:30:48:ef:6b:27:
         c2:a4:9a:54:d9:49:12:85:02:e8:42:69:48:36:0e:74:b7:6f:
         8b:81:e5:e1:b1:30:49:0f:05:e2:c0:3e:b0:b2:50:7d:f7:bb:
         57:f8:fb:a5:0c:63:29:95:f5:ec:de:14:c4:16:71:53:e6:af:
         23:74:23:f5:f4:74:b5:3b:f1:80:b6:98:6c:c7:c8:48:60:2d:
         85:cd:2c:6e:a5:7b:0b:f0:76:55:46:40:cb:75:36:7a:5f:e3:
         7f:2e:e2:b4:d4:a5:33:8e:53:ee:8b:f9:81:d7:44:37:20:c6:
         da:07:24:23:e1:e2:d6:18:62:8e:1a:e7:a2:1f:bb:bb:0e:be:
         9d:7f:56:ce:46:bc:19:25:d3:d1:9e:c4:5a:a5:8e:12:41:e9:
         17:c6:8c:57:cb:90:87:34:f2:65:28:94:ed:fd:6d:dd:2b:57:
         77:8f:d5:68:ae:19:b7:29:32:10:4f:45:3c:95:72:56:9c:a3:
         73:be:10:6d
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEoH1SiXC9TrvogIuCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
YzcwYTg3ZGItNDgyZS00NjhlLWExNmMtNjZjNGE2M2M1OWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMnfNxOaeChXAIGHo3tuJXUZMJ+JZEMFttNi
zYd2YHJ+XWXfbBVBM+WDmgn1al93fj1vQoUs0hvOziO6yIK/0/ugnmi2iwFJ3Ytx
awX/lWViyLfsclE71ZWo5kuA3WHIXMQ3woT7nbcYC/GrRjYSnnzAqbFJpyV/ezFc
RLxzVEZVvfp1HcxPF1YKvnBdJ4bUYHzhm49j2BxWaMQbmiWbNjJi0TIP01UarTN3
NKsxngXvNGPJNWNrsMLq7t78A0C/ReNX6Vu9+cCfQsuUr6SQLpTt/5Nw8188UadC
x+Z9uVHbZrKKIueFLBze3fJpe3vn98cGWPjpyZRmLnQXPtIZIwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFN9AVDj5AHZ5ooaYPjr0iQTYfigSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvY2YzY2RhNDEtMDQ3NC0z
Y2UyLTkyNGQtODQ1MjdiMzA2MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgXdQFu7
AwcAJgXdQFzMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAArYHTmS02jaUmLM9fSHo46YyiiseRXj0LITmJDN
5vteODV8nEnnR0LBQvqJ7Z0egV9h1z3A3phzBvu8RDERbGv3sXIwSO9rJ8KkmlTZ
SRKFAuhCaUg2DnS3b4uB5eGxMEkPBeLAPrCyUH33u1f4+6UMYymV9ezeFMQWcVPm
ryN0I/X0dLU78YC2mGzHyEhgLYXNLG6lewvwdlVGQMt1Nnpf438u4rTUpTOOU+6L
+YHXRDcgxtoHJCPh4tYYYo4a56Ifu7sOvp1/Vs5GvBkl09GexFqljhJB6RfGjFfL
kIc08mUolO39bd0rV3eP1WiuGbcpMhBPRTyVclaco3O+EG0=
-----END CERTIFICATE-----
Generated at Wed Jun 18 09:54:01 2025 by rpki-client