Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ddec0578-8a4b-3ae8-90bf-2d7f855dddf2.roa
File:                     ddec0578-8a4b-3ae8-90bf-2d7f855dddf2.roa (raw, json)
Hash identifier:          W9EWldyc7WshJ5lFf9hFsAwPZlSn7wmti89S4S+HNVA=
Subject key identifier:   74:B9:62:EB:E1:B5:B1:F8:B7:A7:08:24:71:70:82:CA:5A:A5:4F:EB
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AC2E0EE5B796DCF1A84C83C40
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ddec0578-8a4b-3ae8-90bf-2d7f855dddf2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2605:dd40:8f00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ee:5b:79:6d:cf:1a:84:c8:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a34b0a86-1008-4e7e-b612-6f22eda3f794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:f1:cb:51:c3:d2:c9:48:26:e8:23:f6:29:
                    fe:fa:b2:4b:f7:8c:9b:3b:01:49:58:74:45:cd:54:
                    d8:02:d9:70:cd:c3:e2:c7:cd:ec:36:23:f5:d9:a9:
                    8f:64:e9:00:d5:5f:e0:1f:5c:99:aa:75:d1:ca:30:
                    f7:4c:14:11:1e:4f:bb:d7:61:82:32:ce:d8:82:00:
                    cc:60:eb:e4:80:b4:9a:ae:f9:4b:ec:2d:e9:74:c1:
                    2c:e8:94:af:82:23:5e:73:b3:1f:87:cd:fb:ff:d3:
                    a8:83:d6:b3:e6:ca:0a:af:14:21:6a:d2:e3:38:33:
                    9b:aa:52:7e:26:ed:9c:0b:4d:cc:af:a0:5e:2e:05:
                    71:ef:d8:6a:34:ce:cf:62:57:c6:3e:6f:80:79:87:
                    ca:0c:50:e0:78:74:ca:dd:c5:75:eb:44:b0:50:94:
                    27:53:fe:8a:76:05:c8:66:e3:72:09:19:db:66:14:
                    32:78:ec:64:24:89:af:e5:15:dd:af:dd:a5:65:ee:
                    5d:ca:3e:05:0d:18:34:f3:7e:a5:07:22:c4:c9:eb:
                    1e:19:a9:d7:7d:42:96:df:8e:9d:64:92:a4:a3:8b:
                    55:e8:9e:ff:6c:87:f5:29:7f:d7:97:bd:dc:1e:d9:
                    90:59:ec:6a:78:25:80:06:b6:de:a3:9c:1b:fd:17:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:62:EB:E1:B5:B1:F8:B7:A7:08:24:71:70:82:CA:5A:A5:4F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ddec0578-8a4b-3ae8-90bf-2d7f855dddf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:2d:2c:4e:99:8b:84:54:d3:07:2e:69:04:20:6e:90:2e:
         3d:1e:bd:29:f0:b8:47:dd:3f:81:78:cc:f0:92:3e:36:00:bf:
         6f:6e:f7:9c:1b:1f:62:a0:3e:b3:4d:02:41:1d:26:9b:94:c4:
         e3:6f:25:06:40:9c:88:93:3f:e3:ea:b1:9f:28:8d:2a:b7:6f:
         9e:fe:9c:f1:ee:51:fe:46:00:39:d8:98:34:20:92:30:07:95:
         88:69:2e:3c:cb:2b:80:74:07:b3:07:2c:85:0c:2a:d9:5c:94:
         96:c9:22:13:4e:78:3c:78:dd:c1:02:f4:0a:93:98:12:52:91:
         72:92:f1:5f:67:0c:52:78:41:2c:a4:7f:35:97:90:e7:44:ea:
         8d:8d:b8:a8:cd:ba:d7:54:54:37:56:60:18:df:07:35:9f:bc:
         bc:96:c2:c8:1e:ec:96:b6:d1:ff:5f:41:e5:54:df:25:eb:e4:
         6b:3a:3a:cb:c0:69:f1:ae:31:2a:4a:be:39:c5:64:2d:51:a4:
         e5:63:3d:6d:07:f4:46:9d:0a:0c:20:e9:ed:84:1e:cf:6b:d7:
         6f:50:7e:01:1b:fc:d0:3a:e3:b8:44:24:50:50:55:45:3c:fb:
         7b:66:0d:d3:85:70:9d:2c:aa:da:ae:ab:11:ca:5e:41:77:6e:
         7c:56:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:23 2025 by rpki-client