Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa
File:                     886a5ab4-c808-3689-b626-09e4a20d87e0.roa (raw, json)
Hash identifier:          MYamuoCJlIHNPt+uUfY9WIz09+01XSWbbpZFXpVwVTg=
Subject key identifier:   05:CE:8C:69:CF:FB:40:84:3C:90:8E:91:91:EC:CA:87:4A:27:87:EE
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285845BD1056D9481FDB71A3413580
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa
Signing time:             Thu 02 May 2024 11:06:46 +0000
ROA not before:           Thu 02 May 2024 11:06:46 +0000
ROA not after:            Wed 31 Jul 2024 11:06:46 +0000
asID:                     396416
IP address blocks:        2602:fb78:20::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:40::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:10:56:d9:48:1f:db:71:a3:41:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  2 11:06:46 2024 GMT
            Not After : Jul 31 11:06:46 2024 GMT
        Subject: CN=ec7d7da6-f7ed-4d0a-86d1-6040ed29fe8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:9a:2b:20:7b:77:4e:f8:70:f7:cc:28:e1:
                    0c:2a:c6:ca:3f:76:35:bb:22:03:e6:0d:39:7a:cb:
                    03:64:75:e2:0e:be:80:b3:93:e5:d3:3f:e3:7f:6d:
                    52:2b:c3:a8:ce:5a:91:b4:bb:10:34:12:b6:a9:7c:
                    31:cf:02:22:c8:86:cb:a1:1d:a9:96:36:1b:c4:74:
                    62:32:8e:63:75:15:ed:45:b4:fe:b1:75:7b:86:33:
                    5b:57:73:44:36:2c:7c:f3:97:78:18:ee:af:76:c1:
                    86:2d:38:8e:ea:ae:72:26:a9:0d:28:6b:fe:01:f4:
                    3e:52:9c:3a:20:56:38:bf:37:c1:4f:b1:a5:37:d7:
                    e6:6a:24:be:72:48:25:3b:9e:57:db:1e:ad:cb:d9:
                    03:91:c4:bc:21:57:b7:c5:0e:f4:01:94:c2:6f:f6:
                    26:01:0f:5f:4c:ff:74:d3:51:46:11:5b:85:83:58:
                    5d:47:47:09:a2:a6:4b:fb:50:83:61:82:66:ea:d3:
                    2f:d0:f5:e8:39:75:a9:b2:a3:a0:3c:0a:c0:58:be:
                    25:10:28:26:e3:4d:79:70:ff:f5:b9:2f:63:76:9a:
                    5a:59:11:6c:c8:2b:b9:0d:38:d9:94:04:5c:a4:59:
                    60:97:e8:5d:61:cb:9f:3a:e8:f7:3f:fb:2c:c5:c5:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CE:8C:69:CF:FB:40:84:3C:90:8E:91:91:EC:CA:87:4A:27:87:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/886a5ab4-c808-3689-b626-09e4a20d87e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:20::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:00:99:e7:fc:55:28:5b:2f:c7:e3:62:7d:43:0b:b2:fb:
         5c:59:ef:58:45:e9:f6:45:4c:da:57:0b:e7:64:a8:f8:13:b3:
         46:cf:e0:ec:f5:c4:a8:05:98:27:80:30:5a:34:47:fa:e3:ea:
         81:55:bc:f8:fb:74:5d:2b:c9:71:63:cb:aa:a2:52:16:b3:a4:
         c1:50:8b:cc:45:d5:10:e7:95:e6:8d:ab:60:21:7f:98:0d:e2:
         8b:46:83:c5:41:5d:0f:f5:5e:a4:cf:28:0c:2f:d1:96:1c:06:
         3a:2a:29:c5:c7:37:b1:f5:4a:53:49:9f:c9:df:75:09:fd:f2:
         17:9e:2c:1e:cd:93:5a:db:fb:4f:e9:02:24:d0:2f:ba:8d:ff:
         7d:49:33:48:24:23:f7:5f:62:f2:db:7a:ec:b0:b5:8f:4b:c4:
         51:d3:b7:7d:53:84:ef:9b:8c:ee:ab:b5:ec:ac:19:a1:be:f8:
         ed:18:d7:0d:b6:ff:51:c0:ec:e4:b3:1f:bc:1c:85:8d:7a:16:
         29:be:e2:da:f7:65:1a:26:e4:00:73:71:87:4b:b3:3a:7c:dc:
         af:54:50:23:c7:de:75:9e:62:2d:4c:87:1e:3a:1c:c5:3c:76:
         40:7a:a6:fd:cf:9f:e7:9d:8c:7e:a5:ca:a2:d5:9b:73:a6:d6:
         f2:43:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:49 2024 by rpki-client on console-fra.rpki-client.org