Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
File:                     d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa (raw, json)
Hash identifier:          4Td/+det9YYFmo6sAnHhLk+SJly3uII63SqABKgxzHI=
Subject key identifier:   81:D1:5E:08:C6:64:D0:D0:0B:9E:88:40:23:F9:4D:8D:E1:29:82:56
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285845BA66E31D76D334D99BFD3980
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
Signing time:             Wed 01 May 2024 12:13:44 +0000
ROA not before:           Wed 01 May 2024 12:13:44 +0000
ROA not after:            Tue 30 Jul 2024 12:13:44 +0000
asID:                     396416
IP address blocks:        2602:fb78:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:66:e3:1d:76:d3:34:d9:9b:fd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  1 12:13:44 2024 GMT
            Not After : Jul 30 12:13:44 2024 GMT
        Subject: CN=781730dc-7e54-48ac-b929-8bf49ae3c6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:40:48:30:c5:b6:74:d2:5e:c6:36:8b:0f:
                    64:4f:a5:6e:e6:e8:5e:25:7d:9f:5f:24:60:98:98:
                    1c:a3:e7:4a:85:79:86:d8:42:68:15:d9:ab:d9:36:
                    fb:04:6a:c3:8f:25:8a:59:d9:16:ad:4d:e9:c8:9c:
                    68:38:7e:c8:e4:2c:b9:05:9a:1d:a0:53:85:02:30:
                    48:96:80:7b:1f:b5:e5:7e:58:de:1f:92:f2:5b:ef:
                    66:f4:b9:02:47:c5:77:fb:18:a4:39:8f:78:92:c1:
                    6d:15:08:bc:d6:24:c1:1c:2f:c2:ef:90:87:52:fb:
                    65:fa:ea:c4:e2:16:cd:c2:16:91:63:00:fe:f5:ec:
                    ac:57:dd:15:dd:c6:a7:b1:10:70:00:eb:c5:f5:b9:
                    62:1f:37:d0:bb:bf:86:6f:37:85:a7:57:10:ab:ab:
                    55:f1:5c:be:c0:3d:76:c1:92:71:a0:a3:b7:6f:aa:
                    89:c9:16:cf:9c:98:cf:98:63:aa:68:d7:f6:62:bd:
                    dc:19:97:10:30:dd:44:54:9b:45:42:b2:3b:85:f7:
                    91:e0:33:24:32:af:0f:f2:9c:f9:fe:ff:60:40:5a:
                    dc:51:45:f2:c0:0b:1d:e2:7a:19:f4:92:db:d3:e2:
                    b4:7e:f4:78:a6:e1:79:60:55:7e:8a:1b:3e:5b:ef:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D1:5E:08:C6:64:D0:D0:0B:9E:88:40:23:F9:4D:8D:E1:29:82:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:ad:b6:9f:46:dc:e2:af:b6:d3:c3:7d:65:cb:4d:d4:ad:
         9f:09:c9:b0:fc:4a:e2:a4:c1:66:15:55:28:ea:76:22:67:7f:
         23:72:1b:08:e4:9a:34:78:a4:ba:f7:f5:f7:6d:57:bf:a7:5b:
         4b:98:f9:8d:c7:0c:72:72:c6:3f:f6:3c:6f:2f:54:0e:b4:47:
         3d:89:52:6e:b8:9f:20:83:e1:d0:ba:7f:db:b7:56:d6:4e:f3:
         23:4b:94:b5:4a:22:8a:27:ef:da:21:00:a2:de:46:49:c0:4f:
         d5:ef:ac:ac:31:79:b0:da:bd:eb:d5:87:27:05:f3:04:15:26:
         10:23:ae:a3:e9:c2:6a:58:fb:bb:67:e2:26:8d:4c:82:ac:41:
         12:2a:ce:06:a6:33:fe:f9:bb:72:d3:29:ed:4b:56:47:a0:ba:
         90:11:ef:fc:18:b6:e6:3e:0e:46:09:f3:e5:5b:07:7c:48:12:
         ce:4e:31:2d:eb:fe:67:21:54:7c:90:5a:28:b2:4a:b0:7c:17:
         3c:59:04:f7:ae:7d:68:52:5a:e1:84:8c:34:67:bd:ea:80:4e:
         9f:b0:c3:ab:bd:06:81:f2:5a:c4:c0:51:43:ab:6e:b5:18:b9:
         02:60:31:1b:31:84:8c:e1:e2:b3:38:a9:d2:91:37:6c:1a:58:
         77:98:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:35:09 2024 by rpki-client on console-fra.rpki-client.org