Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78cf9853-7a02-3216-817a-e2126b1cd8a7.roa
File:                     78cf9853-7a02-3216-817a-e2126b1cd8a7.roa (raw, json)
Hash identifier:          HgGn4meCtggXFmqujzdLfei4nqJ2YtLHNmtWKMq5ttk=
Subject key identifier:   0C:75:DB:55:40:E5:94:9F:E7:49:5C:65:54:D6:BD:E8:8B:37:C1:FE
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F432858491AA6AD8DAD22EBA55D419900
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78cf9853-7a02-3216-817a-e2126b1cd8a7.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     3423
IP address blocks:        2602:fbdc:83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ad:8d:ad:22:eb:a5:5d:41:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=d3add809-0c91-4df9-b563-8d47b5ecf315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:37:a0:cb:83:e6:3d:b4:55:17:55:65:e9:53:
                    8e:ec:5d:fb:a2:ff:cc:b3:1f:d7:d0:7b:f3:0a:5d:
                    76:be:ac:17:24:4b:6f:51:e0:ff:ab:ef:79:18:bd:
                    dd:63:93:74:79:75:6a:e3:fa:04:8d:d5:9b:ff:85:
                    b7:4d:01:b0:18:c8:3c:65:fe:2b:fc:38:4c:9c:15:
                    9b:dc:a2:a7:f0:1f:09:dd:60:7d:1a:78:fa:66:fc:
                    18:4a:ed:c3:f6:69:a0:e1:4c:19:0c:81:16:b0:73:
                    3f:e6:74:30:8c:23:cb:01:35:9c:33:45:cf:dd:10:
                    fb:ab:56:85:bd:3a:8d:69:74:bd:13:b1:99:02:52:
                    3f:5d:00:40:e1:bd:0e:8a:00:a4:3d:4d:ab:8e:53:
                    7b:76:dc:45:15:a4:a2:0b:d6:96:69:4d:0e:a1:73:
                    7e:a0:ae:64:b6:0d:72:49:79:fc:8f:bb:d6:65:9e:
                    78:42:73:cb:73:7a:e5:22:9a:40:42:f8:fa:ac:c6:
                    dd:10:2d:a3:7d:4b:81:f2:94:66:b9:06:14:e2:88:
                    db:d8:4c:df:b5:c9:27:55:5c:9d:3f:ff:b9:5e:79:
                    96:4b:8d:a9:77:a5:40:7d:7d:7c:e9:51:77:8d:b0:
                    c2:3f:34:bc:4d:48:26:9b:c4:24:9b:f1:d1:44:02:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:DB:55:40:E5:94:9F:E7:49:5C:65:54:D6:BD:E8:8B:37:C1:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78cf9853-7a02-3216-817a-e2126b1cd8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:83::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:da:ff:d0:65:57:5a:85:22:d3:7d:3d:e3:08:1c:f4:e4:35:
         25:b6:9c:e6:d9:20:21:6e:58:30:54:a4:b7:87:ec:4d:31:c7:
         4f:06:d8:79:1e:df:8b:52:99:2b:31:54:71:41:d6:6f:92:e0:
         9b:40:53:e9:a8:89:cf:78:91:01:1e:fe:11:03:3e:37:aa:3b:
         18:9e:49:c5:de:d9:64:f9:11:c6:16:32:46:32:cb:71:c7:6c:
         4e:b8:e4:3e:b0:e3:25:a4:ad:2c:d4:76:ca:ef:12:62:85:9c:
         84:37:0f:b1:1a:f4:81:a8:20:b1:a8:56:8a:71:d8:ad:45:eb:
         ed:94:0d:dc:be:9f:4f:7c:a4:2e:53:89:71:f6:74:48:4d:98:
         b8:c8:67:39:97:ca:6c:96:03:37:34:c1:80:c5:6e:85:e9:47:
         13:cb:16:e1:c9:b2:b5:aa:ab:d7:7a:ee:7e:e6:2d:df:d7:38:
         1c:ce:95:38:c5:e2:88:32:70:4a:cb:bc:93:da:cb:fa:b3:97:
         18:b3:b0:64:b9:77:ee:b6:f4:4e:c5:19:4b:5f:55:2e:9b:07:
         a8:b2:f9:fa:0f:3f:05:8f:88:bb:b9:80:c1:47:f0:69:8b:11:
         8c:72:10:2c:80:68:a3:2f:0c:00:86:0c:85:69:a7:bb:4d:7b:
         da:07:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:41 2025 by rpki-client