Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa
File:                     71e66a14-ce15-383b-b41d-9b4cab79a487.roa (raw, json)
Hash identifier:          tpELzdUhPnLygT2QrGdvhYNMTygBxucW31YP59/+4P4=
Subject key identifier:   FC:A8:83:69:42:E0:F8:50:C0:2E:21:64:C3:F7:5B:DC:6A:B6:C8:31
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584957F4142954F586A5F4D0D080
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/48 maxlen: 48
                          2602:fb78:a0::/48 maxlen: 48
                          2602:fb78:b0::/48 maxlen: 48
                          2602:fb78:c0::/48 maxlen: 48
                          2602:fb78:d0::/48 maxlen: 48
                          2602:fb78:e0::/48 maxlen: 48
                          2602:fb78:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:14:29:54:f5:86:a5:f4:d0:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=cb4db481-f515-42c0-867b-a69e31c75e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:65:84:2b:b3:fe:77:c8:fa:ae:19:cb:44:
                    e2:ed:9f:59:d2:f5:9d:e3:5d:c5:01:50:c9:de:28:
                    69:84:31:31:c2:86:92:d1:85:fa:70:7b:6b:10:37:
                    64:7a:0b:68:78:24:22:89:db:f1:a9:54:54:87:38:
                    d8:30:7f:03:1e:26:0f:72:f2:7a:9c:18:95:90:38:
                    30:40:f6:e6:0b:9c:d5:b3:5f:e6:b0:0a:1e:00:3b:
                    c3:7d:1f:7f:d5:23:27:fd:f7:d0:1a:e9:aa:68:a0:
                    4d:e0:cd:59:29:f2:22:0c:e0:79:b3:e4:f7:3d:31:
                    e8:5f:3a:b6:14:23:23:36:ac:d3:80:64:1e:45:d1:
                    75:ef:7e:c8:9b:39:5f:1a:5f:84:8f:7a:55:35:3f:
                    e9:78:29:df:9d:66:b0:71:2e:79:a3:c3:0b:8e:a9:
                    90:f8:29:7e:0e:00:77:ce:9a:14:5a:2c:f8:bc:f7:
                    77:d7:66:ea:9f:27:7e:1d:bd:33:9b:e9:b3:2d:57:
                    b1:5d:0c:53:88:d3:03:11:36:47:c2:9e:2e:af:b9:
                    57:db:7e:5a:14:f3:87:4d:19:86:d8:30:0b:1a:31:
                    32:7e:9c:5b:f2:02:66:cd:d2:6f:e3:9c:b8:2b:5c:
                    69:12:e3:73:13:91:b5:04:3d:fa:98:b2:f0:f8:d3:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A8:83:69:42:E0:F8:50:C0:2E:21:64:C3:F7:5B:DC:6A:B6:C8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/48
                  2602:fb78:a0::/48
                  2602:fb78:b0::/48
                  2602:fb78:c0::/48
                  2602:fb78:d0::/48
                  2602:fb78:e0::/48
                  2602:fb78:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:89:5b:4b:11:61:14:77:08:c0:43:c0:ff:d9:62:ab:b8:75:
         cd:94:08:80:16:b0:75:d5:53:7c:e4:03:fd:6a:e7:31:f2:49:
         00:5a:34:20:e9:3f:af:8a:72:9e:61:de:37:58:c9:50:33:03:
         e4:a4:7e:ad:16:39:51:ef:36:4b:4a:de:1f:7c:71:34:10:db:
         ef:82:de:94:bf:c2:45:3e:c0:f3:0e:22:8f:62:fc:cb:9a:52:
         ce:fb:1b:7f:a8:31:35:94:d6:eb:68:f8:df:5a:5d:3a:ca:a0:
         13:54:0e:26:c5:46:74:54:65:c3:db:57:4d:11:24:92:0d:02:
         e2:6f:d7:0d:fe:f0:ba:6f:9e:35:a0:19:6e:24:62:ec:f9:6b:
         b3:5e:b7:02:a4:2b:5b:50:a5:bd:f8:93:7e:d3:f7:f3:07:8b:
         c3:ef:5b:a5:31:3a:06:d4:2d:9d:4d:11:02:71:85:fa:c8:cc:
         d9:1d:e3:4b:05:7d:b5:b4:57:97:b8:43:8f:74:b9:bf:78:29:
         b8:e5:0e:33:08:71:6d:57:5e:1c:68:63:30:d6:b7:23:2f:a6:
         c2:e4:eb:80:a4:29:07:09:8e:2f:47:32:e6:1c:7d:29:0f:60:
         31:95:52:cf:69:e9:27:d3:13:e7:f5:09:3f:a3:7d:b2:eb:f4:
         aa:c7:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:30 2025 by rpki-client