Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
File:                     88e83136-5413-348d-8079-fc1adfac452e.roa (raw, json)
Hash identifier:          0tHJ7ynp8J98juMnzbBQ04YRuKAs0d1xLmHpYQOIKik=
Subject key identifier:   76:CB:86:6A:EE:0A:61:2D:78:59:79:1F:43:C3:19:31:7B:D0:28:2D
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584953C44A2FE21BB7D7587DBB00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/41 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4a:2f:e2:1b:b7:d7:58:7d:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6e9ec390-6328-4d47-bdcc-e1df3eb34a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:3d:10:a7:6c:f6:99:26:a9:94:03:d3:30:
                    75:d8:c5:7b:44:6b:2b:17:36:70:01:63:4f:2c:fb:
                    69:66:f7:35:eb:4a:c6:c3:e1:38:26:54:ea:e2:d3:
                    4d:ec:c8:28:02:4d:ed:b3:09:b6:06:a5:42:36:2a:
                    d1:1e:03:fd:c8:cf:d2:f8:90:19:44:cf:bc:14:e9:
                    55:20:ed:48:32:6a:47:14:61:cf:9d:30:7c:af:78:
                    2b:8d:ba:59:e0:83:c5:16:9b:7f:fa:d7:36:c9:67:
                    3d:8c:33:10:f4:56:cb:98:9f:81:df:af:e5:ca:1d:
                    49:a0:e7:c1:62:b5:92:a4:6d:ed:30:22:b1:34:df:
                    8a:83:4d:29:41:0c:23:d1:3c:42:6c:98:39:46:c9:
                    54:03:15:73:98:ff:03:87:ad:86:a8:c5:b5:7c:5d:
                    30:d2:f7:54:36:56:99:5f:75:52:6d:0c:d4:fe:bd:
                    b1:58:4b:40:62:05:94:83:56:cf:17:b3:eb:ac:28:
                    4e:cd:ab:1e:cd:49:34:1c:3b:5f:10:ae:23:4d:5d:
                    2e:a0:39:4d:e3:92:8b:e2:38:80:ef:9f:2c:12:b5:
                    4f:de:8f:5f:47:fb:3d:c5:27:f3:8c:46:ce:d1:97:
                    e8:cb:55:0d:89:25:28:6a:4d:fb:cc:7f:f1:bc:e7:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:86:6A:EE:0A:61:2D:78:59:79:1F:43:C3:19:31:7B:D0:28:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:32:44:f4:15:88:d3:7f:e3:80:8a:68:f2:9f:27:63:18:e3:
         3f:2e:7b:68:48:eb:40:d3:b8:ed:26:2a:d6:38:9f:77:83:37:
         72:1d:4c:9f:f0:a3:f4:eb:60:12:4d:cd:98:2c:0a:87:18:6f:
         ef:27:fd:0a:5d:ce:01:7f:de:62:b7:0a:f1:af:5b:3c:8a:3d:
         7b:cf:87:15:95:ff:2e:95:84:93:e9:94:0f:56:b2:b7:49:7a:
         44:e8:2e:3c:d4:e5:88:d2:84:bc:59:d1:74:8c:f1:4f:09:96:
         fb:83:18:71:56:d6:6e:bd:d3:90:e7:4b:ac:d9:ae:c5:36:6a:
         cf:9d:a9:b9:c6:d1:09:48:8c:11:4f:83:e6:62:c3:7d:d6:06:
         13:17:f7:32:c2:2f:b4:fd:f5:56:42:bf:52:ef:43:42:0d:ce:
         da:0d:73:e2:8a:23:67:8f:30:c8:3f:8c:ae:99:f1:fa:4f:54:
         02:a1:ef:d5:01:90:c8:7c:fe:be:03:7e:8f:df:3d:61:b2:77:
         47:00:98:a7:9d:06:60:11:f3:e0:d8:16:36:8d:b3:50:2a:3b:
         7a:da:9d:78:20:d9:e9:b9:2d:62:07:4f:cd:cf:9f:91:e7:30:
         e4:8b:3a:7a:de:65:6a:8d:b9:ad:91:ab:bd:30:1f:d0:b4:4f:
         75:58:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:59:59 2025 by rpki-client