Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
File:                     88e83136-5413-348d-8079-fc1adfac452e.roa (raw, json)
Hash identifier:          OyARRRo2fJiYtrEqt3gl3dfv73//7jrFR4slbboCriI=
Subject key identifier:   12:C2:EC:CD:6E:99:17:E4:A5:05:FB:BA:41:03:C7:D0:5A:9F:1C:9E
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285848748B1CD30E5548EE3162F940
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/41 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1c:d3:0e:55:48:ee:31:62:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=a002511d-62c0-4b54-8027-02934d6878e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:a4:a6:b7:f6:71:5a:1b:56:28:f7:5e:77:
                    fe:3d:ba:b5:a8:21:4d:17:e9:a1:d9:4f:60:76:06:
                    5c:00:2f:c0:52:06:8d:6e:64:06:2a:c5:c8:c5:56:
                    48:d3:f4:ba:6e:da:06:1b:0a:80:5c:d2:2f:26:00:
                    f7:a2:9d:ac:ec:b9:ee:ac:56:47:a0:4e:c7:a8:9e:
                    b7:c1:bf:c9:67:d9:39:a8:80:06:6e:83:93:80:d8:
                    c5:96:f6:f8:a1:56:c6:3f:7a:16:71:64:87:44:b2:
                    d5:09:92:e1:ef:9c:52:79:eb:91:08:b9:42:66:7b:
                    5d:47:4a:b4:12:a2:dd:d9:d5:b6:69:6a:7a:dd:51:
                    cb:df:36:ab:7a:ce:c7:f2:f7:68:47:d2:d9:f9:c5:
                    d4:7d:29:bd:19:36:50:4a:35:0a:56:2a:02:7e:46:
                    1d:fa:26:34:58:cb:ff:ce:b4:6b:53:3d:b1:f8:e6:
                    93:3f:70:fb:68:38:88:87:17:47:e3:dd:c3:af:89:
                    45:a9:ce:bb:0d:9e:fb:3e:13:57:fc:24:23:a9:ed:
                    6b:fd:ea:15:a1:01:30:7a:89:6f:41:9e:ae:b2:e4:
                    c7:16:13:f5:90:21:ec:43:fc:41:d8:f0:ea:e3:36:
                    ba:39:4d:c0:f6:7a:04:12:86:f3:fc:64:c0:7d:f1:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:EC:CD:6E:99:17:E4:A5:05:FB:BA:41:03:C7:D0:5A:9F:1C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c4:57:b8:3a:8d:70:82:0d:c9:fb:02:04:20:11:c4:23:a0:
         41:eb:c6:2b:c5:0f:ea:1f:66:27:01:97:cb:c4:79:7d:cc:69:
         74:83:58:e0:b6:15:a0:8a:4a:c6:db:bf:5e:db:5e:c3:ca:bb:
         11:c6:41:74:8c:55:e5:d4:4e:a4:e5:36:86:08:e8:ce:20:5f:
         ed:16:36:48:77:7a:96:c4:c1:58:db:26:2c:0a:0c:07:3f:a6:
         33:e9:bc:ba:a0:f4:af:76:c4:81:33:6e:63:bb:41:f5:50:e1:
         86:d0:bc:2b:dd:b9:98:e1:a7:bc:f5:34:a7:1c:05:06:b8:03:
         2e:6b:08:e8:eb:87:53:8b:45:c3:e6:ea:54:03:51:c4:a1:6f:
         16:3a:a2:b5:8b:7a:13:e2:48:33:43:18:31:eb:5c:fd:b9:68:
         69:b4:7a:ec:34:45:09:5f:ba:02:0c:cb:6d:8b:15:14:6a:c4:
         e9:71:01:be:18:92:ad:18:20:b6:cb:fe:c6:9d:80:26:1c:68:
         7d:cb:5e:14:ad:e2:7a:2f:a1:f7:da:b6:48:68:02:78:81:11:
         f9:b9:20:70:5d:cc:20:e7:24:af:a3:fe:e8:48:82:9a:5d:b7:
         ce:22:60:58:4b:d2:78:c7:51:60:cf:9e:91:26:0c:a1:97:55:
         b0:af:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:19 2025 by rpki-client