Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
File:                     88e83136-5413-348d-8079-fc1adfac452e.roa (raw, json)
Hash identifier:          J4/WAOq0uZKZxcNIOP9rolEU+CJpaFCHOnTJX/Qw3AE=
Subject key identifier:   C8:F4:A5:FA:B4:A0:DF:67:08:54:72:40:CA:7C:7E:B4:28:31:C3:64
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584B13D6B4DAD75C0C63766BFF80
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/41 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b4:da:d7:5c:0c:63:76:6b:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=e17e2d3c-415e-46ff-b51b-c94e1becba1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:0a:4e:52:35:cf:73:e6:9c:8e:1a:07:05:
                    d3:ab:de:ba:27:11:b9:d3:d7:d8:4c:f0:f7:cf:fb:
                    c5:78:7f:a9:16:40:da:72:df:85:40:78:6d:34:6f:
                    94:11:17:48:86:a6:65:ef:66:b4:bf:29:e0:ab:58:
                    e4:81:f7:23:ef:d9:38:4d:40:a7:d1:2c:db:03:0e:
                    0a:0c:2a:e9:3e:38:9b:04:7c:f8:88:a3:9c:91:ee:
                    49:ce:c8:67:8d:05:a5:a8:dc:29:af:0f:8c:b3:ca:
                    90:31:40:6d:1f:cf:2f:2c:06:7a:09:54:3f:77:23:
                    b5:dc:e6:12:b5:8a:0f:86:62:13:5b:30:aa:41:24:
                    2a:a8:89:3e:be:93:2a:30:c1:8e:4c:2c:70:02:51:
                    60:0f:98:50:80:49:a3:dc:3a:94:ab:c5:c9:fb:b1:
                    f1:1f:41:1a:2a:95:44:44:db:a3:af:7c:8c:70:ed:
                    28:d3:e8:e4:7b:d7:7f:81:26:e7:dd:69:c8:0e:bf:
                    49:0c:d0:65:9f:dc:62:07:06:22:63:e6:99:f2:5e:
                    67:c6:ac:19:a4:c4:4f:18:95:2b:dd:51:fd:36:a0:
                    d0:df:f3:c1:66:2c:e9:9f:6b:6a:aa:a5:8b:dc:83:
                    28:cb:0b:8e:01:62:a7:22:76:94:46:77:6d:16:6c:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:A5:FA:B4:A0:DF:67:08:54:72:40:CA:7C:7E:B4:28:31:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:8e:1c:63:af:32:68:d0:fb:45:a5:9c:12:08:f7:52:a2:
         96:96:f9:af:6a:f4:13:35:ee:84:12:68:31:aa:34:72:1e:1b:
         86:93:14:ba:bc:4c:dc:33:2c:bd:e3:39:b9:d6:2d:56:cc:8b:
         c5:7b:59:12:82:9c:63:86:0e:dd:77:4c:8b:13:54:7f:ab:51:
         29:69:da:4a:2b:d4:2d:0a:b4:95:22:e9:76:c7:48:34:e9:11:
         38:e9:b2:1c:5d:d1:2a:0f:2f:3d:ce:81:9d:10:a8:60:3b:da:
         45:4d:88:33:3d:9e:1b:4c:f8:6a:56:0b:54:33:67:37:25:a9:
         cf:09:cf:19:8f:e2:1d:39:e0:33:9a:2b:c3:83:3f:b1:d6:3a:
         e6:7e:84:6c:86:c2:d9:b6:91:e2:24:a0:f1:77:7f:11:a2:e2:
         a8:c5:be:90:9f:10:94:49:62:e9:27:41:65:98:6d:ec:4c:6a:
         3a:c6:93:56:59:ec:7b:5d:ac:53:31:a6:09:64:77:ee:ef:2c:
         be:48:20:eb:9d:6b:88:57:30:62:29:eb:4c:ac:2a:20:97:b8:
         1b:9f:6e:a3:f6:b3:d1:7f:16:b5:ef:bf:cf:4f:55:90:2f:91:
         8a:d6:73:03:fa:a4:48:64:5a:12:f1:17:42:97:d1:63:a0:21:
         dc:72:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:28:11 2025 by rpki-client