Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
File:                     88e83136-5413-348d-8079-fc1adfac452e.roa (raw, json)
Hash identifier:          OpAMud9TMtsAhRbHiEYEAAmddRoRMzfhUznuMcPSNQE=
Subject key identifier:   A3:6C:C4:FC:69:3B:63:1B:16:C2:1E:17:37:DE:8E:65:A6:BB:F9:B7
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285844F7300AA8F0F22CAFC6C06D80
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/41 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:0a:a8:f0:f2:2c:af:c6:c0:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=41176054-d23e-493b-84f6-42a66acb9f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:71:41:ad:7f:7c:46:4c:2c:55:6f:24:f8:
                    66:01:ee:6b:2d:09:93:25:0e:fc:e1:13:dc:68:2e:
                    98:22:f8:b8:ac:dc:8e:7e:a2:bd:ea:b7:2f:5c:65:
                    47:fb:fa:91:f7:2d:9c:97:c4:a2:b7:fd:58:94:4b:
                    34:ce:21:d1:fa:b6:a5:0a:b1:10:c3:25:a1:26:72:
                    05:47:64:76:77:e6:3e:17:de:cf:fa:ab:60:8e:1a:
                    ce:96:d3:af:c3:fa:50:5e:e1:41:74:cb:b6:ca:e6:
                    0a:c8:10:b3:08:a3:2f:f5:c2:f3:cb:45:84:89:36:
                    f2:e3:74:bd:1f:b5:56:1f:d6:6b:5d:eb:7d:f6:4f:
                    22:da:5d:4c:48:07:50:96:d2:68:84:33:ff:19:36:
                    40:81:d6:f5:b8:75:a2:9c:e0:6b:0f:87:62:d6:0c:
                    00:87:16:63:57:ce:7d:3f:8d:15:73:a1:ce:f9:4a:
                    0b:e9:c7:66:1f:48:4b:29:29:4a:1a:31:08:7e:33:
                    42:14:ab:f5:88:51:14:f3:66:7b:ae:35:b9:37:ac:
                    98:68:23:9e:75:13:9a:4a:e3:f5:b7:b0:3a:91:0b:
                    9d:aa:fa:d0:24:2d:e8:98:54:4a:32:b2:f8:bc:07:
                    fc:ee:69:55:13:f0:ac:38:88:d0:e4:54:61:e4:04:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:C4:FC:69:3B:63:1B:16:C2:1E:17:37:DE:8E:65:A6:BB:F9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:81:9a:bf:c5:1c:4e:75:04:4d:21:70:6c:98:a3:fd:e7:
         4e:b3:99:4d:9e:01:cf:ac:17:d6:80:99:1b:7a:b9:67:01:c0:
         9e:5c:03:13:07:37:5c:72:ff:3f:5b:1a:19:44:62:40:8a:71:
         37:a1:ff:b0:3b:b9:ae:34:71:5d:34:63:d3:b2:c7:4c:d4:9d:
         d2:c6:e8:ab:26:01:d2:43:50:28:8e:45:d7:96:24:30:fc:5e:
         6e:fa:c0:7d:a1:69:a9:be:22:1d:dd:a5:bc:df:aa:ab:b3:dc:
         34:0c:5c:c8:ad:2e:4a:ba:6b:f7:77:50:9d:f5:37:eb:db:00:
         79:c4:5b:bc:ee:c1:f7:60:82:ba:aa:b8:d7:a8:12:b6:8e:58:
         3e:87:18:d7:d9:3c:1f:5b:fd:a1:13:d1:d1:17:d4:f2:df:62:
         13:b5:6f:47:27:58:3a:81:c8:c6:e9:9a:77:55:3d:ce:50:80:
         8c:20:43:98:30:15:d0:7d:05:40:10:53:be:70:4e:d6:b9:e5:
         c9:13:6e:fa:c6:aa:29:fc:34:39:35:d3:71:4d:39:6c:b7:e1:
         d3:b5:ea:a1:68:3b:2c:7b:74:ce:16:0f:f5:18:6e:8c:8c:92:
         92:be:6e:1d:ba:30:56:1a:4b:ef:a0:d3:e4:18:5d:fa:16:03:
         c0:ac:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:53:52 2024 by rpki-client on console-ams.rpki-client.org