Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa
File:                     86f379de-78d4-3374-b459-aea02f2a2a16.roa (raw, json)
Hash identifier:          GeRJFXtcxee1dgKqChFqhY8AaNM29aqzWOMlr3zFDss=
Subject key identifier:   81:D8:7D:59:9D:BA:2E:66:CA:83:4A:A3:2A:54:B8:F8:1B:10:0E:FF
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584A374ADF549A36AA46383949D0
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     396416
IP address blocks:        2602:fb78:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:df:54:9a:36:aa:46:38:39:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=eaccfb02-7cad-48ce-8ce1-40bec5fa0527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:5c:8f:a9:c3:0c:82:a4:a6:12:52:71:2e:
                    65:7c:f0:a8:29:5f:8e:a8:72:6f:1d:cb:36:b6:cc:
                    84:6d:fb:f6:0f:87:95:bc:c9:d4:35:46:7d:1e:39:
                    38:7e:9e:2d:a6:be:23:00:4d:d3:70:c6:a5:62:4c:
                    77:07:bd:6a:2a:1f:c8:e9:d1:f1:a8:4f:a6:1b:ee:
                    de:01:11:da:b5:d0:a8:e4:85:64:bb:31:b5:f1:fc:
                    10:19:49:ad:01:30:6c:1d:8c:ee:7d:a6:a1:c4:9b:
                    32:06:2f:d2:f6:af:09:05:5e:11:81:8d:6c:87:57:
                    89:6f:91:2b:e9:36:ea:bd:d3:19:bd:1f:4a:79:10:
                    32:d0:f6:08:63:ba:30:db:b7:73:e0:7c:3d:63:15:
                    bf:f0:d8:82:e7:94:96:ff:3f:5a:72:c1:fb:9c:99:
                    9e:70:be:f9:bb:46:57:ba:97:9d:56:c2:29:2e:72:
                    f7:26:09:ea:bf:d3:88:11:81:06:e7:c8:ff:4e:7a:
                    a7:57:da:e5:74:ee:5c:e2:e1:12:a9:66:69:09:ca:
                    70:6e:61:ac:41:44:2b:e0:c8:bd:47:ab:ec:a3:07:
                    67:94:83:6a:27:bb:34:16:ef:c5:50:2b:4f:96:9a:
                    aa:1c:e3:0b:25:17:2c:87:ba:38:95:ba:47:33:ac:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D8:7D:59:9D:BA:2E:66:CA:83:4A:A3:2A:54:B8:F8:1B:10:0E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:d2:f6:81:95:f4:bb:e8:fa:27:3a:fa:ae:16:0d:d0:af:
         36:af:a0:53:f4:86:11:10:8e:dd:c9:e0:4d:38:0c:54:de:af:
         41:6f:80:98:ae:42:ab:08:ce:59:c2:a2:d0:15:b4:d2:83:60:
         dc:c2:03:15:bf:06:ec:ff:02:97:97:b3:d8:f8:4f:3b:af:dd:
         e0:5f:b5:cf:5b:89:0e:33:2e:0f:17:20:33:6e:8a:cf:5d:f1:
         77:61:9a:ea:63:7b:25:47:e2:e7:12:f0:ac:04:9e:9c:9e:96:
         45:56:4e:28:bb:83:51:a5:d4:1f:0d:0f:7f:3a:c3:bc:24:af:
         d8:7a:54:3a:c8:cc:08:9e:11:91:0b:73:aa:11:2a:82:2d:4f:
         86:b0:94:66:42:4f:22:d7:b2:34:13:1b:94:14:81:db:fd:8d:
         19:47:f2:da:64:5c:d4:1f:1b:32:c2:07:f6:87:a0:17:06:19:
         d4:f0:e6:8a:4e:61:43:90:17:07:bc:5c:5d:e9:1a:1c:b2:a4:
         f7:9d:63:9a:87:85:b8:e6:d5:ab:39:94:e6:6a:b0:e8:a4:01:
         e9:73:db:1f:a4:8b:cf:d3:4d:91:c3:ae:20:7a:31:7c:a1:39:
         f1:3b:30:5a:ab:a1:5a:cc:4c:37:22:6b:28:40:5d:91:55:58:
         ab:75:10:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo3St9UmjaqRjg5SdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZWFjY2ZiMDItN2NhZC00OGNlLThjZTEtNDBiZWM1ZmEwNTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnntcj6nDDIKkphJScS5lfPCoKV+OqHJvHcs2
tsyEbfv2D4eVvMnUNUZ9Hjk4fp4tpr4jAE3TcMalYkx3B71qKh/I6dHxqE+mG+7e
ARHatdCo5IVkuzG18fwQGUmtATBsHYzufaahxJsyBi/S9q8JBV4RgY1sh1eJb5Er
6TbqvdMZvR9KeRAy0PYIY7ow27dz4Hw9YxW/8NiC55SW/z9acsH7nJmecL75u0ZX
upedVsIpLnL3Jgnqv9OIEYEG58j/TnqnV9rldO5c4uESqWZpCcpwbmGsQUQr4Mi9
R6vsowdnlINqJ7s0Fu/FUCtPlpqqHOMLJRcsh7o4lbpHM6xIOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIHYfVmdui5myoNKoypUuPgbEA7/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvODZmMzc5ZGUtNzhkNC0z
Mzc0LWI0NTktYWVhMDJmMmEyYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7eACQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADXh0vaBlfS76PonOvquFg3QrzavoFP0hhEQjt3J4E04DFTer0Fv
gJiuQqsIzlnCotAVtNKDYNzCAxW/Buz/ApeXs9j4Tzuv3eBftc9biQ4zLg8XIDNu
is9d8XdhmupjeyVH4ucS8KwEnpyelkVWTii7g1Gl1B8ND386w7wkr9h6VDrIzAie
EZELc6oRKoItT4awlGZCTyLXsjQTG5QUgdv9jRlH8tpkXNQfGzLCB/aHoBcGGdTw
5opOYUOQFwe8XF3pGhyypPedY5qHhbjm1as5lOZqsOikAelz2x+ki8/TTZHDriB6
MXyhOfE7MFqroVrMTDciayhAXZFVWKt1EPg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:32:14 2025 by rpki-client