Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
File:                     d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa (raw, json)
Hash identifier:          0l8OXmW9D3/auEigD9DdN3gkxT+72lOMbNmLCKqXQ7Q=
Subject key identifier:   B9:CC:FE:E8:0C:A8:A9:75:4B:07:34:7D:1F:05:28:D4:D7:E1:4B:C8
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584A189549A1C2612DA4E5A137C0
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396416
IP address blocks:        2602:fb78:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:49:a1:c2:61:2d:a4:e5:a1:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=6ed80d20-1664-4b9c-bcfd-25b931f7c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9c:9d:24:69:56:55:00:39:ef:56:97:a8:ff:
                    f2:56:84:7e:5b:2f:6e:2a:db:5d:55:e2:af:9a:81:
                    f8:88:ce:91:cc:7b:4f:20:ae:5d:fc:3d:39:f5:68:
                    9d:98:24:6b:2b:37:13:03:8c:0d:0d:bf:84:62:ba:
                    51:b1:e5:91:fb:d0:4f:f5:29:96:25:78:20:5c:7c:
                    d1:9e:17:ba:1b:8b:ed:34:13:cf:25:5f:0e:0a:ed:
                    cb:1d:6e:42:ec:d4:5e:c8:89:11:be:40:5d:42:fe:
                    17:2d:f3:d6:a4:91:b9:f2:d7:d9:b7:14:0f:9f:7e:
                    2f:77:fb:f6:5d:47:64:a2:a0:c0:b2:3f:a3:a3:8c:
                    14:2c:92:27:22:f2:46:8e:d0:e9:d8:62:66:ba:2f:
                    0a:da:79:d8:a7:47:ec:da:93:22:0b:13:97:53:56:
                    14:e6:98:0b:0e:53:57:01:a3:9c:a2:87:df:8e:0d:
                    e4:5e:e3:37:75:6a:d4:3f:78:9e:aa:f4:16:5d:f3:
                    2d:4e:19:d2:12:1b:85:06:26:46:f1:00:79:1c:2d:
                    a7:01:80:65:9d:f4:84:df:08:d2:1d:d5:f9:15:7a:
                    5f:fc:f4:41:e4:ac:2b:2b:01:3d:21:5b:0d:5c:47:
                    b5:5f:bb:11:40:79:27:3f:ed:4d:59:47:8f:a3:f5:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CC:FE:E8:0C:A8:A9:75:4B:07:34:7D:1F:05:28:D4:D7:E1:4B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:a7:e7:a6:42:d4:4e:a1:33:a7:ba:2b:34:27:f6:f5:a9:
         5c:52:cb:67:e4:d4:03:b0:e2:8f:d1:ac:04:3c:7d:4d:89:4b:
         02:3c:27:49:7c:91:5d:bb:3d:83:c0:ad:d9:ec:05:8d:77:f0:
         ac:c6:f1:0f:53:a8:f5:4c:51:00:13:0d:d4:0e:99:38:2e:cf:
         66:18:dd:1f:ac:48:48:08:7e:34:bd:d8:ad:00:2c:58:de:aa:
         50:31:99:f8:67:5b:a4:d2:23:b6:9c:42:8d:6f:a8:88:c5:0b:
         a0:07:5b:d3:dc:1c:5b:45:c5:02:06:88:5a:92:e4:e7:b5:f0:
         b8:e9:fa:90:be:12:c5:f4:8f:4c:73:ac:49:1a:07:7a:53:13:
         df:c4:0a:be:e1:08:4c:45:ad:59:05:c5:a6:01:a8:1a:d1:56:
         36:54:0c:6d:5c:bc:1d:87:83:48:f0:50:1c:f8:f6:37:2b:fb:
         9e:48:ea:93:26:a8:6a:7e:e9:f5:b5:49:f5:38:74:d3:e5:73:
         c4:63:7c:df:7e:45:7f:b8:2b:c6:f8:50:d6:69:8a:63:cd:d3:
         8b:8c:e7:32:2e:6b:12:a1:8d:89:ea:7a:2e:d9:b8:91:4f:55:
         34:14:1d:40:7a:9e:eb:12:aa:37:8d:ec:c7:63:47:9e:06:11:
         3f:dd:a5:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoYlUmhwmEtpOWhN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3
YTEzMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
NmVkODBkMjAtMTY2NC00YjljLWJjZmQtMjViOTMxZjdjNGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZydJGlWVQA571aXqP/yVoR+Wy9uKttdVeKv
moH4iM6RzHtPIK5d/D059WidmCRrKzcTA4wNDb+EYrpRseWR+9BP9SmWJXggXHzR
nhe6G4vtNBPPJV8OCu3LHW5C7NReyIkRvkBdQv4XLfPWpJG58tfZtxQPn34vd/v2
XUdkoqDAsj+jo4wULJInIvJGjtDp2GJmui8K2nnYp0fs2pMiCxOXU1YU5pgLDlNX
AaOcooffjg3kXuM3dWrUP3ieqvQWXfMtThnSEhuFBiZG8QB5HC2nAYBlnfSE3wjS
HdX5FXpf/PRB5KwrKwE9IVsNXEe1X7sRQHknP+1NWUePo/XiKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLnM/ugMqKl1Swc0fR8FKNTX4UvIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3
MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvZDFmMDViYzUtOWI1My0z
YzA3LThhYTEtYzk0N2IwOTViZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll
NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi
N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw
MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7eAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmxp+emQtROoTOnuis0J/b1qVxSy2fk1AOw4o/RrAQ8fU2JSwI8
J0l8kV27PYPArdnsBY138KzG8Q9TqPVMUQATDdQOmTguz2YY3R+sSEgIfjS92K0A
LFjeqlAxmfhnW6TSI7acQo1vqIjFC6AHW9PcHFtFxQIGiFqS5Oe18Ljp+pC+EsX0
j0xzrEkaB3pTE9/ECr7hCExFrVkFxaYBqBrRVjZUDG1cvB2Hg0jwUBz49jcr+55I
6pMmqGp+6fW1SfU4dNPlc8RjfN9+RX+4K8b4UNZpimPN04uM5zIuaxKhjYnqei7Z
uJFPVTQUHUB6nusSqjeN7MdjR54GET/dpe4=
-----END CERTIFICATE-----
Generated at Mon Jun 30 07:15:34 2025 by rpki-client