Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa
File:                     88ffe6a4-3bbd-346d-b727-667643c36512.roa (raw, json)
Hash identifier:          3pFRD30f9xeCMhFnmPlUU0MK31dOM9LHNnzQh5FTJTY=
Subject key identifier:   E3:12:88:C4:B7:02:54:9A:B0:4A:51:80:35:03:84:7C:B6:73:40:45
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F43285849F17FB6184341E236D7687700
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     394625
IP address blocks:        2606:d280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b6:18:43:41:e2:36:d7:68:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=f52dfa88-1bc2-47ab-8882-dc925e34e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:01:ab:12:ed:77:cc:28:b2:b2:50:50:d6:
                    fe:79:da:1c:d3:ec:2a:ab:6a:9a:11:b3:22:d4:ec:
                    c9:dd:85:b7:37:f3:d4:a4:90:ff:51:d1:82:90:11:
                    78:ca:fe:d3:f5:b5:3c:2e:87:b1:3a:86:2b:e3:51:
                    9d:62:2d:40:bc:bd:31:43:33:07:ff:72:41:e9:68:
                    cd:74:45:3f:de:e3:51:f0:70:c3:d5:bb:9d:8a:7e:
                    65:75:50:73:88:19:ff:85:b0:0b:69:fa:15:fd:45:
                    29:5e:30:3c:0c:61:57:da:28:3a:6e:92:a3:9e:fd:
                    8c:98:5d:4e:5e:de:69:4e:29:a8:3a:25:2c:27:8b:
                    3d:45:4f:48:19:0d:d0:dd:ce:50:ef:26:c3:12:44:
                    9a:cf:02:9d:8b:04:3c:d1:79:b2:85:64:bc:b8:6e:
                    d7:95:30:06:d4:e7:b0:94:21:8b:af:96:51:8f:82:
                    93:21:ab:11:81:2a:a9:de:71:c8:a7:93:3e:fd:a0:
                    d6:73:5f:e1:90:3e:46:0e:a2:09:1e:21:3b:67:11:
                    2a:3e:32:cd:fa:5d:8f:6b:1c:a8:0f:ee:f2:8b:93:
                    4d:27:44:8d:2f:76:52:6c:2b:b8:c6:55:b1:6a:18:
                    20:4a:31:1d:61:e9:d6:c2:4b:46:b7:16:87:00:ad:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:12:88:C4:B7:02:54:9A:B0:4A:51:80:35:03:84:7C:B6:73:40:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/88ffe6a4-3bbd-346d-b727-667643c36512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:69:b1:ef:35:25:ad:e5:cc:c1:ef:2f:25:55:28:48:90:e4:
         81:5d:db:1a:ea:c9:4b:31:b2:eb:08:5d:d8:63:7d:61:5c:26:
         a9:27:98:73:44:e7:3b:80:e4:d4:17:e1:be:b0:b0:15:02:67:
         81:90:60:02:62:eb:90:33:58:44:69:f0:a5:fc:51:e5:1b:73:
         32:5a:f7:13:5c:62:b3:ca:a7:22:57:e2:8b:f5:53:4c:26:dd:
         13:1c:57:08:cb:ff:65:c8:ea:74:6f:23:b0:a8:27:f9:cc:de:
         ee:bf:7b:b2:b5:09:b3:8d:1a:03:4e:55:45:8c:e4:65:5a:c4:
         1f:c5:56:d5:f5:02:86:ab:c4:eb:d0:40:3b:8a:78:7c:92:b8:
         02:a3:1f:6e:fb:5e:44:78:ee:79:27:97:dd:25:5e:db:09:28:
         da:99:4d:88:94:0d:1e:e3:25:84:49:3e:5c:83:1d:7b:a6:58:
         a7:72:f4:62:53:b7:8f:b5:81:26:b6:7d:02:b0:5c:92:ce:91:
         da:e5:3a:f5:00:32:2c:bb:c9:2e:d9:bc:ca:0d:0a:e6:6d:63:
         9d:2e:95:0b:cb:be:4e:e6:39:47:98:c2:00:73:f1:97:10:cc:
         3b:e7:30:d5:61:9e:28:2b:ba:59:cc:c5:f2:98:e2:e0:a0:26:
         36:37:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:14:44 2025 by rpki-client