Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa
File:                     016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa (raw, json)
Hash identifier:          SazabrP+DcLL+lrJ89op5oRVsG9RInCIpsmxUdhHtus=
Subject key identifier:   A9:F8:B6:C9:D7:3C:21:CF:81:F2:55:B1:75:40:F9:88:D5:85:2B:45
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFE87231B8E9BFF8FD1C0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1900::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fe:87:23:1b:8e:9b:ff:8f:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=37e0f680-14d2-4c99-b6b8-2ffea999ba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:4d:48:62:5d:7a:4e:61:76:66:46:dc:6b:
                    fe:97:1e:c0:64:fe:77:1c:57:12:a4:28:f6:de:a2:
                    0b:74:ae:07:6a:27:43:5a:da:92:8d:05:14:7d:66:
                    40:ce:b2:f8:f5:b6:82:10:8e:09:d0:f0:4e:b8:96:
                    fd:d8:25:b7:97:3c:07:96:d7:52:73:25:dc:f0:73:
                    70:1c:cf:2e:a1:88:2f:32:cb:f6:e3:93:e9:e7:d2:
                    42:b2:4b:12:73:de:6f:65:2e:f1:6a:36:74:10:50:
                    a1:99:38:1b:ee:11:91:49:29:ef:d7:2d:86:2d:c0:
                    f0:21:35:3b:1c:6a:6e:68:81:74:4a:e2:f8:76:f9:
                    ce:ec:40:93:eb:6d:e9:29:54:62:f7:f8:72:36:e3:
                    a9:a8:06:ed:22:4b:db:05:71:45:b9:06:e1:e8:34:
                    ce:7c:95:91:99:da:fe:58:59:44:2d:8d:20:7e:b0:
                    ae:7d:41:fc:87:4e:2c:23:2d:cd:c6:15:93:f4:6e:
                    55:90:e2:57:69:24:60:3b:4f:84:30:7c:20:c1:c4:
                    09:aa:b3:a2:f3:3e:21:5d:c7:82:9a:51:e3:27:4f:
                    40:7d:ae:e8:a0:6f:b2:92:ad:4c:2b:06:05:dc:3d:
                    ea:62:8a:06:f4:55:46:c6:e1:a8:35:90:26:03:be:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:B6:C9:D7:3C:21:CF:81:F2:55:B1:75:40:F9:88:D5:85:2B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:32:01:77:3e:97:3f:26:16:97:f3:b8:ac:59:11:52:dc:
         f6:c4:7b:96:a6:78:7a:5e:a6:8b:25:06:81:15:d6:30:48:d7:
         af:5b:3d:7f:8f:a3:e8:4c:fd:2f:52:cf:b7:b0:69:0c:c2:36:
         d4:3e:d3:c0:a3:44:cd:aa:41:2f:4c:92:f5:c4:18:8c:2a:9c:
         e9:79:f6:b6:2e:52:25:02:f7:88:55:1f:4d:cc:b4:aa:1b:05:
         fc:4d:d4:92:41:7c:d5:fd:b2:08:60:01:fc:b3:13:36:e6:31:
         7f:fc:91:ec:dd:22:d6:46:5a:22:ea:40:38:12:e4:90:6b:f6:
         64:6b:ee:3e:1b:c0:40:4f:5a:b7:d9:dd:cb:f6:b5:71:b5:e7:
         96:79:40:82:4a:78:9f:48:1c:70:9d:ef:d7:19:71:3b:24:30:
         cd:9f:28:7b:4b:ff:90:e5:f6:41:de:e2:ec:70:9e:f5:9c:d9:
         13:44:4e:6a:ce:6d:e4:84:03:6b:7d:61:1e:09:67:fb:e0:5c:
         39:ee:94:57:fd:aa:fd:da:4c:54:32:ed:7b:fb:55:ea:5e:b5:
         de:2d:5d:09:1b:a9:a4:ab:8a:97:cd:6a:93:b9:38:b9:a3:52:
         0f:fb:34:55:47:7c:24:be:54:fb:06:db:a9:5f:0d:df:c9:79:
         d0:99:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:33:48 2025 by rpki-client