Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa
File:                     59ed2e97-c326-30f0-adb6-901d82718f8a.roa (raw, json)
Hash identifier:          SxuFZKUziJ/F2J+yEawZZoPkpeDHO3lOY5gjiywj6Aw=
Subject key identifier:   1E:DE:01:18:F4:4E:F3:CD:A6:63:FC:CA:A6:26:51:FB:CC:50:22:8F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFDC14A6DC6A4DE6502C0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fd:c1:4a:6d:c6:a4:de:65:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=491ec675-51db-4394-b965-37742113cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:b2:24:56:7a:5b:11:2c:70:8c:3f:b6:99:
                    18:de:7e:91:1b:81:1a:ad:04:9c:4b:00:a1:37:2b:
                    ce:19:3b:aa:65:a3:00:e3:ce:e4:60:cd:db:57:4a:
                    2c:3f:3f:fd:1e:2c:62:84:9a:40:45:90:66:ea:b0:
                    d8:59:23:6b:09:98:28:96:5a:b1:c4:cf:cb:5c:38:
                    c5:c5:61:5d:50:31:3a:71:dc:90:07:c2:e8:e8:2a:
                    5b:a8:d4:01:14:2f:ff:ac:86:71:dd:8c:86:fc:63:
                    94:0d:fc:ae:ab:fa:07:d3:09:ca:23:08:9e:d8:c9:
                    32:f6:a1:a3:ad:44:45:2e:0c:fb:95:4d:5f:6d:b6:
                    3e:26:34:f4:71:10:8b:6e:6a:4d:90:9a:fd:c2:4f:
                    5b:10:4b:17:96:97:76:a4:b8:16:47:76:04:56:5c:
                    02:80:5b:3b:50:d5:82:c8:5b:ba:5f:db:77:6c:37:
                    20:91:d7:ea:15:26:e2:3e:5b:4d:1e:d0:ce:07:f6:
                    d4:87:00:15:33:52:5a:ac:5f:73:76:01:18:88:39:
                    9b:75:e8:fe:1d:94:bd:0e:a6:fe:15:25:dd:a9:fa:
                    71:ed:12:40:f5:40:02:b1:6c:1a:54:46:4d:65:e6:
                    78:c1:6e:ae:d2:78:86:a0:8e:f9:59:20:04:48:b8:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DE:01:18:F4:4E:F3:CD:A6:63:FC:CA:A6:26:51:FB:CC:50:22:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:40:57:cd:7f:57:e2:9a:db:38:08:2f:77:0c:5a:5f:93:4d:
         1e:f4:35:ae:47:08:76:d6:d8:c6:8b:d2:19:a3:2f:11:f0:ef:
         3d:33:63:77:c0:87:6d:c4:68:5a:d3:ae:cc:f8:f9:bd:c1:8d:
         53:22:00:bb:d9:38:f6:bf:d5:a5:26:21:ce:55:85:a3:fd:fe:
         28:ee:b3:2e:14:0e:49:59:1f:aa:05:0e:ac:0e:8b:db:f0:8c:
         52:83:23:85:39:09:c1:5f:ac:76:9e:b3:c0:b7:79:0a:88:66:
         9a:56:6e:fe:09:63:7c:95:1c:a2:e1:4b:1a:f4:a9:53:71:1a:
         9a:c5:5b:af:e1:f8:63:07:2f:e5:29:4d:ab:f2:e3:6c:45:80:
         56:bb:f4:88:c0:33:32:2f:b1:c1:67:e6:ba:eb:60:a2:34:7e:
         c8:a1:29:ab:51:4f:b3:ff:76:bc:60:d1:64:c8:37:6d:c7:f8:
         58:db:79:7c:25:07:52:15:46:e3:cd:91:39:34:38:c2:59:b1:
         23:69:80:c8:0a:26:9f:17:ee:c0:a0:ad:d1:d1:96:2e:22:25:
         70:14:2c:33:5c:32:b3:d9:1e:bf:a0:94:2c:1e:62:3b:72:5b:
         01:64:63:67:d2:44:9c:9c:0b:21:4d:24:8f:8a:38:28:da:49:
         9f:02:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:03:41 2025 by rpki-client