Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8220eee6-d7cc-3051-8744-f9828cc91108.roa
File:                     8220eee6-d7cc-3051-8744-f9828cc91108.roa (raw, json)
Hash identifier:          +1nbc7+Bg+JEHAEg/zj5z7Eq3cVP0iOUj7q45dM2VSk=
Subject key identifier:   7A:27:85:73:53:B4:76:6F:68:EB:62:5A:58:5A:DD:5C:1C:9D:CA:37
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFEF4A6E63DAD0E047900
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8220eee6-d7cc-3051-8744-f9828cc91108.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2500::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fe:f4:a6:e6:3d:ad:0e:04:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=85b5d0ee-33cf-4cc9-a1f1-8e702b09d127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:82:11:60:da:29:d4:2d:55:29:38:c4:6b:
                    d9:07:31:48:fd:8c:bd:c8:a0:03:66:39:59:59:45:
                    5f:24:5c:c3:94:b9:c6:be:e1:1b:0c:f3:f9:ff:a5:
                    d5:19:c5:0a:af:b6:86:7b:38:c8:92:24:e8:e7:40:
                    22:50:ef:38:53:e1:60:7d:92:76:86:a4:be:4f:99:
                    04:4f:7d:a5:00:13:77:c9:0f:80:c8:2e:3c:b8:68:
                    04:b0:9c:c6:1c:bc:0b:7e:61:85:e2:bd:95:07:e9:
                    12:22:d1:77:61:7b:00:be:29:69:e5:5e:e6:dd:71:
                    c8:12:d9:4f:e4:0a:b2:37:5a:97:c7:b7:93:3b:1f:
                    96:a6:5c:7e:b4:42:c1:58:50:e9:3c:88:8d:7c:bb:
                    85:a0:b7:b3:cd:e8:fc:d1:00:a6:14:c4:77:fa:e4:
                    15:b5:7c:82:a9:96:8f:ab:20:f7:dc:b8:e5:7a:08:
                    b7:a3:b2:4a:64:07:e0:95:ff:40:0a:3f:bc:74:3a:
                    c2:12:1b:32:6f:fc:2e:d9:a3:56:25:5b:c1:b1:bc:
                    57:cb:d3:ae:f8:86:ae:22:0d:22:f0:28:39:df:f2:
                    01:16:78:75:a4:b6:df:25:53:19:6f:29:75:68:8d:
                    8d:f6:c1:cc:39:0d:92:b2:0a:b5:d7:bc:41:76:01:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:85:73:53:B4:76:6F:68:EB:62:5A:58:5A:DD:5C:1C:9D:CA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8220eee6-d7cc-3051-8744-f9828cc91108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2500::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:0b:c2:91:b7:81:3c:5b:3c:d2:6c:45:d2:20:28:fd:ae:
         bf:90:ed:ff:cd:92:bc:f2:ad:a6:8a:70:94:a7:ce:3c:be:58:
         7e:c9:93:50:a4:3d:ee:70:72:9b:d8:31:ec:2e:c2:ee:16:ef:
         21:3c:a2:e7:4f:c4:b7:d5:1e:91:fd:3e:0e:5a:4d:7e:ef:e9:
         e3:09:47:fd:d0:31:f4:10:3a:03:ef:35:c0:ab:29:e7:f9:e3:
         0b:28:0e:18:19:0c:00:fc:ff:44:ae:de:3c:36:0a:97:71:ff:
         65:75:42:a9:4f:3d:ee:91:00:a5:32:b0:4c:3f:dc:bc:af:39:
         34:e8:b8:c7:bf:9c:5d:25:99:33:14:68:fd:5b:ef:a5:4a:55:
         29:ce:42:0c:c5:b9:5b:7a:23:eb:89:4e:d4:d1:77:aa:7d:7c:
         e6:17:8e:99:78:64:98:91:5a:1d:31:b0:37:03:b1:78:9a:41:
         96:e2:9a:42:53:9d:1e:a3:f8:25:8d:4c:f7:a9:3f:4d:9f:2a:
         f7:23:b6:3a:63:93:9c:35:a9:a0:35:12:a8:ba:75:b3:08:a2:
         12:9f:eb:dc:f5:d6:7d:a5:dd:e6:bf:3d:c2:35:c3:0c:37:34:
         c7:72:48:8b:ca:c2:48:1b:de:12:57:7d:5e:46:2d:50:6d:f5:
         91:96:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:51:23 2025 by rpki-client