Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
File:                     8f629efd-e098-3f71-8aa1-1f37fc392af3.roa (raw, json)
Hash identifier:          eBAAb2NbUTGmPziwOcXKiY6S0+uSMCOr24bUkgfHqAU=
Subject key identifier:   E7:83:AB:79:46:18:81:0D:24:F6:9E:D5:C6:93:0E:0F:00:5F:C4:0C
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFECEB13AB173F7F819A0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fe:ce:b1:3a:b1:73:f7:f8:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=c389bf1f-c4ba-421e-bc44-951e7882176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:b3:a9:ff:c1:06:dc:46:15:06:52:ae:e8:
                    fd:63:f3:de:8c:e4:3c:74:77:32:0d:5c:28:ce:91:
                    b2:98:11:07:cc:fa:ab:d6:17:05:e8:1c:38:32:2a:
                    5d:b7:dc:82:d6:5d:b9:82:52:0f:60:f6:43:cf:25:
                    15:4a:60:ba:50:c5:ea:32:6d:ce:2d:3d:ab:85:59:
                    76:a5:a2:38:c6:8f:2d:c6:88:27:9f:2a:cc:b7:3c:
                    88:c9:54:94:64:95:c3:ea:a8:b3:10:2c:f0:c1:63:
                    70:65:4d:a4:38:bc:95:f3:b6:89:dc:b2:c9:6c:2e:
                    f8:3b:7a:21:69:c4:7a:d5:86:e9:24:cc:7e:b0:57:
                    ab:6b:9a:f0:76:a9:ea:68:26:59:77:b1:02:cf:30:
                    c7:ee:7d:2f:81:04:70:85:68:76:fa:f0:b7:79:07:
                    70:f8:b2:ba:0c:6d:2f:bf:8f:35:72:cb:d1:a5:e1:
                    47:c3:ed:ee:70:23:54:45:a3:4e:ba:c5:d3:54:22:
                    3b:fe:23:b0:5a:95:b1:2b:c7:a2:21:04:59:10:e8:
                    1b:da:ab:57:a3:53:c6:1e:ca:e8:95:c1:f9:97:51:
                    24:48:82:94:c8:83:4c:37:e9:48:a6:38:80:96:53:
                    2c:e3:9a:ed:58:63:cc:1d:13:78:29:97:75:0c:08:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:AB:79:46:18:81:0D:24:F6:9E:D5:C6:93:0E:0F:00:5F:C4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4a:ef:d1:b5:6d:5b:6e:89:28:1f:2d:0d:71:66:8c:b3:e3:
         f3:33:17:cd:40:8c:40:3e:44:fc:2d:4a:15:4b:ee:b5:ef:27:
         4c:31:30:e8:ab:b8:30:ba:77:88:c5:3a:8e:23:f3:8c:e3:29:
         13:01:c1:4c:8d:0e:3e:22:b0:46:d0:92:93:cc:4d:35:52:43:
         2c:4d:ea:d2:77:99:03:54:a8:48:6c:92:c4:fc:8f:61:b1:6a:
         cb:e6:49:79:8d:c6:3d:a1:0b:79:a5:df:ec:b0:6e:69:5e:6c:
         88:ff:19:3d:96:d6:5a:16:59:6e:b4:3a:a7:0f:9a:e5:57:02:
         2e:46:f6:fe:cb:6c:13:d8:d6:58:52:3f:b7:d3:cf:80:8c:63:
         8e:d9:0e:85:5f:f8:a6:88:12:14:33:6d:9d:89:4d:e7:07:e2:
         a4:ab:91:29:00:0b:ad:41:47:4f:e3:26:42:c1:43:03:53:59:
         a8:de:d7:c5:62:96:0a:45:5a:79:a6:6c:0c:88:01:39:5a:70:
         1a:18:8a:fb:75:0b:d1:35:13:e0:5b:8c:ff:bb:ad:cd:4a:6b:
         52:df:5a:c7:4b:a4:0d:6f:1d:e1:84:30:6e:15:70:06:8d:f8:
         f0:7a:3d:53:57:83:38:ca:d3:d7:70:7c:f5:e7:97:e0:80:40:
         f8:1d:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:02:40 2025 by rpki-client