Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa
File:                     f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa (raw, json)
Hash identifier:          ze0XIzXqdT80/a+kVkqc8E/YMyNWtRetmXC6rGaGOIc=
Subject key identifier:   0C:02:6C:E7:9B:BE:9E:07:58:86:71:2D:04:FE:11:5F:81:C5:5C:23
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849E4EFC4B6AF2CC32998E0C600
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13445
IP address blocks:        2607:fcf0:10a0::/44 maxlen: 48
                          2607:fcf0:20a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c4:b6:af:2c:c3:29:98:e0:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=c88264f4-a3ec-4c28-950b-de15babf68b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:9e:cd:0d:9c:c2:bd:6a:d0:ff:d2:70:50:
                    41:ff:37:86:5d:10:93:50:55:19:97:68:82:3a:61:
                    0e:31:d3:aa:85:29:4b:3b:58:56:cc:3e:b9:d9:ae:
                    0a:5f:95:54:8e:a4:1d:43:3c:44:6c:24:42:2e:ab:
                    7a:8d:ef:6c:53:86:08:ed:9e:1d:35:f7:64:77:8c:
                    e7:21:e6:f1:63:05:4d:2d:e6:76:30:8e:29:26:bd:
                    eb:c6:6d:c8:35:dc:c9:56:d7:06:a8:c4:25:bb:71:
                    d4:07:f1:d2:b2:4a:66:a5:6c:ca:09:29:48:40:0d:
                    c1:9f:5d:85:9f:50:9b:4b:14:25:11:ad:15:86:f3:
                    0e:e7:31:ba:da:76:52:80:f2:c7:1f:c6:81:20:d2:
                    76:bf:37:af:ac:20:6a:87:25:6d:89:9a:e7:17:a5:
                    b7:05:71:b6:00:8b:87:dd:03:ba:41:8b:cc:26:33:
                    84:d0:4d:c2:36:44:2f:d8:ef:3b:b3:e1:ab:fe:db:
                    77:32:7f:f8:65:f0:13:5f:89:93:93:74:dd:e8:87:
                    5f:59:1b:4a:c9:be:2f:d4:28:39:6d:9a:58:a6:b3:
                    28:54:8d:f1:8d:58:71:d5:9d:33:db:95:00:32:10:
                    32:05:90:9f:72:2e:9e:2b:23:c6:a6:91:da:62:04:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:6C:E7:9B:BE:9E:07:58:86:71:2D:04:FE:11:5F:81:C5:5C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:10a0::/44
                  2607:fcf0:20a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:29:96:05:49:13:ea:2e:32:19:ec:7d:da:ea:ff:f2:5e:ce:
         40:9b:25:51:85:5f:f6:dd:c5:c5:e2:e2:e4:ef:63:63:3c:64:
         53:cd:ac:d5:d8:38:97:51:6d:86:27:bb:94:b2:55:3e:1d:75:
         e3:39:a0:15:7a:9c:35:2b:68:ad:98:10:4f:2a:38:1b:c2:4a:
         05:f6:8a:7d:01:b6:8c:5a:f5:5a:4f:46:84:d4:a2:a4:7d:d7:
         ba:e0:63:51:e3:e7:07:6c:2f:66:bb:ae:ff:bd:18:6a:45:51:
         68:0a:bb:ec:f4:af:cc:0b:4a:6d:da:f4:43:3f:da:e5:54:66:
         01:81:5a:a3:e9:70:9d:af:eb:26:f8:a8:ff:7b:e4:5a:b7:76:
         68:dd:a3:3e:94:24:50:91:2e:c6:ef:49:36:b1:8a:cc:42:a2:
         dc:69:23:51:c4:90:d7:eb:6f:d6:37:c7:9c:59:e7:d4:4f:5e:
         e7:9e:df:83:eb:0f:ac:77:f5:90:8b:24:ed:e2:be:c4:4f:9e:
         01:01:0b:01:d9:bb:bb:8a:94:0b:0d:56:c3:00:09:ba:66:c4:
         9a:e2:97:5c:1a:49:89:b3:83:55:df:98:a3:c6:af:4b:97:be:
         2f:4e:ae:90:00:80:11:bc:ed:32:53:c6:f9:1c:f3:38:4a:ea:
         22:70:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:44:51 2025 by rpki-client