Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa
File:                     1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa (raw, json)
Hash identifier:          5DmH3hUoHADovSUHtlqtBtqvJwrX/74jf/R47mNygaE=
Subject key identifier:   AC:0C:86:5A:96:20:FD:F6:C3:AC:84:76:37:FA:60:6E:ED:7C:0B:2D
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFEE2C0AD8DEE811D1540
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fe:e2:c0:ad:8d:ee:81:1d:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=124d45a3-a11d-4d49-a4f8-abd1e5011be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:63:90:dc:19:9e:a3:4b:d4:ac:7e:74:4a:
                    ae:25:fc:d4:0a:ec:f6:c6:0f:22:8e:70:f6:a8:0c:
                    9d:20:da:c7:3a:b2:a5:92:d3:ab:b7:87:c1:25:a6:
                    e3:22:1b:63:a8:99:c5:04:c9:d0:e4:f5:1b:dc:19:
                    11:d6:19:b5:e3:a6:6d:45:35:e8:03:e7:c3:15:b8:
                    0d:c4:2e:e7:bd:d1:09:a0:7b:49:65:08:32:87:bc:
                    cd:34:ba:06:e5:f6:29:3d:5d:a0:8d:bd:58:60:be:
                    5e:ed:81:b1:ea:f9:66:6e:3e:fa:14:95:76:20:b0:
                    b5:80:8f:34:4f:2e:0d:e8:8d:2e:db:ab:f4:39:ca:
                    d8:75:a8:6b:84:2b:c5:d0:53:62:14:35:27:3d:c7:
                    6b:fa:f2:36:e2:56:91:74:0e:7c:7c:c3:0c:92:01:
                    8e:ed:2a:af:ee:64:9a:7b:f9:82:e1:a9:6a:e6:83:
                    85:e2:ff:fd:95:c2:e7:b2:d0:c5:3f:58:fa:4e:b1:
                    7b:ed:6b:f3:91:5a:7f:be:96:d5:f5:93:e6:29:3d:
                    9f:7e:3f:a7:e5:8b:19:18:cd:e8:b7:fb:f8:d9:8c:
                    09:b6:14:a4:85:84:d7:ec:fb:65:7e:00:7c:19:6c:
                    3e:f7:59:a5:32:21:94:59:95:9f:13:a5:e2:19:91:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:86:5A:96:20:FD:F6:C3:AC:84:76:37:FA:60:6E:ED:7C:0B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:3e:40:df:f7:f4:e3:8f:85:68:69:62:68:78:d0:a0:76:23:
         de:f6:ad:11:94:65:b9:f6:8a:36:fc:07:03:5d:9d:e7:52:bb:
         d0:ef:4a:89:3d:3a:7e:37:cf:84:b0:a3:27:1d:2d:11:5b:49:
         e2:4b:24:b5:f1:4a:44:d5:e3:d5:8e:43:88:dd:7d:bd:8e:2f:
         67:df:59:29:08:1b:c0:b4:b5:00:35:a1:3f:7c:8a:ac:11:79:
         55:a5:96:17:48:cb:3b:10:a3:6c:48:0a:a6:20:db:46:0c:d6:
         63:dd:1e:2f:a6:31:8c:10:78:65:99:1a:98:fc:5b:bf:e3:ea:
         40:59:a3:c3:bf:54:4a:f4:34:58:ea:e9:5f:16:4f:63:b9:c5:
         96:ee:70:6f:09:3b:31:1e:d7:35:ac:ba:c5:21:5b:fe:06:37:
         b8:64:34:4c:2a:23:27:d1:ce:2e:7b:42:ab:7c:70:7e:7b:ce:
         c4:b1:45:a6:02:e7:2a:3e:e0:1c:9f:2c:f0:57:1b:07:74:2c:
         a9:47:1a:9c:19:f1:0b:4f:b4:50:15:d6:0e:62:ea:84:4c:a0:
         b1:a0:d7:db:86:90:c1:47:46:99:cb:16:f4:3c:a3:97:e9:5f:
         00:28:a2:b0:00:48:0b:b9:e9:57:ac:aa:1a:1a:36:d5:1d:e1:
         dc:ad:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:34:46 2025 by rpki-client