Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa
File:                     161dec06-6c33-3687-a1b6-87c3c35a09d6.roa (raw, json)
Hash identifier:          IfiGlOcfIdZGsisVsPcRFgB9n7dOH6ddiUjhKJYKQHY=
Subject key identifier:   7E:78:8F:A1:37:50:81:04:5C:CA:0A:D0:AF:7A:14:27:8C:DC:D6:24
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFD88E7B30E15CE0A7100
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fd:88:e7:b3:0e:15:ce:0a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=fdc8c991-f2a4-4a92-ae59-b12890034332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:9e:9f:6f:ac:3e:2f:c1:34:0b:ee:d1:70:
                    b7:d0:0e:c2:e3:67:23:b5:72:32:71:b1:f3:14:fd:
                    02:bd:b4:45:d6:48:4a:ff:60:70:4d:38:d8:fe:32:
                    18:79:2c:f6:00:15:ec:7b:1c:e2:16:9e:d4:ba:36:
                    61:e8:ff:07:cb:54:19:af:c6:d2:15:35:6c:fe:ac:
                    83:26:d0:59:b8:08:02:37:14:24:d9:73:e9:04:ea:
                    7b:6a:ca:bc:55:3c:e6:80:67:5f:32:9f:70:13:45:
                    46:d3:9d:95:a4:dc:1e:31:c1:53:3b:e4:57:f0:81:
                    04:27:73:c6:17:d9:f0:a2:50:5d:c0:4f:9e:f1:de:
                    c8:f7:95:2f:7e:e0:93:7c:df:ca:4a:d3:ad:65:29:
                    64:b4:7b:ac:58:9e:f8:15:c0:7c:ec:b7:d8:9e:e6:
                    7f:73:96:93:ab:01:4e:dd:c3:4f:0b:68:52:97:1c:
                    0c:d7:c9:47:1d:04:de:4a:cc:67:1c:c0:28:ec:e7:
                    17:76:68:b8:d1:ed:51:43:88:38:24:3b:15:fb:1d:
                    2c:64:b5:56:7b:44:bf:c3:1c:87:e0:31:d3:b1:f0:
                    77:42:92:da:b6:5c:6f:a3:bb:bd:8f:d8:bc:ed:90:
                    08:b9:81:93:40:a9:03:6e:fc:9f:f5:75:90:1b:b9:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:78:8F:A1:37:50:81:04:5C:CA:0A:D0:AF:7A:14:27:8C:DC:D6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:0d:ab:cf:83:e2:ca:24:ca:86:aa:17:2d:3e:92:ee:24:
         11:25:bc:28:d6:99:cf:23:cb:ce:f0:a1:4f:04:1f:60:a9:23:
         18:2d:1e:10:47:fb:9a:48:bd:48:fc:94:6e:6e:fa:f8:f9:b2:
         fb:38:c0:46:bc:5f:77:a8:01:a4:53:80:48:59:69:da:7e:b5:
         32:74:10:15:09:11:2e:0d:c4:ec:89:5e:96:46:b5:09:1a:22:
         87:16:59:83:d0:e4:7e:15:1c:3a:98:7b:79:1b:50:c5:74:14:
         e6:de:b7:3c:cc:4f:66:3e:dd:10:ab:c0:96:a8:7f:c3:b9:3f:
         36:14:2c:be:a3:1a:c8:db:f7:e9:c7:8a:94:10:66:9f:b0:29:
         6c:09:91:04:8b:7b:7f:60:20:cc:9a:55:93:37:6a:16:0b:e6:
         ab:f7:7b:84:cd:c9:36:a1:23:06:63:64:cc:9a:b1:32:f1:49:
         59:52:de:83:89:dd:33:f3:e9:3a:5e:57:43:51:e1:ca:e6:9b:
         31:17:6e:d0:34:33:ca:25:7e:84:3b:f8:da:8b:28:e8:ef:0d:
         db:29:96:ab:2d:cf:f2:05:a4:a7:88:30:7f:0c:2d:63:88:fc:
         37:e0:17:be:56:f6:54:cb:41:c1:10:6c:ac:93:aa:7e:90:c9:
         c4:d8:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:13 2025 by rpki-client