Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa
File:                     aa45ee55-420d-375e-acab-502fb74065d3.roa (raw, json)
Hash identifier:          wrNySlzfgpGSFSBkyN4uK3gC95Q4bzBN9TIaGKsRdlY=
Subject key identifier:   4F:64:34:16:25:86:94:54:19:BC:CA:CA:01:AE:FC:16:DF:33:55:0F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFD7794605CEE5D722C00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fd:77:94:60:5c:ee:5d:72:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=8176d674-2538-417a-b2f0-1cfce1f64c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:be:c3:b5:76:4b:e6:15:b2:82:a6:ae:1f:
                    8f:c5:18:51:78:c7:ad:c2:c3:92:d2:a2:61:95:74:
                    62:e1:e7:cf:fc:72:0c:34:a3:c2:18:10:b2:ea:7d:
                    14:20:9a:08:ff:21:0a:7a:fb:1e:62:44:2a:06:4d:
                    95:55:87:cd:7a:be:c2:d3:49:c5:ec:1a:5b:81:0c:
                    ff:24:4f:8f:1c:4e:2f:0a:c9:d6:e7:f4:14:73:9f:
                    41:a3:8a:0d:b5:15:cc:92:be:61:29:a3:b2:94:04:
                    92:1b:21:f4:eb:8b:4e:79:20:4d:5a:96:61:f8:ae:
                    ea:fd:de:b1:ea:57:52:8a:5d:52:a7:81:99:62:cb:
                    9b:15:71:5e:4c:62:af:9c:d3:ec:ce:75:74:99:03:
                    1f:69:98:f7:65:ed:44:d3:18:d7:6b:de:f1:23:e2:
                    95:78:bf:da:87:26:1b:2f:fb:72:f1:18:8c:e2:6e:
                    2c:8e:e7:93:9f:be:9d:6c:49:62:12:c7:cf:42:0c:
                    e5:82:07:e6:07:0e:19:c0:fe:cc:03:cc:81:48:26:
                    2b:81:a3:ad:8b:c8:28:92:32:f3:02:f1:0e:bb:e2:
                    04:78:06:02:8d:d9:b4:32:9a:e5:4e:26:0f:1c:c4:
                    57:fd:db:0b:b2:39:3d:94:a6:ac:b8:e9:0f:07:7c:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:34:16:25:86:94:54:19:BC:CA:CA:01:AE:FC:16:DF:33:55:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/aa45ee55-420d-375e-acab-502fb74065d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:bd:28:19:53:ad:55:0c:cf:e3:e5:1e:7c:6c:a7:0b:c9:
         14:84:7b:63:b7:18:8c:fb:ea:2c:8d:54:80:e9:5f:6b:f1:f5:
         f1:4f:6b:16:32:e6:ea:03:46:6d:00:76:49:f2:d4:6f:a4:66:
         7d:e2:03:09:a5:eb:a1:54:41:75:24:0d:f7:5a:85:43:f9:0d:
         70:d4:db:bd:b9:73:05:39:53:2a:a4:55:8b:58:12:d8:30:35:
         4f:b8:60:02:25:04:06:e9:8f:d9:d6:82:af:29:32:9b:9a:78:
         c2:8a:0f:b1:48:b3:10:cb:05:bd:71:48:ce:7b:83:7d:a6:50:
         85:ef:db:3e:bf:9d:33:c9:be:40:18:38:2c:0d:25:ba:4b:78:
         76:eb:e9:5e:ad:aa:02:98:36:70:5c:9d:6e:e5:8f:94:7d:d6:
         62:1e:c0:b5:a7:33:aa:fc:5a:fd:c4:35:d0:e9:89:ae:19:b9:
         48:0e:82:2c:b7:57:ad:03:94:07:08:9a:1a:86:43:09:be:64:
         a5:65:90:fb:b9:e6:f4:da:18:13:c0:e8:7d:52:53:a7:3d:62:
         e8:cf:fa:c1:e8:db:0e:07:50:fb:7c:0c:a2:c1:07:b3:f9:86:
         60:a4:94:60:e3:98:80:b3:73:c0:79:88:e4:08:22:d2:0c:18:
         7a:c6:ef:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEojv/13lGBc7l1yLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ODE3NmQ2NzQtMjUzOC00MTdhLWIyZjAtMWNmY2UxZjY0YzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSC+w7V2S+YVsoKmrh+PxRhReMetwsOS0qJh
lXRi4efP/HIMNKPCGBCy6n0UIJoI/yEKevseYkQqBk2VVYfNer7C00nF7BpbgQz/
JE+PHE4vCsnW5/QUc59Bo4oNtRXMkr5hKaOylASSGyH064tOeSBNWpZh+K7q/d6x
6ldSil1Sp4GZYsubFXFeTGKvnNPsznV0mQMfaZj3Ze1E0xjXa97xI+KVeL/ahyYb
L/ty8RiM4m4sjueTn76dbEliEsfPQgzlggfmBw4ZwP7MA8yBSCYrgaOti8gokjLz
AvEOu+IEeAYCjdm0MprlTiYPHMRX/dsLsjk9lKasuOkPB3wVjwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE9kNBYlhpRUGbzKygGu/BbfM1UPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWE0NWVlNTUtNDIwZC0z
NzVlLWFjYWItNTAyZmI3NDA2NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf88AEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAvDK9KBlTrVUMz+PlHnxspwvJFIR7Y7cYjPvqLI1UgOlfa/H18U9r
FjLm6gNGbQB2SfLUb6RmfeIDCaXroVRBdSQN91qFQ/kNcNTbvblzBTlTKqRVi1gS
2DA1T7hgAiUEBumP2daCrykym5p4wooPsUizEMsFvXFIznuDfaZQhe/bPr+dM8m+
QBg4LA0lukt4duvpXq2qApg2cFydbuWPlH3WYh7Ataczqvxa/cQ10OmJrhm5SA6C
LLdXrQOUBwiaGoZDCb5kpWWQ+7nm9NoYE8DofVJTpz1i6M/6wejbDgdQ+3wMosEH
s/mGYKSUYOOYgLNzwHmI5Agi0gwYesbvyA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:29 2025 by rpki-client