Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa
File:                     f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa (raw, json)
Hash identifier:          H3FlNHvLF1LtqUT1X2w1sW0FuDRdyn/0fIolKnYmwcM=
Subject key identifier:   01:5F:7C:20:68:44:39:22:B3:B5:81:F1:2E:D8:26:1E:5B:FE:79:E3
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584AC5AB94B02115CC8943EB0640
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13445
IP address blocks:        2607:fcf0:10a0::/44 maxlen: 48
                          2607:fcf0:20a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:94:b0:21:15:cc:89:43:eb:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=58c9df11-35a9-4969-b03a-c431a9f05e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:0e:bc:73:5f:ab:98:69:88:04:a5:8e:a1:
                    df:0f:51:e7:25:a7:0c:42:fd:3a:0b:39:d9:83:d8:
                    e0:11:85:66:8a:86:cd:01:55:08:3f:62:95:44:79:
                    35:f0:3e:4c:af:a4:e1:a0:38:28:a9:8b:2b:51:b6:
                    94:1e:ee:59:d5:44:13:45:50:0c:0f:ff:23:98:1f:
                    ef:78:b1:7f:af:54:aa:fb:4f:14:f4:19:ea:24:21:
                    72:0f:4f:d6:18:4f:93:e8:9f:5b:e6:71:40:51:88:
                    0a:d9:1e:34:9d:24:54:4a:be:7b:63:1f:fb:90:c6:
                    ec:a3:c3:c0:cd:a3:cf:3d:31:b6:9f:be:dd:cc:3e:
                    76:db:e6:49:11:12:a0:10:b7:15:a6:d8:16:f2:1a:
                    7d:4b:83:9a:6c:5d:bf:89:17:b0:90:eb:ca:82:81:
                    98:1c:9c:91:49:0a:61:20:8c:d5:1a:24:bc:ef:12:
                    33:0a:f6:6f:e6:97:4f:2e:65:59:56:78:31:ae:9c:
                    db:e7:8e:80:8a:ad:89:10:04:fd:52:e2:bc:92:ac:
                    11:e0:cd:12:06:de:f9:56:07:3b:c1:7c:bf:59:e2:
                    90:e5:95:76:14:09:72:e5:9d:88:1d:35:00:5d:a5:
                    2a:ed:d5:18:69:71:fa:26:85:5d:77:ef:b2:86:cc:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:7C:20:68:44:39:22:B3:B5:81:F1:2E:D8:26:1E:5B:FE:79:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:10a0::/44
                  2607:fcf0:20a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:e5:80:f7:17:9f:89:08:6a:70:45:88:b3:44:7d:cd:c9:
         a9:21:ff:05:db:6b:37:5b:74:c7:e8:a4:fb:e0:ad:6b:4a:58:
         88:4a:83:d8:83:74:a8:13:03:55:bb:3b:6b:72:d5:ce:94:2b:
         7d:25:a9:a3:3c:4e:9d:86:1b:f3:3c:98:32:ef:a8:3d:ee:1f:
         cc:f4:43:18:5c:b4:7f:34:ac:44:57:04:e1:9d:dc:37:f0:3e:
         ca:8a:82:da:d4:b2:2b:15:e4:a8:45:15:0d:38:59:5e:d3:62:
         52:8b:bd:09:fc:2f:cc:94:bb:8d:5b:a6:cc:cb:b7:41:dc:e6:
         91:d8:b1:18:c2:cf:08:7e:55:70:d5:ed:2d:c3:24:08:b7:4c:
         a7:ac:19:f8:d9:9b:1a:96:8a:b0:92:8e:53:92:19:2b:9f:a3:
         3a:5e:67:03:e2:31:c4:89:d2:f5:55:55:5e:1a:86:6f:9a:a6:
         0a:97:36:af:e6:17:03:69:c9:43:b0:1f:80:e1:e6:d0:8b:da:
         af:d3:84:a7:d4:81:cf:dc:25:17:e3:14:06:c3:4a:2f:6c:f2:
         0d:a9:67:96:a7:e4:d1:88:0d:88:06:3e:5e:e8:c4:3a:4b:aa:
         80:95:50:81:50:13:17:72:37:e7:79:06:63:ab:df:6f:d5:e7:
         6c:83:74:95
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErFq5SwIRXMiUPrBkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
NThjOWRmMTEtMzVhOS00OTY5LWIwM2EtYzQzMWE5ZjA1ZTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw30OvHNfq5hpiASljqHfD1HnJacMQv06CznZ
g9jgEYVmiobNAVUIP2KVRHk18D5Mr6ThoDgoqYsrUbaUHu5Z1UQTRVAMD/8jmB/v
eLF/r1Sq+08U9BnqJCFyD0/WGE+T6J9b5nFAUYgK2R40nSRUSr57Yx/7kMbso8PA
zaPPPTG2n77dzD522+ZJERKgELcVptgW8hp9S4OabF2/iRewkOvKgoGYHJyRSQph
IIzVGiS87xIzCvZv5pdPLmVZVngxrpzb546Aiq2JEAT9UuK8kqwR4M0SBt75Vgc7
wXy/WeKQ5ZV2FAly5Z2IHTUAXaUq7dUYaXH6JoVdd++yhsxSQwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFAFffCBoRDkis7WB8S7YJh5b/nnjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjY3N2QxZTQtNDkyNi0z
YWE5LWE3YWItNWFmZDQ5MGUwNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgf88BCg
AwcEJgf88CCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABr65YD3F5+JCGpwRYizRH3Nyakh/wXbazdbdMfo
pPvgrWtKWIhKg9iDdKgTA1W7O2ty1c6UK30lqaM8Tp2GG/M8mDLvqD3uH8z0Qxhc
tH80rERXBOGd3DfwPsqKgtrUsisV5KhFFQ04WV7TYlKLvQn8L8yUu41bpszLt0Hc
5pHYsRjCzwh+VXDV7S3DJAi3TKesGfjZmxqWirCSjlOSGSufozpeZwPiMcSJ0vVV
VV4ahm+apgqXNq/mFwNpyUOwH4Dh5tCL2q/ThKfUgc/cJRfjFAbDSi9s8g2pZ5an
5NGIDYgGPl7oxDpLqoCVUIFQExdyN+d5BmOr32/V52yDdJU=
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:20:59 2025 by rpki-client