Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa
File:                     f7b06728-a568-34f0-8804-8ed95e306cfb.roa (raw, json)
Hash identifier:          n29Zqb+MAo27LKjyJs4q8AkiqzLXPevH1mtVZhcerYc=
Subject key identifier:   57:E0:EB:34:52:48:04:B0:CF:EA:83:52:7D:61:CB:16:58:EB:5A:07
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23BFFE4F52096EDB3E183080
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:fe:4f:52:09:6e:db:3e:18:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=30c8c2b8-be19-4f48-90ab-55c5b4dee19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8d:cc:f4:ad:90:bb:36:bb:4a:f6:95:bf:42:
                    bb:cb:95:59:88:5d:f7:7a:e6:a4:5b:6e:20:95:1d:
                    50:eb:08:df:af:48:b3:82:2d:eb:a4:c0:ed:a9:1a:
                    95:e2:bb:e5:85:07:6e:9d:fe:c5:b5:f6:69:dc:99:
                    19:5c:16:fa:8e:d8:4e:c4:4d:95:93:21:0d:10:61:
                    74:9a:f4:eb:6d:c7:a0:14:d5:2e:7a:21:b9:e4:07:
                    11:fa:9b:33:f3:ee:fe:b8:88:c6:2b:1f:2f:64:ba:
                    fb:19:ca:7c:8b:48:2c:ca:51:4d:9f:5a:bc:63:24:
                    3a:6e:77:6a:75:20:86:a6:dd:cd:f5:83:e3:24:ef:
                    70:fd:56:c7:18:1c:2f:8f:96:58:ab:0e:a5:37:6b:
                    38:99:ac:b2:34:78:81:e4:ca:1c:cb:49:7a:fd:05:
                    9c:e4:c5:cc:60:f6:16:51:76:0e:21:65:c8:53:70:
                    33:b4:53:db:04:1b:83:17:92:a7:76:9d:d3:b3:1c:
                    63:44:7e:f0:b3:1c:2b:a6:88:49:08:23:77:57:cf:
                    e4:03:d1:ef:68:be:64:43:0b:41:6e:d9:32:2d:89:
                    93:3b:c9:5d:01:08:7d:1f:53:b1:5e:93:e0:44:92:
                    1b:3d:9a:7a:9c:9c:07:56:7f:28:fe:6c:54:43:4a:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:EB:34:52:48:04:B0:CF:EA:83:52:7D:61:CB:16:58:EB:5A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:51:5e:71:0a:bf:0c:de:d8:7c:59:5e:64:b5:cf:2c:0b:
         b4:37:94:9e:b1:48:91:60:0f:20:69:2a:aa:61:ad:e5:22:ee:
         56:73:03:8c:6b:19:05:92:3d:de:44:1f:df:87:4d:59:0e:dd:
         d5:1a:75:d7:d7:99:50:4d:a4:2f:82:80:88:89:7c:68:10:16:
         52:66:3f:b6:b0:83:56:c2:cf:ee:db:8a:bc:7d:82:50:18:a0:
         26:27:78:d3:2c:bf:df:98:7f:23:53:f3:c8:54:cc:ac:71:84:
         e3:88:32:75:c8:5f:14:7e:fc:9c:70:d8:55:a3:b8:7b:57:e6:
         7a:dd:c1:29:bb:ba:fc:02:01:37:00:22:2f:df:51:eb:80:90:
         82:e3:cd:c0:2b:90:45:dd:25:e1:5c:c0:ee:b3:9c:59:53:46:
         f7:6c:75:4d:d1:9d:10:ea:04:d9:1c:51:e0:a0:59:53:e1:92:
         bd:7c:de:4f:be:b6:9e:ff:54:89:8f:26:d8:e1:e3:93:f8:30:
         2c:89:53:d0:83:3b:22:71:cb:59:49:a4:51:f2:f6:c2:62:d7:
         5e:78:67:e3:0e:65:be:96:f1:93:6f:97:e5:ba:51:26:9c:f9:
         c9:76:7a:3b:a1:a3:72:93:0d:12:7f:d7:0e:b4:61:49:84:a0:
         9f:67:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:07 2025 by rpki-client