Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/062ea239-1ee8-34d9-a1c4-55faa29c211e.roa
File:                     062ea239-1ee8-34d9-a1c4-55faa29c211e.roa (raw, json)
Hash identifier:          CJQ1I3d+UMXHaqPGS5lH7D303xsKlmoULPw7vknJrLM=
Subject key identifier:   BD:C1:7A:FA:4F:33:48:FC:B9:74:FB:8E:93:9E:9D:79:9F:B2:E1:B7
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B047C22332A47725C10F49B00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/062ea239-1ee8-34d9-a1c4-55faa29c211e.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        2607:fcf0:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:22:33:2a:47:72:5c:10:f4:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=8c03b01f-c9fb-4b4c-a071-0ef43c05c3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:ac:30:12:5c:9e:20:87:cd:f0:21:6e:5a:
                    15:a3:cf:bd:7d:f2:d5:b5:81:ba:97:ea:81:04:2c:
                    45:09:73:a2:c2:e9:eb:2b:78:aa:2f:3d:fa:ff:2f:
                    2c:00:83:08:ea:97:00:58:ef:6d:9c:42:ad:42:ec:
                    56:6b:57:3c:be:95:4b:23:0c:13:be:b5:aa:ed:cc:
                    36:9b:d5:9c:97:9a:57:d5:89:85:78:b6:5e:9e:46:
                    43:1b:70:42:03:93:76:b1:a6:33:3a:b7:37:50:43:
                    37:c6:0b:49:ca:eb:cd:1b:4e:b0:1e:86:42:0a:c5:
                    2d:4c:1a:61:56:15:b8:ac:e7:90:1e:b5:da:b7:72:
                    81:b2:06:1a:10:71:18:ab:0c:f4:4b:ff:e8:00:36:
                    74:09:40:72:d6:c6:c9:ae:bc:6b:d0:62:94:e0:0a:
                    b8:33:8e:54:34:68:ce:2f:37:d9:d2:08:3d:7c:ee:
                    01:ff:2b:45:bc:8c:0a:36:d0:da:d6:9e:a1:38:22:
                    02:4b:89:89:f5:41:8f:a0:8c:f2:41:3d:4b:bd:5a:
                    28:42:f4:46:6e:63:f4:f0:e0:b4:c9:75:d6:0e:0e:
                    63:6d:8d:44:65:10:5d:54:b1:61:3a:01:96:e1:e3:
                    ec:b2:ec:88:67:29:ea:42:9c:17:5f:77:e5:de:b2:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C1:7A:FA:4F:33:48:FC:B9:74:FB:8E:93:9E:9D:79:9F:B2:E1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/062ea239-1ee8-34d9-a1c4-55faa29c211e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:be:75:c0:f2:e9:c2:9f:ea:de:85:32:2c:71:92:e0:04:24:
         3e:8a:cb:ea:1e:4c:ef:fb:b8:59:1c:32:c5:14:23:08:12:51:
         17:0f:a6:48:9f:3c:64:99:2b:3c:b0:02:77:4e:e3:b5:71:b2:
         75:da:be:e3:87:f1:78:49:e0:14:b5:2d:20:85:9b:d8:26:47:
         cd:4b:e3:40:d6:a7:a5:60:06:77:ea:3d:ca:21:b0:c0:9b:6c:
         3f:bf:3a:f1:ba:40:3a:a1:32:9b:b5:72:34:df:d6:e9:cd:f0:
         2c:d5:44:2e:0e:86:25:aa:a7:e9:70:c2:9f:3e:f4:5e:80:45:
         15:31:8b:61:c1:e4:45:d7:55:69:5a:47:85:53:04:87:a5:e6:
         8e:5f:ce:3a:d3:47:bb:da:59:b6:79:6b:14:50:cc:af:3c:07:
         3f:70:55:c0:e0:d9:75:a2:57:cc:f0:a8:6a:58:34:49:f5:13:
         7e:7e:fe:65:44:ab:a7:6f:ac:1c:dc:0c:a4:ff:cf:e0:df:27:
         73:59:f6:50:d1:4d:57:7c:cf:4c:14:75:14:b6:37:4e:b9:6a:
         18:de:25:29:b1:94:86:67:88:92:03:a8:f8:4b:93:f3:e6:fb:
         f8:aa:e2:57:68:2d:35:94:f8:8c:fb:71:85:43:93:44:6d:df:
         8a:9f:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:18 2025 by rpki-client