Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
File:                     0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa (raw, json)
Hash identifier:          9YPQSFISKGIMrMOVERNaztx0VzW2Nv+0qlCsfAkU+mw=
Subject key identifier:   4E:EB:DA:3C:04:E5:6A:2C:7F:CD:B5:61:14:8C:7A:85:98:8A:16:E7
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B047C214E65182019BFD8AF80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:21:4e:65:18:20:19:bf:d8:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=27af61e9-ff89-426b-9509-a6552a697768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:d3:13:6a:be:d0:40:a5:87:d8:e3:e5:24:
                    29:61:15:8a:ca:0d:eb:e2:d6:24:fa:fe:18:fa:84:
                    4f:68:d0:f1:cf:c8:cb:fc:10:83:59:56:53:25:07:
                    85:94:d4:b1:bf:60:e3:15:cf:14:65:a3:4c:b9:16:
                    6e:ad:eb:7f:2f:2c:31:2e:23:26:ba:8c:9d:8f:b7:
                    f2:b9:53:09:02:6c:54:db:81:77:5c:93:54:7a:d6:
                    9c:84:44:f6:d4:f3:71:4f:e9:2c:0e:10:c3:11:10:
                    8d:eb:1e:d6:78:ad:9f:69:7b:2d:11:3b:b5:37:92:
                    db:2c:2a:d5:6c:66:71:af:74:a2:96:c9:37:a1:bf:
                    d3:44:0c:f5:46:fc:37:1c:71:4b:ee:02:24:6b:24:
                    6c:dc:93:f4:76:53:20:78:08:75:3e:b2:35:d5:d8:
                    31:8c:8c:5b:86:61:4e:fb:54:23:20:40:82:b8:bc:
                    b8:66:92:13:13:53:4b:b3:5a:79:52:51:31:37:a0:
                    eb:c0:b7:ca:20:6e:25:6c:fe:f1:4f:2d:bc:de:59:
                    36:d4:51:de:6e:b7:6a:85:3a:f4:b1:f6:71:3a:09:
                    dd:e2:ac:16:f0:f0:72:55:81:ce:6c:c6:e6:4d:ad:
                    ac:38:9f:05:57:6f:d6:fb:cb:de:0b:a1:49:9b:a4:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:DA:3C:04:E5:6A:2C:7F:CD:B5:61:14:8C:7A:85:98:8A:16:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:80:95:d1:75:a4:f5:83:0c:cf:8f:7e:3d:bc:45:6c:2e:
         da:28:0f:fa:7a:a9:3e:f3:55:3e:19:6e:49:7d:21:eb:03:dd:
         bd:22:53:62:f8:88:b1:d8:18:28:12:e4:fb:74:8e:6b:a1:7c:
         39:6d:c1:75:4a:19:a8:1f:fd:18:83:73:0b:09:3a:33:fc:13:
         94:b1:56:90:c9:64:ef:39:73:92:7f:1a:0e:83:ea:fe:e3:07:
         7f:db:2a:e3:5b:a8:3f:07:7e:ba:4b:a8:39:7a:32:5c:45:80:
         14:87:f7:79:be:0e:d8:8b:1c:d6:86:81:19:c1:92:cb:99:f5:
         7a:88:e1:60:7f:bf:f2:42:a0:55:17:34:1a:04:09:eb:05:99:
         fb:ed:77:a4:c6:01:07:9e:86:4b:a3:16:c4:d9:9e:7a:2f:47:
         20:c9:d2:d7:a5:64:ae:7b:29:89:16:62:0d:08:7d:da:d6:8c:
         51:9a:1a:c2:86:c1:fb:8d:23:85:0d:6a:51:7f:b1:66:0e:1d:
         5c:26:28:c6:27:57:49:7a:f7:3c:b6:18:1d:65:16:2d:78:3e:
         e2:16:c9:cd:2c:02:3b:b4:b2:9f:b7:b5:8d:88:23:7c:fe:3d:
         c2:2a:b1:7f:27:fb:78:fb:4f:ee:c1:c2:29:88:c1:60:db:55:
         e6:e1:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:49:30 2025 by rpki-client