Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa
File:                     59ed2e97-c326-30f0-adb6-901d82718f8a.roa (raw, json)
Hash identifier:          2iTk7RmX8QccpVPS6sAMF2a8kzdMBh/KWBYhawzMl58=
Subject key identifier:   E3:B5:DC:F3:DA:85:31:87:4E:6B:65:44:17:A7:9B:4C:97:2C:31:15
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B047C20FDA529CC5807052F80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        2607:fcf0:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:20:fd:a5:29:cc:58:07:05:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=d2d51dfc-3bd7-48fd-81b6-7807b5f5925f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:98:92:91:81:27:0d:ce:0b:df:a3:56:9a:
                    c8:f8:eb:d8:e9:ba:18:58:a4:18:9e:fd:6b:10:9d:
                    e3:fd:14:1d:5d:0c:27:9f:17:07:af:16:a1:07:2c:
                    a9:fc:b9:44:44:fb:d8:d0:80:a1:8f:a8:ff:db:a6:
                    97:b0:f3:8d:b0:56:7e:2c:6e:28:8a:99:52:7e:73:
                    da:77:29:90:82:6a:4c:a8:73:c4:ba:2f:d8:c4:f3:
                    38:3e:83:91:22:e2:2c:91:f2:e2:87:7a:96:e4:d0:
                    e9:e5:2e:ff:d6:e2:2f:98:1a:b6:0e:39:68:af:24:
                    5a:f5:7c:71:b8:35:10:04:3b:b0:35:70:65:5d:48:
                    1f:79:e1:9a:69:7b:95:3b:cd:7b:29:1a:8c:74:b8:
                    da:c1:cc:02:1c:07:f4:75:4f:b8:af:ee:1b:53:58:
                    58:9e:8b:49:e2:95:e8:ca:26:36:6f:bd:51:96:82:
                    18:0f:9b:0d:56:a1:94:85:a5:9c:c0:93:4a:f3:06:
                    69:88:01:d6:56:c5:59:83:24:29:23:d8:1b:35:f6:
                    6b:86:20:e6:1c:79:25:a2:cb:89:e7:00:cb:1e:a8:
                    31:89:e0:68:c0:dd:5e:1a:77:2b:42:ad:84:14:f7:
                    2e:de:9f:be:76:b6:c2:1c:d7:2e:7a:b1:80:e8:9a:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:DC:F3:DA:85:31:87:4E:6B:65:44:17:A7:9B:4C:97:2C:31:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/59ed2e97-c326-30f0-adb6-901d82718f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:78:67:9a:59:17:08:0b:f2:22:97:7b:7c:38:4e:bc:74:3a:
         67:de:2d:80:22:c9:b5:46:06:a6:67:10:38:14:25:14:2d:55:
         e0:6f:6f:8d:c7:a9:4d:8f:51:5d:36:b2:6a:09:3b:8f:fe:9a:
         8c:cb:65:e3:13:6b:09:d8:06:d5:57:aa:42:cd:3d:83:ba:73:
         94:d0:3f:9a:f3:a5:0f:f8:40:7d:a6:6c:44:ad:25:ec:08:a9:
         7c:90:63:f1:6b:72:b6:7a:2c:ce:77:ba:0c:d8:9f:d2:4f:ef:
         c7:02:34:dc:6f:4e:d4:06:a7:a6:50:c5:f9:06:16:10:93:3e:
         bd:00:ed:38:1e:bf:3a:4c:13:2c:b8:14:29:82:e3:1d:74:bb:
         f2:cc:26:12:a3:6c:66:78:c5:cc:37:2b:48:69:c1:03:91:f3:
         50:37:03:68:39:7d:12:e8:49:df:68:ee:f5:d3:36:28:52:32:
         cf:a8:06:9b:4d:41:a5:52:df:a6:26:30:b5:1a:30:9e:b3:00:
         9a:cf:e8:55:ec:65:e3:11:e3:f5:c6:60:78:1a:19:26:3d:30:
         40:37:65:34:ae:4a:7b:19:0b:fd:1c:50:06:24:85:b1:e0:fa:
         41:3a:f7:7e:12:df:4a:55:9e:a1:bc:a8:65:74:41:09:b2:42:
         ea:ac:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:43 2025 by rpki-client