Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
File:                     8f629efd-e098-3f71-8aa1-1f37fc392af3.roa (raw, json)
Hash identifier:          st9XObpbEjHQSePBn05Knk7iQjHCcuLLg6CFfIoTULM=
Subject key identifier:   4E:E1:5F:ED:87:16:04:80:BF:1B:1A:F7:6E:DE:A3:E4:8B:6F:CB:13
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B047C2046F5073D4A7FA55180
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:20:46:f5:07:3d:4a:7f:a5:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=21848f5c-f2a3-4476-9466-0862ce921cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:3a:50:30:e6:8c:f0:0c:98:d6:43:9e:1f:
                    70:58:dc:8f:7c:dd:db:76:13:51:80:50:f8:61:a2:
                    8a:b0:93:1d:91:d8:07:6b:a2:40:07:f4:f2:82:51:
                    c2:3e:59:5f:fb:25:7d:6c:6f:af:eb:c3:94:12:5b:
                    6b:d4:37:75:e7:c8:5e:98:49:90:81:d8:88:16:dd:
                    f9:ae:36:d5:cd:2b:b9:56:17:24:11:a4:03:37:19:
                    76:71:ce:26:5f:87:42:75:80:c9:9c:1e:04:e6:29:
                    6f:1b:59:3b:f8:cb:00:6d:07:d7:1d:5e:5c:39:09:
                    e5:b0:36:52:fc:d9:bc:9c:ce:23:81:56:19:e2:75:
                    69:9a:11:b1:cb:c8:5c:10:16:f1:64:58:9f:f3:b4:
                    63:bb:d9:10:ca:c0:df:16:cc:c6:9a:95:c1:26:b7:
                    b0:74:7a:d9:85:bc:0d:e7:56:9a:06:8b:dd:04:0d:
                    f9:bc:32:95:24:a1:2c:66:18:e4:96:7f:08:ae:50:
                    c1:50:d5:63:15:9d:67:f3:18:8b:0d:d0:20:10:87:
                    41:b5:70:d6:7e:c8:19:0c:a5:f5:41:b8:0e:15:c4:
                    40:03:2f:e8:2c:2b:37:5d:3a:cb:64:ae:a8:85:81:
                    84:d4:3e:1c:c2:39:5f:00:19:5e:5d:e2:f6:a6:7f:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:5F:ED:87:16:04:80:BF:1B:1A:F7:6E:DE:A3:E4:8B:6F:CB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:6a:37:8b:8e:18:54:9b:47:c9:a6:6e:d0:9e:10:ae:ab:
         ca:a8:1d:ca:ff:68:03:27:ca:3c:19:b8:7a:69:81:5d:11:41:
         c9:53:b7:db:aa:9a:43:b2:74:93:0b:52:a8:2b:55:4b:e7:f6:
         21:a4:0f:94:26:c1:92:80:39:b3:d6:04:1c:a1:72:16:5f:68:
         f5:cc:e8:31:6a:ba:54:d2:2f:a6:e7:c1:f7:e2:7f:b0:0e:95:
         0c:5f:09:52:69:c4:9c:44:1b:c8:31:75:79:13:b0:9e:0b:a3:
         47:49:07:8c:6a:6d:46:51:3d:c5:54:b1:ef:e7:8e:66:4b:92:
         4f:6a:9a:bb:56:c2:03:f1:47:24:9d:90:ca:81:42:f4:f2:c0:
         33:c7:33:09:d7:cd:a3:a7:6b:76:92:16:d8:e5:9b:45:95:4e:
         ec:d1:76:0d:ec:74:a3:5f:58:3a:d0:60:b3:c5:89:3a:d8:9e:
         6b:21:41:3f:27:a0:54:1f:d2:6e:6b:54:06:d9:58:a3:df:57:
         b6:44:af:f9:9c:ad:1e:eb:f1:7f:11:da:4d:0c:be:bd:48:46:
         cb:5f:2f:c6:a6:f8:81:cc:c0:54:3e:c6:20:b4:ef:e8:39:79:
         bf:61:ff:69:a9:3c:02:c2:d6:61:11:4a:69:b8:d4:f4:cb:a0:
         98:64:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:46 2025 by rpki-client