Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa
File:                     e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa (raw, json)
Hash identifier:          8MyL9/T9yQgnqFPcvQ5wAzARY6G75VGH2fFq69fX/78=
Subject key identifier:   4E:13:E1:C2:A2:70:03:03:BE:C6:D0:CC:CF:1E:C1:BA:21:0F:7C:13
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B047C2058D2980A29C9C89F00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:20:58:d2:98:0a:29:c9:c8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=c1af94b2-306e-43e1-bf9a-281e186a32e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:32:5f:aa:b6:55:60:77:1e:32:54:ec:69:
                    99:7f:0e:eb:a0:7a:c3:7c:35:f3:0b:ae:f4:b5:37:
                    f7:90:d9:b9:82:e6:23:45:e8:97:e9:7a:d3:09:12:
                    28:6c:2f:66:c3:0d:ed:2e:c5:2f:8c:e8:06:a4:de:
                    91:00:6d:2e:33:3f:8d:ce:85:c8:a7:71:b6:92:8c:
                    f2:ef:de:6e:77:ab:39:2c:01:92:45:81:3b:86:40:
                    41:28:1d:e8:98:b4:0c:b7:71:12:52:6c:a3:0f:52:
                    9f:f4:44:48:f4:8a:43:24:20:46:71:32:5d:dd:d2:
                    d4:7e:8f:c7:c1:eb:43:3e:48:51:65:51:53:71:e1:
                    bc:2c:13:f8:b6:8d:aa:a2:b7:24:05:c0:7c:6c:31:
                    a8:99:12:93:70:27:b1:b1:57:0d:a6:91:3d:29:f5:
                    0b:f1:86:a7:6b:b3:4c:16:37:66:d8:d7:0f:b4:15:
                    0b:5a:d6:86:7f:6e:28:f5:bf:3d:23:8c:57:a9:9b:
                    08:72:bb:ef:9c:19:d2:70:77:2c:81:42:f5:e1:f2:
                    b2:08:44:ff:86:43:56:22:1b:8b:af:36:39:8f:1b:
                    67:d9:c7:90:2b:e5:89:21:38:ae:82:db:45:a0:2d:
                    8a:a7:00:0c:dd:32:8d:04:02:63:7e:ef:e0:ab:44:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:13:E1:C2:A2:70:03:03:BE:C6:D0:CC:CF:1E:C1:BA:21:0F:7C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e11f50fe-e6b7-3b3a-8cd2-96f8c4a124cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:81:04:75:c6:98:f7:ca:9e:9b:32:54:ae:09:07:b6:69:43:
         a1:91:d8:ef:57:9d:44:bb:6a:4c:7a:aa:5f:cf:2b:52:d7:40:
         b0:ae:10:78:88:d1:c6:e0:f5:e9:ae:2d:2a:cf:0a:7d:b7:92:
         18:2b:72:3e:71:b0:49:7d:87:44:05:aa:36:52:32:24:3f:81:
         c0:0d:7a:5a:63:0b:4a:3c:13:fb:ad:d3:5a:cc:6e:46:78:c0:
         98:ef:af:74:56:8b:5b:21:e6:da:59:08:29:86:45:94:fb:35:
         68:ee:a9:70:46:06:68:c7:c2:be:95:6c:5b:db:92:fe:a6:8b:
         6b:93:9f:09:46:49:3a:79:0a:7c:f3:61:23:72:4d:bb:7c:e0:
         5a:a4:a7:6a:53:c8:9c:67:33:57:3b:dc:89:a3:4c:24:07:15:
         8b:ab:88:e2:be:0e:3d:1c:87:34:5c:42:19:61:8e:96:2c:ac:
         7b:dd:7a:de:91:af:1b:99:a4:4f:23:c7:57:69:60:eb:2d:3b:
         61:94:a2:ff:00:ba:26:63:92:91:66:42:76:07:e8:84:73:9b:
         2e:71:9d:77:32:77:5a:23:7f:6d:49:a0:31:2e:0c:92:e1:a7:
         0b:ab:aa:d8:5e:d5:37:7d:48:fe:39:e4:d8:c8:71:7f:43:e1:
         94:42:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:49 2025 by rpki-client