Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/09cdd5a4-8b8d-313b-abef-dddd6cfd97ac.roa
File:                     09cdd5a4-8b8d-313b-abef-dddd6cfd97ac.roa (raw, json)
Hash identifier:          rdBQFS8EwVzuh8zC6r9NIMXhaKNH0n4G2nuqE/Mx2JE=
Subject key identifier:   92:6B:10:EB:A1:91:F0:13:38:32:98:D1:A5:AD:DC:1E:76:91:0A:D1
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584943FC4BF9734FEE684F578840
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/09cdd5a4-8b8d-313b-abef-dddd6cfd97ac.roa
Signing time:             Fri 21 Mar 2025 21:21:20 +0000
ROA not before:           Fri 21 Mar 2025 21:21:20 +0000
ROA not after:            Thu 19 Jun 2025 21:21:20 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:fc:4b:f9:73:4f:ee:68:4f:57:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 21 21:21:20 2025 GMT
            Not After : Jun 19 21:21:20 2025 GMT
        Subject: CN=20fa2fd5-3725-4ec0-96fe-e46debd59c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:54:40:61:2e:82:a2:a0:5f:e4:ac:b1:db:
                    fc:ff:4c:82:e3:3e:c4:38:65:65:63:0f:61:2f:4e:
                    a1:16:a5:84:e0:be:f3:7d:9b:12:da:82:a7:7a:c0:
                    d2:aa:a7:7b:a8:f5:47:35:e1:df:0a:d4:2d:44:03:
                    47:83:c2:cd:6e:13:7d:7d:ee:57:bf:d6:26:69:43:
                    07:4d:57:2b:cd:5b:bc:70:e4:56:64:39:a0:75:d8:
                    54:5b:f8:d3:cb:b9:89:2a:56:ca:ef:ea:bc:27:d2:
                    8d:d3:6b:e3:63:8c:0d:4d:79:06:ea:b5:43:4b:90:
                    b3:37:06:a3:15:43:10:0f:d2:7c:02:38:4d:16:ac:
                    0c:1e:44:71:f0:4a:b3:33:1b:bb:0c:dd:c6:79:3e:
                    77:3a:57:5e:ab:c2:4e:d1:d1:91:93:ac:8a:25:36:
                    28:dd:93:de:f1:4d:5b:eb:4c:1a:b8:a4:36:6c:bd:
                    24:3f:ab:b1:4a:14:ad:66:7a:47:6f:66:48:03:b2:
                    19:a1:62:5c:5a:f6:42:72:ca:fd:13:3c:9d:65:97:
                    98:fc:07:92:52:a2:39:83:cc:31:63:03:0f:95:96:
                    66:39:d4:2a:2d:6b:08:ca:70:68:7d:96:55:e5:42:
                    bd:78:82:f8:0b:37:83:d4:21:98:1d:a9:cd:63:66:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6B:10:EB:A1:91:F0:13:38:32:98:D1:A5:AD:DC:1E:76:91:0A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/09cdd5a4-8b8d-313b-abef-dddd6cfd97ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:1e:60:a0:54:a3:34:8b:b8:29:e1:52:49:f0:d0:f5:e1:65:
         75:53:cb:d5:d9:3f:cc:78:e9:ce:b5:6a:08:86:4b:7d:96:f1:
         25:c3:eb:47:08:ca:07:e3:b6:8c:31:19:dd:2b:93:15:54:b8:
         cf:7e:41:8f:1f:c3:1f:0c:9c:a6:40:da:d0:09:f3:15:9f:87:
         87:26:59:a0:09:0b:37:89:a6:d7:f2:95:05:a0:e4:7e:7f:80:
         0a:c6:db:52:18:8c:5d:d7:c3:db:16:23:87:f4:ae:ab:47:56:
         a1:43:ff:6f:fa:79:2f:0c:61:1e:65:a2:71:23:b4:ec:80:dd:
         b3:3c:5f:4c:cf:ff:a4:95:78:31:80:d9:4a:a5:41:68:57:39:
         ff:69:be:80:30:a3:29:5b:f0:36:94:6c:7f:26:9b:6a:4e:bd:
         4c:18:14:3a:24:4b:59:15:e6:4e:12:18:91:6d:59:0b:1c:41:
         ef:88:16:9b:9e:e9:15:83:b0:15:b3:c4:cb:a1:fb:40:35:3c:
         1d:d3:ae:6f:fd:0e:50:21:bd:8e:ae:04:20:05:19:54:dd:dc:
         f4:d4:c5:4f:41:f2:49:80:6b:e9:2b:1b:a3:0e:7e:d9:6d:1f:
         90:1e:5f:76:cd:8a:fc:33:e3:e1:63:a6:51:ad:12:ae:e1:1c:
         66:65:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:25 2025 by rpki-client