Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
File:                     89500a8e-1d73-3c1c-a9d4-bf905101344e.roa (raw, json)
Hash identifier:          7+aN/NbbVegjFHbX2QR3lNvgrE7C3xMfxSD3zkCC/NA=
Subject key identifier:   06:6C:E4:F2:C6:27:A2:2A:74:EB:FF:E3:38:24:37:3E:C1:AD:F3:F3
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584903A5A884194ECB70E72B6380
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
Signing time:             Wed 26 Feb 2025 20:15:02 +0000
ROA not before:           Wed 26 Feb 2025 20:15:02 +0000
ROA not after:            Tue 27 May 2025 19:15:02 +0000
asID:                     9450
IP address blocks:        2607:fcf0:4400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:03:a5:a8:84:19:4e:cb:70:e7:2b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb 26 20:15:02 2025 GMT
            Not After : May 27 19:15:02 2025 GMT
        Subject: CN=af35e1fb-b0d8-4bd2-ba1c-59fb021383f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:42:2c:8c:09:4f:ea:a0:ac:19:a1:17:e6:
                    fe:be:66:d7:29:76:1a:14:c0:91:68:db:81:a9:6f:
                    04:50:fe:93:20:ca:7c:0c:97:7f:50:b3:b9:af:fe:
                    1a:b9:d4:fa:de:6b:6f:af:43:59:6a:a4:3b:e4:1d:
                    f7:5c:7d:c1:82:02:db:d6:8d:18:4f:a3:3b:66:33:
                    8a:e2:20:2b:6c:9a:e1:0e:c5:6b:89:0e:d2:ba:75:
                    95:73:2b:01:07:8d:61:6a:5c:80:9f:b5:01:7c:73:
                    d0:dd:9f:d7:66:9c:7c:9a:09:84:ec:f0:02:e0:23:
                    d4:72:96:4f:7d:53:6c:34:a7:77:0d:6a:b2:7c:60:
                    a1:48:03:91:20:6c:5e:2e:99:52:78:81:73:99:0e:
                    8a:40:08:e3:9c:91:30:69:af:a9:a1:f6:0e:b1:60:
                    d2:47:0e:8f:11:b9:78:21:d8:79:a0:f5:36:33:d0:
                    82:4f:3f:82:e7:96:df:d6:ee:52:0a:de:40:16:93:
                    c9:09:f3:dd:34:49:c7:ae:94:c6:9a:d2:90:67:ce:
                    43:8e:ba:27:fb:88:13:b6:e3:48:e6:ff:4d:8b:d3:
                    f1:5b:0b:dc:8b:d2:cb:59:b4:4b:c5:7d:45:08:1f:
                    a3:b6:03:6e:44:86:13:dd:d9:03:0b:7e:2f:1f:50:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:E4:F2:C6:27:A2:2A:74:EB:FF:E3:38:24:37:3E:C1:AD:F3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:a5:10:6b:b1:e8:e0:45:b9:ed:71:3a:56:2a:f1:c1:0d:eb:
         22:bd:d8:66:3d:59:a6:53:74:6c:c2:0a:ff:4f:40:91:24:3f:
         ec:40:cd:d1:72:62:32:40:07:38:a9:e3:88:53:e4:57:6b:d5:
         2c:b0:e8:1c:ef:c4:07:31:0b:45:d6:b5:68:56:55:c0:14:65:
         73:ec:a3:76:e4:2f:54:a7:85:a1:48:c3:e2:07:d0:24:ab:b9:
         0e:2a:1b:80:8e:8f:78:f7:3b:b4:25:9d:b9:67:93:e9:ce:90:
         f1:5e:36:01:84:52:b1:ee:97:67:de:3b:09:be:e9:da:e3:42:
         a5:e4:67:cf:f3:59:35:4d:04:44:ec:c5:64:be:30:8a:cf:14:
         71:7a:bf:92:ac:bc:29:b2:c8:8e:7e:07:ae:f4:5f:1b:52:2e:
         d6:a6:e9:d5:ef:57:bf:59:03:aa:42:46:82:31:35:4a:81:c9:
         85:6c:f7:70:50:0c:4c:49:32:15:38:a0:60:dc:c0:d2:9b:f6:
         64:d5:e0:0c:a4:8d:c1:f4:71:28:b7:48:ec:24:70:7e:72:32:
         f9:a8:b5:f5:7a:ec:f2:7f:7b:0b:f2:e9:64:95:d8:0c:91:c9:
         cc:0c:be:66:f7:42:06:56:69:dd:d9:33:72:3a:bd:45:54:b2:
         e0:47:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:56 2025 by rpki-client