Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa
File:                     f7b06728-a568-34f0-8804-8ed95e306cfb.roa (raw, json)
Hash identifier:          ywQd7hYAHwvpccDQHxUiX48uJrJZBfoJ4d1KuobaO9c=
Subject key identifier:   86:08:E8:FB:B9:5E:08:F4:F1:E1:93:8D:B3:17:59:9D:BE:31:E1:40
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584943FBFCF23E8E5F79F7F1BEC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa
Signing time:             Fri 21 Mar 2025 21:20:43 +0000
ROA not before:           Fri 21 Mar 2025 21:20:43 +0000
ROA not after:            Thu 19 Jun 2025 21:20:43 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:fb:fc:f2:3e:8e:5f:79:f7:f1:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 21 21:20:43 2025 GMT
            Not After : Jun 19 21:20:43 2025 GMT
        Subject: CN=b1b367c5-2cc1-4e46-ba6f-c721d848e9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:8d:51:fb:03:b3:dd:96:d0:42:2e:fc:b1:
                    a1:47:2d:12:d7:a3:2b:a0:80:4f:01:20:85:9d:66:
                    d3:33:2b:c1:3d:47:c7:61:40:1b:b1:d0:d6:dd:37:
                    59:bb:6a:c7:3a:6d:26:6c:02:71:a1:16:d1:a2:ec:
                    9c:9b:2c:9b:6c:8a:b7:7d:5f:78:9a:82:16:1f:1a:
                    90:23:1f:c3:29:d4:0e:c0:1b:0e:4c:eb:97:05:fa:
                    8f:1f:69:7b:0f:66:d9:cf:48:11:5f:de:d1:ac:6b:
                    f6:77:8d:6b:be:d2:ca:f5:a1:2b:cb:ae:eb:ca:cc:
                    2c:60:18:0f:8c:c0:c1:ca:fd:bc:60:dc:d2:cf:9e:
                    84:b5:4b:59:a0:ea:8d:2d:65:f6:4e:53:d4:c5:1c:
                    e3:c7:f2:ce:c4:b5:9e:59:b8:7a:a0:a5:68:b0:59:
                    27:1e:8b:76:5c:c7:b7:4e:be:5a:f2:cd:dc:9a:e7:
                    96:d7:a9:b7:29:8b:fc:a3:f9:2f:e7:fa:08:fd:a3:
                    ea:2e:dd:4e:54:a9:e7:9f:80:db:de:c7:86:52:1e:
                    3f:a7:27:24:10:35:27:1d:3b:c1:05:d8:a6:07:d7:
                    7f:22:11:af:92:5e:18:90:e8:8e:10:61:73:3c:ad:
                    21:3c:69:ef:0a:1c:30:fe:19:6e:5a:33:4a:ec:9c:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:E8:FB:B9:5E:08:F4:F1:E1:93:8D:B3:17:59:9D:BE:31:E1:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f7b06728-a568-34f0-8804-8ed95e306cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:73:94:bc:81:a8:cf:85:b7:30:ec:1e:31:93:39:7d:d4:85:
         a8:2d:b6:f0:10:ca:7b:03:61:70:f3:5f:13:7f:a6:76:b6:29:
         53:0c:d4:62:7e:a8:29:65:79:ec:fe:6d:e7:2e:17:73:dd:8f:
         b3:2c:9d:3b:cc:9b:c4:cd:31:c2:aa:6d:88:26:77:fa:3e:cc:
         a8:f1:6f:d6:5d:db:61:cd:0b:a4:67:42:b0:3a:08:76:a9:bc:
         df:fb:0f:a7:84:a7:4b:f7:0a:45:ac:ef:f9:32:bf:73:1f:32:
         8f:d6:c0:e9:2d:06:dc:a0:d3:4f:32:2e:0a:b4:bd:b3:26:fd:
         f5:8a:fc:88:a6:c0:df:26:4f:81:c6:78:f9:a7:19:a9:38:0c:
         cf:9e:b9:79:e4:9d:4c:2f:2a:de:45:78:49:af:2b:a9:74:cd:
         5c:9a:24:57:af:fb:ea:d5:39:9c:1e:b5:3d:00:73:a3:ca:86:
         e1:2a:34:f9:7c:9c:0b:67:05:2a:87:d8:3d:31:1b:53:0f:9c:
         b6:b1:d1:1a:05:8f:20:94:b1:cd:1b:e6:ee:9e:64:1d:f2:6c:
         e8:74:c7:fb:8a:34:5d:e7:1f:1c:96:ea:8a:18:f8:4f:81:34:
         e0:0b:bf:0b:b1:10:aa:a7:2c:7f:d1:02:f0:12:bc:7c:d8:c3:
         d3:70:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:09 2025 by rpki-client