Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa
File:                     0d208647-11db-3f31-93dc-96e75ed04817.roa (raw, json)
Hash identifier:          tb9JBLc8SyCguJgNVuv4eSnwG41MT2HlfcUWStqdzJQ=
Subject key identifier:   F8:FD:F4:20:8F:50:01:7E:3D:19:C6:F9:1B:C5:97:EA:A6:17:13:6B
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285848B6261F0A9EFC53DD146A4580
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     13445
IP address blocks:        144.196.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1f:0a:9e:fc:53:dd:14:6a:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=0f3a53ce-e411-4bb3-b8df-0c634f0aa19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:ec:00:d2:41:7d:48:1f:dd:17:a1:a7:e7:
                    a6:22:a9:0f:43:15:61:9d:a2:b1:f1:bd:c1:52:1f:
                    1f:ff:55:16:4c:2b:22:e1:02:92:bb:84:fe:c1:42:
                    67:69:32:e3:d6:7b:18:f7:25:64:fa:3b:02:cf:33:
                    f8:10:c1:10:f2:de:5e:9f:77:48:32:d1:c4:00:a2:
                    f4:b6:65:85:40:13:6f:21:49:69:dd:f4:78:c5:5f:
                    7a:02:8b:02:f7:2c:08:4b:dd:f4:56:1c:f1:0c:ad:
                    fd:61:bf:30:fe:3a:ae:5b:56:4e:b1:cf:29:97:80:
                    53:94:fe:c8:bf:84:79:ee:66:d7:80:43:c2:b1:ae:
                    da:a4:0a:48:9e:c8:6f:d5:98:e5:79:f3:2a:01:76:
                    85:00:6a:9f:03:9c:72:dc:02:6a:0d:cd:ad:9c:a4:
                    07:ef:f8:b8:c9:86:27:f4:0f:7e:a7:11:07:53:bc:
                    18:58:9d:d6:bf:fe:7d:90:ab:ce:d6:a1:16:5b:6d:
                    71:fd:b6:f6:f7:50:49:42:68:d4:5c:a0:4a:19:a4:
                    9a:81:7d:b9:d8:87:25:16:55:fd:58:90:c7:aa:44:
                    70:93:e2:4c:46:33:88:87:71:80:b4:b0:f6:64:80:
                    22:05:55:e4:d9:6b:63:cf:43:ea:83:a2:6a:8c:9f:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:F4:20:8F:50:01:7E:3D:19:C6:F9:1B:C5:97:EA:A6:17:13:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d208647-11db-3f31-93dc-96e75ed04817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:57:d1:4c:39:5f:1a:bc:50:13:15:1e:ab:a6:28:b3:8e:6e:
         f6:8a:70:56:cb:1f:ab:26:53:9e:48:cf:d8:dd:55:10:a9:d2:
         19:32:e9:23:5f:10:be:f3:ff:fa:b6:55:a2:7d:8c:45:b8:d3:
         14:8f:99:6e:00:2c:f1:1b:1e:79:64:d7:f4:ac:d6:14:b8:ce:
         58:42:1c:8c:d5:f4:84:45:bb:6e:0e:72:01:0d:99:1b:a2:8b:
         f5:43:39:05:65:06:f7:cd:93:3a:f6:bf:e1:ac:c4:82:49:33:
         e4:b2:bc:a7:7e:50:aa:62:9c:d4:19:38:e3:a0:e2:b2:4a:04:
         c8:0d:32:14:c8:49:dd:a1:b3:d6:2d:f8:73:44:ab:85:52:5c:
         58:5d:0a:d7:ae:88:8d:28:7c:78:80:e6:88:0a:95:03:1b:bc:
         d1:6e:58:c7:a1:b7:e6:d6:70:8a:d2:dc:cb:e1:a3:55:e9:4a:
         8a:74:c5:22:0d:8a:34:e5:4f:38:35:bf:d2:f1:1a:9c:4c:57:
         b5:60:f7:4b:30:9f:e3:0e:92:af:93:2d:e0:eb:4f:ed:0f:96:
         b6:11:17:57:0a:0d:33:07:75:66:16:a7:6c:94:0b:d3:e9:71:
         74:11:16:92:31:b7:17:d5:a7:f3:33:a0:90:a8:ac:19:71:20:
         6f:27:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:55 2025 by rpki-client