Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
File:                     5f596c8b-f66f-38b2-bbfa-5462502cea09.roa (raw, json)
Hash identifier:          aDYtd3erlmBYBi6QfXzfbkr60u9cekJbsYBof2K6bEw=
Subject key identifier:   2D:2B:41:A3:03:09:5A:9A:94:FF:53:60:D5:A4:A7:C1:0B:EB:FA:3F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A74B5DF7FE08691BE3848F020
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     13445
IP address blocks:        144.196.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:df:7f:e0:86:91:be:38:48:f0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=4e139a27-da04-4ef0-9bf7-bfc948d7a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:c8:7e:bf:43:c4:15:62:9b:83:e9:7d:b3:
                    78:d3:e0:41:05:21:ab:2a:6d:42:4d:9e:fb:28:d9:
                    06:e1:e0:1c:1b:2e:b0:17:4b:35:c8:4e:55:31:e6:
                    ca:c6:d9:09:f8:ba:09:e6:a8:07:7a:df:0d:19:2a:
                    65:19:19:65:63:21:94:7c:36:f5:6b:c0:9a:5f:a0:
                    b4:65:6a:1a:a3:3e:b7:22:22:87:69:77:a5:32:90:
                    c0:45:3d:5a:8d:38:b6:3c:4f:ad:ca:43:28:b2:20:
                    af:5b:1e:df:ca:77:3a:c0:59:0e:d2:da:09:8c:af:
                    9c:d3:28:05:c3:5f:03:9e:d6:8a:78:5a:04:00:67:
                    7e:5f:55:a8:9a:5f:33:27:d2:02:e7:72:ff:15:36:
                    57:68:f7:1f:6e:2f:58:92:a5:ee:40:3e:68:d3:df:
                    72:d6:0a:3e:01:66:b4:12:f6:09:35:4e:76:45:e4:
                    ad:6b:a8:11:c4:04:e1:66:e8:38:20:76:a4:6a:d2:
                    84:7a:84:ff:1b:98:20:90:52:32:d7:fb:37:d2:63:
                    36:a2:bd:59:45:d5:a4:6c:a2:e6:8a:60:a5:dd:7e:
                    33:ed:37:c7:ad:5c:e1:f4:29:1c:c8:c2:60:57:a0:
                    47:97:03:ca:ab:c8:8a:98:14:0d:28:a5:2d:1d:6b:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:41:A3:03:09:5A:9A:94:FF:53:60:D5:A4:A7:C1:0B:EB:FA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4b:99:21:b2:45:a3:f0:6a:75:c2:66:f8:c1:12:e7:2b:fa:
         dd:6f:65:73:61:7a:3e:36:a0:c5:c2:8a:e2:b4:c5:15:83:f9:
         27:41:89:b4:9c:d8:56:44:46:02:23:fd:09:da:c4:f1:a5:cf:
         e3:f7:50:80:48:4a:b4:ad:90:08:f6:4b:fc:90:59:ad:5c:27:
         16:cd:c1:20:f9:13:8b:00:8a:45:7d:e7:19:5f:e1:a1:a1:9d:
         06:c5:d4:90:89:10:1f:c9:03:a6:28:63:24:d1:51:ba:75:a8:
         97:af:b5:98:e6:b9:a4:ac:22:fd:1f:a6:21:04:70:50:f7:db:
         41:b5:22:89:31:5d:81:70:d3:b9:e2:28:53:b7:c1:32:45:c7:
         5d:a2:39:08:ff:07:13:47:14:f1:e2:0d:fe:1e:3c:a5:0b:87:
         6a:5b:62:02:02:ac:e7:68:fa:4d:18:b7:58:64:10:ba:63:24:
         fb:d2:d3:e9:3f:f6:5c:9d:3a:57:07:a9:ce:ec:9d:13:a0:b3:
         4c:66:ed:5d:0f:43:8c:a2:ce:ec:17:29:93:32:02:9c:b2:39:
         c5:b8:90:a8:01:32:43:24:8b:d6:2f:42:bc:c0:b9:ca:e4:30:
         b3:98:39:0f:61:bf:96:fb:ff:67:ad:15:5b:b7:87:68:44:32:
         fa:57:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:18:06 2025 by rpki-client