Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa
File:                     04189fbf-0a97-3490-934a-17e91dfa7ad4.roa (raw, json)
Hash identifier:          20qyCJkkzzcrV7ISG3SJyWr+CJZ3F89d+clkAnZbCq8=
Subject key identifier:   B0:02:94:3F:10:EF:10:66:64:0E:6B:FE:B7:D1:23:6A:56:A3:75:B6
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A7A4B4C3701BBA46A03EBFF20
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     13445
IP address blocks:        69.26.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4c:37:01:bb:a4:6a:03:eb:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=6d0b1a96-0409-4799-81e4-d3ca773ba2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:7e:a7:3f:7f:b7:bf:b1:84:79:63:a9:31:
                    eb:30:0a:70:8b:54:36:b1:b2:23:e2:49:85:e7:df:
                    f7:36:9e:76:e0:9b:12:bc:ba:b9:a3:ed:36:1f:de:
                    cb:04:bc:1f:a8:8a:b9:e4:51:da:bf:1d:7f:1c:80:
                    2a:ad:ad:42:cc:56:8d:71:18:8d:5e:4d:60:27:41:
                    63:f2:e5:b9:42:8b:92:f9:58:4c:4d:ac:ea:af:22:
                    ea:5c:6a:41:7d:a4:41:35:e3:fb:06:88:75:e0:39:
                    f6:02:f8:1c:84:25:fa:e8:c5:97:06:53:54:ab:8c:
                    7d:41:a0:e0:41:9f:2c:71:ef:70:7f:b4:17:f6:64:
                    9b:22:63:e8:91:15:23:15:0d:b7:54:03:67:bb:94:
                    de:b1:31:56:58:2b:7b:5f:c1:7d:71:d5:fb:80:e6:
                    fd:51:4d:17:30:ff:1e:ca:a9:64:44:ab:fb:38:ee:
                    40:98:45:89:27:93:71:89:b9:bc:0a:cb:ae:97:3f:
                    d6:65:6e:62:79:92:77:08:fe:27:e0:98:1d:85:94:
                    18:bd:30:72:9a:3f:28:43:e9:73:20:19:25:61:c1:
                    10:03:73:c3:61:32:77:7a:ad:5b:80:a2:ca:77:56:
                    71:8a:4b:22:2c:09:a3:c8:a3:5c:ed:72:c5:0c:f4:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:02:94:3F:10:EF:10:66:64:0E:6B:FE:B7:D1:23:6A:56:A3:75:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:93:10:32:bc:e4:bd:bd:49:57:56:6e:2d:b4:24:7c:22:
         48:9f:22:55:04:2f:b6:e7:2a:50:31:8a:af:cf:5f:b2:82:b3:
         b8:d0:0c:82:0f:d9:47:ac:e1:92:b1:71:b6:52:34:7f:1d:71:
         77:1b:96:da:81:95:10:96:86:c9:5f:87:36:04:f2:a3:62:0a:
         f6:58:c5:46:28:eb:89:9a:3b:c3:b9:99:3d:b1:47:a6:a2:53:
         74:09:92:e7:9f:c4:8c:32:9f:a6:97:ae:d7:db:85:09:89:cf:
         f3:be:b7:c9:07:3b:6e:ab:55:3d:bd:9c:49:4e:8d:3e:0d:cd:
         81:8f:74:b4:00:ab:51:16:62:84:d1:86:c4:e5:21:91:4b:96:
         68:30:4c:1c:d6:4f:c9:06:43:aa:25:30:df:97:3a:75:1e:77:
         3b:5c:f3:80:84:c8:3e:b4:1c:69:e5:0f:f1:06:f6:74:1b:5e:
         7b:6e:65:4e:3d:93:5b:0e:50:02:84:f4:cb:ee:3c:ba:4f:3c:
         ab:b9:1c:34:b1:07:8d:74:de:8f:5b:29:63:3e:c2:38:f6:4d:
         23:7c:cd:78:51:39:fb:f9:04:51:a8:96:1b:a9:53:96:c9:9a:
         8c:8f:c0:2b:cb:a5:01:1f:e8:a2:a7:a5:fb:f1:71:25:c4:ce:
         fc:f6:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:24 2025 by rpki-client