Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa
File:                     07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa (raw, json)
Hash identifier:          huVcYv3zs5O1bF147PrvfDbizmY05C/3rCNUmUoapcU=
Subject key identifier:   E2:29:5C:B8:64:41:5A:DD:AE:AD:48:41:AA:ED:9E:37:34:A0:E2:95
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858499DBF2ED976EC731525DA3800
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     13445
IP address blocks:        144.196.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2e:d9:76:ec:73:15:25:da:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=25a70a90-236d-4917-9fd0-c6c690a11d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:44:36:c2:58:b8:ab:24:a2:b2:b0:3d:29:
                    b9:dd:6f:f4:5c:03:90:74:c7:75:ee:8d:14:b0:ed:
                    b8:90:55:76:7a:16:ac:74:6e:d6:4b:5c:6d:1e:fc:
                    cd:79:52:6d:5a:69:f7:6d:be:f9:fb:39:79:07:25:
                    56:3b:e0:24:1f:a8:f6:36:c4:cd:80:74:b7:10:ae:
                    f4:89:b1:d8:8f:d2:ee:9a:a3:60:13:da:d5:f3:dd:
                    4b:79:eb:73:d1:24:06:18:7d:2c:64:25:9e:4c:1f:
                    6a:8c:5c:4b:72:f2:60:50:4a:00:ff:72:e8:5c:71:
                    df:d6:67:01:01:d9:57:71:ca:9a:00:16:f5:96:fb:
                    34:df:0b:22:71:9c:d6:38:eb:bc:9e:b5:da:fc:4c:
                    b6:d4:c9:ce:81:c6:a9:33:14:01:5e:51:f3:f8:37:
                    b8:e4:07:d5:f4:70:af:cf:db:2a:3a:83:9f:cd:26:
                    45:97:69:67:36:f6:e9:6f:e6:e4:81:a4:dc:00:db:
                    c9:c1:54:4f:29:95:f4:73:74:f0:d8:d1:c4:89:61:
                    59:19:54:dc:e4:d8:9d:3d:1f:a6:66:c5:1d:50:df:
                    8e:17:76:e4:da:eb:1a:8c:25:ad:18:33:91:77:dd:
                    61:81:8d:31:b2:1d:88:20:8f:b5:1c:1a:a2:a6:0f:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:29:5C:B8:64:41:5A:DD:AE:AD:48:41:AA:ED:9E:37:34:A0:E2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:38:8d:0b:f6:ff:0c:5b:64:f8:bb:d8:dd:9f:84:4f:7b:
         64:7c:0b:dc:3e:20:27:68:ce:ee:5d:6e:2e:55:f2:09:06:c1:
         93:51:96:7e:4b:15:ec:e7:0d:95:70:36:5b:4a:31:0b:1a:06:
         14:89:52:47:71:4b:4d:40:50:e4:81:84:0f:26:d2:c1:63:d7:
         82:5e:6e:56:d2:18:16:44:9c:a2:10:09:82:fc:4b:be:97:2d:
         ca:82:cd:ef:1d:f4:54:7c:b6:87:13:6a:ef:18:fd:fc:b1:ac:
         c2:2f:74:75:0f:27:27:12:10:34:27:fd:86:c6:89:e2:8c:f3:
         e8:e8:ce:32:fe:db:c3:43:ee:5e:83:bf:35:53:cb:d1:e3:42:
         cb:7e:90:04:f2:2c:3e:c2:8a:ef:f5:4c:d3:c5:55:ea:9e:d8:
         6f:b4:59:de:58:db:1b:c9:06:a8:b8:bc:a4:3a:59:4b:cd:c0:
         71:83:fa:01:85:99:cc:14:82:97:e3:c4:d5:71:61:c0:89:ba:
         93:36:28:41:c5:a3:77:61:4a:13:04:86:1b:0d:28:b7:c0:fc:
         07:aa:43:a6:1c:13:30:33:8e:b1:12:6f:28:a6:a4:96:d9:b7:
         1e:78:67:ae:f4:51:65:30:3f:1c:46:8b:76:50:34:c3:8d:d6:
         1d:73:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:49:43 2025 by rpki-client