Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa
File:                     574e841f-42ab-3391-8e83-8d72c3a905d3.roa (raw, json)
Hash identifier:          7ZQSWaQZAuQkYV0ct7jVpMEFY7xi5AHne99aCMivO5s=
Subject key identifier:   E5:1B:DE:E5:A9:CA:49:1A:3B:FC:12:4C:DF:AC:F6:29:19:8D:B7:5D
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849F9DFDEB32E4A3448CC694300
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        163.129.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:b3:2e:4a:34:48:cc:69:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=f591916a-58a4-40eb-a85e-d52c41035eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:d3:3b:26:1a:03:25:4c:3a:9c:3b:3e:f7:
                    e9:24:07:39:1c:22:79:41:e0:e2:64:71:16:1c:7f:
                    a1:c5:be:19:bd:84:c0:c6:38:01:8a:e0:7c:f7:7e:
                    be:ac:ec:68:a6:4b:9e:ed:ec:3e:3c:5d:0c:a0:07:
                    87:89:e4:90:7c:5a:14:e1:69:98:fb:e9:f3:7c:ea:
                    d1:f9:9d:bc:96:44:bf:63:11:d6:8c:a6:15:fe:5b:
                    2c:29:61:a2:6c:9a:1a:1f:90:1d:b5:f8:a1:59:33:
                    e8:51:33:2a:b8:e5:40:f9:1e:fd:ff:ec:a2:49:e1:
                    9f:18:f1:5e:bf:15:88:11:61:e7:31:89:82:96:95:
                    7b:02:4d:95:35:eb:c6:2d:65:38:7e:b8:3a:9c:47:
                    5f:1c:a3:bf:c8:22:07:1c:b9:9c:88:be:94:7c:c3:
                    04:1b:7d:e0:eb:d0:88:da:4b:e7:d4:ca:97:b3:e3:
                    40:3b:f2:9e:69:ef:12:f9:f5:61:cf:21:81:99:f4:
                    b9:4e:47:60:8a:52:97:ba:26:32:38:50:67:0f:80:
                    d6:49:b4:bf:11:e0:84:1e:ea:a4:72:49:45:e9:f9:
                    60:ec:a2:ce:1a:13:03:22:fd:5d:0d:4a:ee:4a:dc:
                    ff:69:8c:7a:69:35:07:cb:f2:5b:c6:f2:fd:47:26:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1B:DE:E5:A9:CA:49:1A:3B:FC:12:4C:DF:AC:F6:29:19:8D:B7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/574e841f-42ab-3391-8e83-8d72c3a905d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:25:f6:d8:76:49:dc:81:85:45:57:cc:10:c1:58:2d:89:8d:
         fd:76:08:d3:bf:f2:ce:84:c9:37:36:03:36:96:b2:8d:b9:08:
         5e:e6:73:7c:f0:46:55:57:c0:e1:63:41:58:d4:c9:79:40:f6:
         b2:87:dc:95:6e:50:b4:50:c4:16:8c:d1:98:d0:41:02:3c:cb:
         70:8c:50:c4:54:f0:62:50:ff:7b:07:36:c7:fa:0f:98:6e:e0:
         81:bb:66:d9:ae:f2:c2:e8:df:97:64:16:32:c4:7f:6d:e5:6c:
         e8:e5:4c:85:9e:26:63:58:fd:cf:bd:a5:1c:c9:1e:dc:f7:e8:
         ba:a8:fe:57:98:49:26:28:5b:28:78:1a:7d:89:88:e8:ee:dd:
         da:ec:11:2f:46:e6:c9:10:3b:76:7f:0b:c1:80:96:c5:c6:7a:
         84:89:48:97:74:67:c6:18:a0:3f:b0:aa:6d:1e:e5:1e:d0:c4:
         1f:4e:0c:10:26:6e:b3:b6:19:71:ff:75:f7:88:2e:06:50:43:
         f5:50:5a:1e:a4:39:e2:f9:37:8b:81:43:6d:98:cd:99:0e:7e:
         35:fc:3b:77:3a:a4:e0:79:8e:5e:cf:17:77:60:e6:af:bd:a8:
         3c:ff:cb:82:50:09:66:5e:5b:6f:94:40:46:cd:02:18:f7:80:
         95:f1:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:42:31 2025 by rpki-client