Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa
File:                     5cf198cc-9135-342f-8d0b-2253ba576eac.roa (raw, json)
Hash identifier:          9chOOz2HbCWVq/vRHXK0gQYgGKctTJxVuk7w5JnBers=
Subject key identifier:   89:15:60:DA:1B:CF:71:FB:80:C2:52:42:B0:F2:92:9B:70:B1:28:8A
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849F9DFDED215FAD9C264D2D200
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     36692
IP address blocks:        163.129.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:d2:15:fa:d9:c2:64:d2:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=902f223e-2002-4e7a-ae5d-dd9f25ecb576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:24:3d:aa:4d:fa:51:e4:41:9b:b4:9c:d0:
                    d6:d3:4e:f0:24:4e:82:56:2d:c8:91:bf:40:fa:7a:
                    04:1d:1e:d3:86:fa:9f:08:da:cd:db:4a:ef:3f:5a:
                    60:c9:ad:31:38:2f:d7:df:13:2b:91:03:3a:52:1e:
                    ce:02:63:26:80:b0:cc:97:eb:24:49:a6:78:e2:ed:
                    98:fe:aa:83:70:b6:bf:db:30:94:0b:b0:b5:4d:85:
                    c4:b5:65:63:0e:6b:e2:99:37:60:10:cf:10:86:b0:
                    7c:2c:7b:5c:a9:70:26:22:1c:fe:80:99:75:88:ce:
                    ae:b1:21:22:ff:40:83:52:aa:a3:7c:01:68:7f:3f:
                    98:2f:ce:28:22:b2:05:46:96:3f:e2:63:77:da:dc:
                    6c:92:b5:06:05:b4:ea:71:95:41:94:7d:1c:eb:9a:
                    0d:0e:1c:f9:89:53:06:ec:6d:7f:5c:c0:5e:30:a3:
                    5c:cf:c1:4a:78:63:8c:f1:d9:c6:5a:90:75:9a:ab:
                    11:cd:fc:3e:78:83:55:ec:d1:be:f4:bf:e2:34:0b:
                    54:99:95:c1:25:29:04:98:2e:44:93:d8:6a:e6:f8:
                    8d:54:ac:8e:03:14:fc:7e:ef:a5:56:71:df:2b:96:
                    0c:a3:7f:c7:5d:e2:55:70:d5:41:f8:ed:72:d3:29:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:60:DA:1B:CF:71:FB:80:C2:52:42:B0:F2:92:9B:70:B1:28:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5cf198cc-9135-342f-8d0b-2253ba576eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:84:c1:64:6d:b9:3d:66:7c:dc:b1:96:2e:05:9f:94:d9:
         35:68:8d:55:b5:9d:cd:04:ed:e4:84:7d:63:08:b0:bd:73:c0:
         61:3e:83:b1:92:2d:a0:c7:bf:40:56:59:d9:04:cf:28:d7:2b:
         c8:84:27:22:2a:e2:38:1d:50:db:6f:86:27:10:54:00:86:84:
         b4:af:60:14:4f:5e:90:14:da:a0:cb:76:2f:6a:ca:8c:3c:4a:
         a6:15:10:4f:c3:7d:b8:2d:a0:2b:61:4e:fa:88:f6:c1:48:ee:
         4a:95:f1:30:fd:45:ff:9f:58:78:a1:2e:74:9e:3f:04:78:1c:
         ea:1c:f8:60:a9:be:d9:f7:73:69:e1:c5:fd:cd:e6:36:6a:9b:
         bf:4f:53:28:13:57:dd:0e:4f:29:ed:d6:df:c4:bf:fa:61:45:
         72:29:eb:ce:d9:e2:98:7e:54:08:d4:35:9e:4e:89:55:c5:5a:
         48:a9:06:6e:87:c3:c0:25:45:2d:6c:47:e5:d8:ec:35:69:82:
         4d:5e:f7:ae:8b:c0:5b:68:d4:12:1d:dc:27:fc:66:e9:d2:98:
         a6:4d:e0:f8:64:af:59:74:63:65:57:c9:80:98:0a:f6:d6:fb:
         ad:e4:74:77:0c:01:04:25:ca:c7:9d:79:8a:ad:26:29:b0:69:
         b6:bc:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:24 2025 by rpki-client