Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
File:                     69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa (raw, json)
Hash identifier:          cH+E/izbVJ7A5N+k+5aXCtHKe+rW6T/EvPzzoTLVAkE=
Subject key identifier:   FD:0A:D6:D5:74:30:01:F6:41:7D:14:2D:3B:9A:A2:BE:C2:62:7D:17
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584ABD4BA3564382CCDB4AC7B800
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     13445
IP address blocks:        66.163.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a3:56:43:82:cc:db:4a:c7:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=e7bc4b0a-73c6-4c13-a534-e1efce906a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:3f:cc:cc:6a:dd:d7:b7:45:ff:3e:e4:7e:
                    d8:13:8a:d0:35:0e:5a:d0:e7:51:71:14:99:ee:2a:
                    17:78:d8:76:e5:62:a5:37:d0:83:96:c6:17:40:7b:
                    64:b6:72:02:ff:15:98:a4:f1:06:d2:fe:43:8c:e8:
                    0c:53:f1:72:e6:16:24:80:c3:aa:ee:69:f8:9f:5e:
                    c2:dd:7f:24:4f:1f:dd:47:63:5e:5d:af:f1:b3:d9:
                    98:c6:61:47:a8:5d:0c:ed:65:45:6b:77:80:42:79:
                    47:b0:51:f6:8e:dd:d5:9d:b3:0b:56:b9:f1:1c:fd:
                    3a:32:ba:d3:47:75:28:f6:08:f9:b6:a0:34:fc:f3:
                    57:5e:6f:44:16:c9:d7:db:40:4e:74:e5:e0:1f:74:
                    57:97:e1:bc:c4:4f:46:7f:82:12:7e:19:2e:9f:0c:
                    cf:31:49:a7:5d:65:fa:78:33:e9:23:94:8b:42:e1:
                    b0:57:d4:c9:67:69:cb:64:87:d0:48:34:32:a5:d3:
                    2e:48:cd:1a:49:22:2c:0b:33:3e:e2:91:16:70:a1:
                    cf:54:88:f0:12:87:93:e8:aa:a8:d5:4c:79:08:b9:
                    85:e0:d9:2c:8d:42:4a:cf:aa:a7:2e:1d:3d:f3:14:
                    9c:00:01:8f:89:d4:64:62:4e:11:61:e2:a3:93:42:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:D6:D5:74:30:01:F6:41:7D:14:2D:3B:9A:A2:BE:C2:62:7D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:66:f9:58:ca:f8:5b:28:59:46:56:24:4e:d9:63:3d:94:10:
         1b:50:ee:02:3a:25:8f:3e:c8:e0:6e:ac:6d:39:d0:f3:42:1e:
         e2:05:1f:cd:e4:10:df:4d:a2:6e:c8:2d:6a:51:52:1c:fb:1e:
         d2:fe:e0:d7:41:d3:29:e8:b3:f8:d3:ac:e1:d0:60:b0:0f:fe:
         b7:3c:2f:c1:a2:09:d2:23:2b:6f:a4:29:2d:15:21:9c:a6:d2:
         b8:71:fe:96:86:f3:79:74:6c:86:00:18:92:15:69:0c:74:1d:
         ed:8e:da:a0:cd:d1:e1:f2:23:4d:ea:f8:7c:34:74:ff:a8:7f:
         a8:c6:93:ab:57:0b:19:69:92:3a:40:4f:ce:e0:cc:64:96:73:
         20:d1:52:19:ed:cf:45:ce:c6:c1:94:0d:29:17:05:f9:e8:08:
         d3:d3:f1:23:88:9d:63:04:16:fe:ca:20:41:bb:90:be:59:52:
         e6:47:e7:66:fa:40:37:d0:52:44:e9:40:59:91:c2:95:70:5d:
         dd:2a:6f:83:84:e7:79:9c:35:b2:d8:30:e8:bb:48:60:d9:67:
         8a:16:bf:ea:79:3f:af:88:c9:06:11:da:46:0e:31:49:61:94:
         7c:bb:92:75:f8:ac:90:87:fb:71:df:f0:b2:32:83:c6:cc:e1:
         ae:e6:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:26 2025 by rpki-client