Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa
File:                     6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa (raw, json)
Hash identifier:          OUAT+bCqHjsfdrzjjBX1DBWSWIWMI1xGnfUv2bBPbds=
Subject key identifier:   16:56:48:EA:20:A0:41:8F:07:F3:C6:89:CA:0B:72:03:73:98:1C:75
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849B6DF4C48094993C3468EC580
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     198949
IP address blocks:        144.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4c:48:09:49:93:c3:46:8e:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=218344b3-872e-4cf2-a1c3-fdcc4429472a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:e5:c6:8b:ec:0f:27:fd:7a:d8:ed:ef:9a:
                    68:00:1c:ff:ff:88:cc:2a:29:8a:c9:4f:a8:46:d3:
                    63:61:2a:c9:b6:a7:3c:30:e6:c7:17:27:e3:45:db:
                    b2:64:b1:27:0a:f6:9d:c6:da:36:1a:03:38:7a:65:
                    e3:9b:e8:5e:aa:eb:5b:53:6b:89:ec:dd:de:f0:05:
                    ff:b1:55:41:ed:9c:ca:3c:3d:b9:1a:26:e1:39:cf:
                    e5:22:0c:ae:b2:7b:d2:fc:6a:50:35:15:51:63:1e:
                    67:41:5c:21:0d:b3:de:2b:3e:3c:32:fe:af:78:0c:
                    12:2c:49:82:01:3e:98:b3:3e:2b:0d:a2:8c:4c:23:
                    05:13:0c:82:1e:da:b6:d3:c3:2b:99:e4:ff:da:6f:
                    88:9d:7f:8a:d8:55:7e:ca:42:5d:c8:d2:16:60:b9:
                    af:7d:b8:72:2e:be:d6:d7:c6:2b:de:42:44:76:4b:
                    c0:d0:a9:00:b4:6e:41:04:2e:73:cd:2e:fc:67:9b:
                    9e:b6:b1:a0:a2:57:62:34:87:9a:2f:78:4d:31:66:
                    73:88:8a:e3:82:0e:90:a4:5d:d6:e0:a4:f3:0d:9e:
                    52:eb:d7:69:80:72:50:37:81:7c:b7:07:8a:cc:98:
                    f4:9a:0f:be:74:7b:db:3c:f8:eb:3d:31:8c:c0:f9:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:48:EA:20:A0:41:8F:07:F3:C6:89:CA:0B:72:03:73:98:1C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/6bc26953-d1f0-37e8-88ba-60c7edab6a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:32:1c:63:1c:86:8a:81:95:67:fa:a1:16:c2:86:0a:c6:24:
         be:d2:ba:5c:37:25:93:69:c0:48:73:59:8d:31:f6:d7:04:26:
         0d:0b:14:c2:f2:a3:18:d5:04:b9:22:cc:17:ed:65:84:e3:85:
         b8:b2:a3:0d:e9:a9:8c:b8:d4:bc:76:67:29:2e:b0:ce:dd:41:
         25:34:a9:36:06:d1:59:12:e6:7f:32:93:46:4b:fd:28:b3:b5:
         10:13:88:11:61:7c:64:33:1a:e3:91:29:7b:0a:b1:45:cd:d8:
         35:78:c1:24:db:30:38:9a:de:ff:0d:be:9f:43:89:15:b9:8a:
         77:6b:85:51:ab:48:37:9e:c3:da:6b:a1:44:0a:28:70:4d:22:
         c9:7e:d3:0e:ae:3e:c7:3a:a4:6d:13:4e:b6:6b:11:62:5e:16:
         35:81:1c:c6:f9:90:5c:3e:92:35:2f:d0:c8:36:a8:df:16:e6:
         34:6c:e5:12:9b:f0:4a:8d:c3:ae:01:cc:e4:46:d4:99:1b:86:
         d2:52:20:d9:c4:7e:d0:2c:e7:4e:d9:8d:b0:83:b6:2b:67:3e:
         f3:2d:2a:bf:fa:f0:79:59:d1:f7:31:81:3f:e5:1d:46:15:cd:
         99:d3:7a:83:da:ba:5b:f6:e5:f1:32:b0:66:67:e6:99:67:7c:
         69:22:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:31:19 2025 by rpki-client