Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa
File:                     87b78743-99f6-35f8-bc43-759390adb71e.roa (raw, json)
Hash identifier:          7TJaLaINsePvuY0D62B4fLp+aakmFKD/Xhei8YhsgXI=
Subject key identifier:   6C:60:E2:5B:D3:92:2E:9D:31:F1:63:83:6C:86:E2:98:A2:D7:CE:AC
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858499AF483AACFBC4A47D7BDC870
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     13445
IP address blocks:        64.68.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:83:aa:cf:bc:4a:47:d7:bd:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=22ddba5f-7f92-4a72-9cb3-3fd4fde4773b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:0a:93:9b:b1:ac:ce:0a:6b:bd:b6:01:78:
                    49:c0:e8:8e:e3:3f:94:22:a7:dd:58:ba:a5:e6:f0:
                    7c:a6:89:cc:14:c7:09:81:3c:46:e9:7b:54:f4:66:
                    8f:95:2b:f8:70:07:bb:f9:7f:f4:39:53:1d:bd:be:
                    f4:86:ae:ca:3d:55:d7:4d:77:5f:82:f4:9d:b7:f1:
                    01:96:31:10:8e:06:94:2a:cf:7d:07:5c:83:11:7e:
                    91:6d:d3:13:e7:6d:92:0d:7a:b8:f7:f8:63:16:19:
                    2a:9c:a0:fa:4d:4a:8b:9c:df:da:2c:e1:f7:34:32:
                    90:5f:bb:3c:73:80:aa:60:84:c5:94:45:5f:ed:e9:
                    ac:81:d5:8e:0e:a3:3a:42:f9:01:85:7b:29:e2:14:
                    46:56:e4:7a:15:93:2c:08:ab:f3:f9:f5:96:67:3a:
                    86:40:56:05:16:77:06:9f:09:ce:b4:aa:52:32:37:
                    1f:ff:01:94:71:ba:cf:5b:7f:8a:f2:56:88:e8:f5:
                    d0:73:73:d1:1b:75:5a:2a:5f:bf:4d:43:06:f3:6b:
                    de:78:9b:87:dd:c6:b3:59:cf:e7:a7:81:48:c0:23:
                    ea:08:47:e0:e3:8c:21:4a:49:21:7f:1e:3e:c2:10:
                    ac:94:36:3c:03:44:5e:b3:8c:9e:74:42:20:b5:08:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:E2:5B:D3:92:2E:9D:31:F1:63:83:6C:86:E2:98:A2:D7:CE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/87b78743-99f6-35f8-bc43-759390adb71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:7c:03:ad:86:01:ce:2d:19:f9:c7:f1:f0:5b:82:c2:91:
         3f:93:da:de:5c:27:c6:c0:59:e0:fb:b5:cd:48:74:c9:ec:16:
         49:c8:82:96:44:6e:42:be:56:80:ad:fa:3a:22:f9:5e:95:ef:
         1c:c8:ef:87:9b:a7:64:22:87:0f:3e:b1:1c:af:25:11:fa:a0:
         ba:59:38:c8:37:2c:13:82:a8:9a:40:48:61:ca:27:b8:03:86:
         bc:6b:aa:e4:2d:79:00:e5:d5:13:e2:20:61:35:ea:3c:c8:be:
         8d:8e:65:0d:a0:c8:69:e2:30:ac:32:9d:d0:67:9e:f7:1a:48:
         6b:a8:4e:38:8e:ee:31:49:d2:ff:4f:e6:4b:4b:42:cd:f4:48:
         24:d3:65:77:07:c4:0f:d1:11:37:79:79:05:9c:23:7d:b6:a9:
         58:6f:29:9a:c2:76:3b:0c:85:e9:de:88:bc:20:90:4d:40:92:
         29:d6:5f:35:1f:04:9a:8c:41:93:e5:57:b8:19:d2:e8:d9:1c:
         0b:df:b2:96:5c:7b:11:0c:ff:3a:39:01:ef:d9:82:d3:f1:1e:
         61:64:64:62:66:61:ce:5d:a5:de:05:2c:2c:14:18:61:36:42:
         c3:0c:d0:bd:1a:9b:a3:7f:00:3c:be:3d:5f:56:ec:ba:06:ed:
         71:4e:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:50:28 2025 by rpki-client