Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
File:                     a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa (raw, json)
Hash identifier:          DhqdUELUAxLRaPt48q5xqDvv66ACKQy1YMjD0ors5vk=
Subject key identifier:   46:34:80:0B:55:85:43:F1:49:66:D2:CC:93:81:42:0D:EC:EE:71:14
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A1E2A9AB192227CCE502FFC58
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     13445
IP address blocks:        144.196.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:9a:b1:92:22:7c:ce:50:2f:fc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=d2549023-8018-4042-856b-dd514f3f26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:80:11:ee:eb:23:78:f4:c9:72:97:7a:42:
                    e8:33:46:6f:b0:89:da:98:56:a7:08:cf:3c:81:e3:
                    59:a8:4f:c1:23:f8:15:25:c7:b6:9f:b1:64:f0:13:
                    ad:be:03:d4:df:3f:da:d6:8e:2a:b3:4c:24:fe:af:
                    be:b5:a0:08:bd:5f:ea:dd:a8:19:07:b4:63:20:35:
                    8b:d0:8e:36:ab:6b:75:87:f2:31:f9:8d:23:1b:40:
                    3d:27:4e:c9:45:0f:eb:3d:12:6f:b9:1f:36:9b:34:
                    86:53:92:e9:55:c7:0c:c7:4c:c9:58:a8:ea:9d:61:
                    d3:0e:b7:c7:97:c6:4d:30:d7:26:99:6b:02:56:6f:
                    6f:93:68:96:b4:e2:34:2a:22:e9:a1:6f:a7:e2:4c:
                    f9:b0:6b:66:bf:f8:35:4b:3f:f8:ff:87:65:29:5e:
                    70:f5:ba:52:71:e6:59:d2:52:6d:f7:52:4a:58:f2:
                    10:73:6a:12:8a:65:59:3a:9b:3b:95:97:cd:af:49:
                    bc:41:4d:c9:03:b9:ac:c3:a5:7c:21:61:e4:f0:88:
                    e3:d4:1f:0f:f8:82:ea:6d:3e:57:b4:6f:e8:80:8b:
                    36:fe:e0:e7:3e:89:78:f2:d0:18:c9:35:33:0e:39:
                    18:b9:5f:05:04:4f:5a:27:51:ca:5f:8d:fc:fd:6d:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:34:80:0B:55:85:43:F1:49:66:D2:CC:93:81:42:0D:EC:EE:71:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:a0:43:87:c3:97:a3:f2:4f:d3:8e:21:36:ed:2b:e7:5a:
         23:37:e0:58:8a:d4:c2:93:0e:4f:29:60:c7:66:82:d8:65:b7:
         d3:53:50:db:b4:56:f0:ed:db:d4:6e:5e:7c:ba:e0:81:a6:aa:
         db:6b:1c:27:d6:86:6b:33:34:f8:96:91:b2:1a:10:24:a7:69:
         2f:2b:4c:9f:97:e9:20:c7:46:c1:d1:1a:42:55:32:be:bd:17:
         0e:25:c8:d1:87:a6:19:0a:ad:b3:9c:bf:62:33:79:db:fe:e0:
         28:16:41:b5:f2:2c:d5:4a:7e:7b:db:cb:47:bd:fa:ab:d1:1d:
         34:e8:bc:ee:84:7b:9f:61:1b:0d:fd:3c:03:38:a3:2d:39:b5:
         a3:9d:6e:1d:e3:bd:1d:19:78:e1:e9:9e:06:c2:4a:7e:7c:97:
         92:5b:9c:51:e2:d2:d5:67:4f:76:14:94:4b:49:c0:c1:ee:44:
         71:a5:4d:73:a5:19:b7:1d:a9:a5:50:60:58:f7:87:1c:36:2f:
         64:91:85:40:17:4e:1c:c7:54:df:95:fd:fe:89:e3:e8:8f:50:
         c7:c2:cc:d7:ab:22:24:84:cb:23:20:a8:42:49:27:49:7a:b4:
         df:4b:0e:79:26:95:24:f6:52:38:70:eb:f7:de:ce:12:a5:8b:
         6c:6d:20:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKpqxkiJ8zlAv/FgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
ZDI1NDkwMjMtODAxOC00MDQyLTg1NmItZGQ1MTRmM2YyNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFiAEe7rI3j0yXKXekLoM0ZvsInamFanCM88
geNZqE/BI/gVJce2n7Fk8BOtvgPU3z/a1o4qs0wk/q++taAIvV/q3agZB7RjIDWL
0I42q2t1h/Ix+Y0jG0A9J07JRQ/rPRJvuR82mzSGU5LpVccMx0zJWKjqnWHTDrfH
l8ZNMNcmmWsCVm9vk2iWtOI0KiLpoW+n4kz5sGtmv/g1Sz/4/4dlKV5w9bpSceZZ
0lJt91JKWPIQc2oSimVZOps7lZfNr0m8QU3JA7msw6V8IWHk8Ijj1B8P+ILqbT5X
tG/ogIs2/uDnPol48tAYyTUzDjkYuV8FBE9aJ1HKX438/W3oXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEY0gAtVhUPxSWbSzJOBQg3s7nEUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYTA4Yjg3ODUtZmU5MC0z
MGU0LWEzYzUtZjFmNDhiYTg1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkMR+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1hoEOHw5ej8k/TjiE27SvnWiM34FiK1MKTDk8pYMdmgthlt9NTUNu0
VvDt29RuXny64IGmqttrHCfWhmszNPiWkbIaECSnaS8rTJ+X6SDHRsHRGkJVMr69
Fw4lyNGHphkKrbOcv2Izedv+4CgWQbXyLNVKfnvby0e9+qvRHTTovO6Ee59hGw39
PAM4oy05taOdbh3jvR0ZeOHpngbCSn58l5JbnFHi0tVnT3YUlEtJwMHuRHGlTXOl
GbcdqaVQYFj3hxw2L2SRhUAXThzHVN+V/f6J4+iPUMfCzNerIiSEyyMgqEJJJ0l6
tN9LDnkmlST2Ujhw6/fezhKli2xtIOM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:56 2025 by rpki-client