Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
File:                     bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json)
Hash identifier:          DXy+F+o6fuxRCvGp2tOEMqV7KF91qz1LHnGnMEQpQPQ=
Subject key identifier:   61:B2:A7:0B:43:71:49:B5:07:35:FE:B1:9B:4F:AC:8B:48:CA:69:9F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A23C017D28E87A24FB39D0D80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     13445
IP address blocks:        163.129.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:17:d2:8e:87:a2:4f:b3:9d:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=88a02430-4208-488d-8a27-60f226c3ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:d3:45:6a:6e:fb:ff:c6:c3:9c:e5:58:dd:
                    f6:c0:c4:1d:74:f8:c7:28:47:cc:c9:70:39:6e:5d:
                    53:b0:7e:6a:ba:8f:5e:45:3a:aa:be:7d:67:b5:ad:
                    bb:09:c0:3b:1e:80:fa:06:60:2b:70:3e:76:dd:80:
                    6e:08:3d:be:63:fd:37:54:ed:6c:3a:d6:b3:5b:47:
                    3b:51:50:f7:04:06:8c:72:75:3f:4d:4f:45:90:06:
                    4f:93:e2:f9:60:5a:2c:46:ca:59:fe:79:62:1d:79:
                    0b:59:15:95:e7:81:26:f6:d7:71:85:be:60:34:9d:
                    de:d0:44:2e:36:24:9c:74:b6:a4:8a:b0:24:fd:56:
                    5b:39:46:2c:9e:8a:3d:8f:a2:bb:bf:92:ab:5d:eb:
                    6b:ba:c7:d3:7c:b8:34:74:d8:61:2e:d9:43:4b:8f:
                    c9:16:6c:18:29:44:0c:35:6c:b0:e5:38:c5:46:74:
                    93:d4:0d:ce:fa:c2:dc:78:bf:98:07:1f:f0:18:bc:
                    7d:49:89:0d:1d:a3:d6:56:2d:e1:44:14:cf:52:3f:
                    21:a6:8a:20:75:2f:ac:24:0a:5c:4f:85:ec:ac:4e:
                    03:4f:74:83:9e:11:f8:1e:49:f2:37:81:9f:0d:3a:
                    ee:82:6a:73:ed:74:99:08:76:0a:34:68:87:4f:36:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B2:A7:0B:43:71:49:B5:07:35:FE:B1:9B:4F:AC:8B:48:CA:69:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:20:61:18:03:be:f8:20:31:cb:50:4d:bb:8a:c5:0f:21:59:
         8e:dc:0d:cc:29:83:cc:0d:59:19:46:45:ce:b0:cc:d6:49:b2:
         14:45:a8:75:70:df:5b:7b:5d:a8:8f:d4:6d:96:83:11:3d:2b:
         6b:63:24:6e:35:ae:f9:f8:b2:5e:24:00:05:ef:fe:d8:70:f8:
         31:1b:a6:92:94:e5:ae:7b:32:15:d2:88:ec:15:36:32:8f:30:
         55:fe:9d:63:00:6d:b9:e2:4d:f2:93:c0:4e:7d:85:7d:7b:f9:
         dc:16:93:20:14:f8:74:cf:1d:43:a0:66:6a:5b:8e:a3:f4:2a:
         b5:83:cf:1a:2d:b0:2a:ad:ad:67:aa:0e:8c:57:2e:a8:dc:5f:
         73:be:00:6c:88:c7:3a:96:c7:be:c4:cc:14:85:fb:3c:93:55:
         51:1e:d4:c1:a1:a2:9e:61:06:09:6b:dd:6b:3b:ff:89:b9:cc:
         28:93:ae:0d:96:21:b9:60:78:ab:8d:36:2b:87:ba:60:cf:9d:
         27:8d:1b:1f:38:1e:ff:f7:9d:25:28:b3:fb:3f:4c:a2:99:83:
         cd:b3:b6:69:de:74:46:17:b1:88:19:d7:3a:21:e1:d8:8f:4f:
         bf:77:5f:94:bf:76:87:21:45:11:10:21:34:c5:05:2e:b8:d8:
         40:d7:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:10 2025 by rpki-client