Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa
File:                     d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa (raw, json)
Hash identifier:          yopVQMvLkqDrUPdycDDQmEiKjKqKQLu8mUFFrx4AjtA=
Subject key identifier:   CF:E3:4F:1A:82:95:BF:F6:BB:2B:63:71:CE:F7:28:B7:8E:17:4B:89
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584ABD4B95A9EC9AB6DC3FDC4300
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     198949
IP address blocks:        66.163.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:95:a9:ec:9a:b6:dc:3f:dc:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=1dc13d6d-dd81-4d0d-956d-cbe38875ee5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:fe:24:3d:bc:93:e0:e4:0b:90:19:9a:f9:
                    a2:a7:fd:f3:4f:88:a8:fc:53:42:e3:13:ec:ed:5f:
                    44:0c:aa:95:6b:66:61:fb:f9:6f:07:46:1d:64:23:
                    a3:72:df:21:a4:1a:f6:e0:9d:1a:b0:71:92:9d:78:
                    03:40:ce:57:8d:b2:64:e1:24:cf:9b:95:51:48:13:
                    4c:1c:2f:39:16:cc:20:48:51:4a:70:5d:01:2f:9d:
                    7f:26:3b:c7:fe:d4:38:54:66:54:e1:8b:3e:96:86:
                    fb:59:32:6b:29:0b:df:d3:15:e4:59:c4:49:3b:16:
                    e4:0a:6b:36:c8:1c:61:1b:39:62:fb:2c:2a:22:e8:
                    94:76:ff:27:a1:a4:e0:67:50:47:cf:c9:0e:38:b5:
                    f9:1f:83:83:a4:e7:a3:c8:19:17:4a:f1:75:d3:cd:
                    36:a0:b4:c9:80:9d:9c:73:4a:b4:44:53:05:b9:a3:
                    e0:91:0a:d5:56:3b:ef:05:95:2a:c0:ce:4a:72:a5:
                    4e:b6:4e:52:3a:68:6d:59:3f:ba:0c:82:50:bb:80:
                    4d:a5:8d:93:6e:03:53:29:f1:24:db:29:d3:55:6f:
                    45:04:ec:32:22:29:06:ab:c6:ee:36:8a:82:8e:98:
                    dd:a3:a3:54:9d:5c:67:80:de:7f:10:76:9c:09:f0:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E3:4F:1A:82:95:BF:F6:BB:2B:63:71:CE:F7:28:B7:8E:17:4B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/d8a8428c-5d0e-350b-927e-fc78e6d2816b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:38:26:37:29:18:e1:c4:d9:26:da:b4:1b:e8:ab:ba:58:
         ad:12:2d:da:e4:78:36:65:76:36:81:cb:23:4c:12:4d:f6:a0:
         28:20:3f:eb:0f:8a:7c:fc:bd:23:77:fc:f3:c4:6c:ea:b9:10:
         90:65:46:fd:60:ce:37:c2:45:18:59:c1:c6:bc:01:95:bf:f8:
         ec:81:cd:5a:b9:11:15:0a:84:fd:fe:10:26:49:da:74:85:dd:
         06:a1:9f:6f:6d:94:e6:27:1f:7d:7d:cd:78:3b:e4:16:04:25:
         29:4c:0b:74:8f:56:1a:a2:61:57:a5:92:85:b8:35:c7:bb:60:
         bf:31:b3:d8:67:e3:d9:a1:97:fa:a1:1a:60:a2:8e:83:cc:21:
         32:a8:1d:cd:74:82:6e:51:09:3b:f8:e9:62:e0:70:ea:b7:12:
         0a:78:5f:78:5d:73:eb:3f:8f:3e:70:e0:b7:d9:3f:a5:7f:72:
         ce:60:c5:ca:ec:cc:37:e1:d6:d1:e6:5e:bb:84:e1:69:9a:c9:
         cd:38:36:6b:fc:3f:b2:2a:11:68:ce:77:25:03:17:85:58:1f:
         19:e0:eb:45:1a:f7:4e:60:29:38:78:e5:fd:9e:1d:39:f4:f8:
         05:84:6b:ce:40:04:83:28:a1:28:b6:d5:a2:61:45:19:8b:46:
         10:96:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:59:52 2025 by rpki-client