Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e074f33f-7ff0-3e16-a284-f2d080074af6.roa
File:                     e074f33f-7ff0-3e16-a284-f2d080074af6.roa (raw, json)
Hash identifier:          kNGAck8NSm9IsU0en1LEuy5knd1BIyZGuBsKWqLj1AQ=
Subject key identifier:   C4:B3:A2:3A:17:DB:4B:22:E9:7C:1D:68:29:09:3F:05:3A:E9:E9:7E
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584AC0164A8F29E3AAFEDDC4C300
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e074f33f-7ff0-3e16-a284-f2d080074af6.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     13445
IP address blocks:        150.253.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:4a:8f:29:e3:aa:fe:dd:c4:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=d62465f3-dd3b-4d4c-bcc7-7c9923191f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:70:b3:72:78:dd:99:b9:77:b7:3a:22:12:
                    8d:c2:d7:74:d2:04:fa:ff:29:ac:17:67:4b:a8:4d:
                    cd:86:2a:66:b6:e6:e0:23:04:93:f5:2e:57:12:0e:
                    25:55:ca:13:f4:56:af:e0:af:55:00:f2:c2:cc:ec:
                    90:67:f5:d5:19:69:ee:40:19:b7:07:d6:c2:fc:24:
                    3e:a5:e6:88:ce:a4:19:c7:0b:4c:f2:a0:b8:e2:33:
                    67:1a:40:a9:23:f1:08:8e:e1:ab:59:19:c8:46:72:
                    ab:41:08:10:bd:5b:38:90:6f:af:da:cb:a1:6e:64:
                    d7:5e:f1:98:b1:b6:5e:69:d9:8f:07:51:29:f6:09:
                    65:80:bd:67:53:f3:91:99:f3:52:ca:c1:21:34:81:
                    e9:aa:e0:56:63:3f:95:a0:cd:4d:82:a8:f4:27:4a:
                    f0:2a:a0:ad:aa:64:67:c8:74:0e:a4:a8:5f:f8:29:
                    34:e4:0e:9b:62:da:e8:13:02:60:af:c9:81:30:79:
                    7d:d3:e5:0b:61:94:e5:31:e8:94:ca:13:7a:8c:2a:
                    af:1b:dd:af:0a:3e:b7:11:d5:b4:0f:a8:07:1f:b4:
                    8e:b9:0b:3a:d3:59:8b:c9:98:55:a0:f6:04:73:67:
                    d5:8a:73:cd:3b:27:b8:64:11:60:f8:ed:fa:dc:d8:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:A2:3A:17:DB:4B:22:E9:7C:1D:68:29:09:3F:05:3A:E9:E9:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e074f33f-7ff0-3e16-a284-f2d080074af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.253.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a8:b2:b3:89:fa:c3:cf:86:8a:0e:3b:48:56:15:23:5a:c8:
         55:3a:51:ef:8f:26:cb:dd:03:b1:41:31:e0:46:6e:6f:5a:49:
         9b:2c:7b:4a:d4:45:99:26:d7:bc:2b:82:e1:e9:bb:21:6a:09:
         da:09:1b:c7:f0:f3:1c:9f:33:0f:f4:2b:df:12:fa:0b:10:fd:
         c2:c4:20:52:8b:0a:d2:6e:9c:46:fb:81:58:e0:51:35:9c:4e:
         eb:dc:35:c1:bd:79:85:1f:39:1d:38:8d:05:bd:bc:f0:00:28:
         36:33:d1:52:74:80:8a:2c:b2:b6:ac:fd:5b:c3:c8:b0:ba:db:
         67:9c:ce:02:aa:d9:6e:1d:51:22:70:3e:04:bc:04:b2:b9:9e:
         33:3c:91:fa:56:53:73:ae:ca:d0:1e:4f:11:2e:96:bf:67:91:
         00:4f:ca:8c:b9:1b:90:ab:31:7c:97:81:f8:93:12:4f:14:c2:
         ac:67:8a:c6:4c:7d:98:6e:22:e6:7b:a8:ab:ad:68:66:ba:d5:
         8d:6a:2b:e7:4b:46:09:cb:15:57:8b:99:48:a2:8f:0b:31:b4:
         9e:3b:7f:a8:fa:61:1b:b2:b6:d4:ad:c1:ea:0c:e9:6a:be:7e:
         6d:a6:15:a3:a3:37:ce:76:ac:20:3e:b5:88:5c:2d:8d:5b:67:
         b9:c1:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:51 2025 by rpki-client