Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa
File:                     b242522d-2590-316e-941b-9b6cbc93ed22.roa (raw, json)
Hash identifier:          ui7lQl4aFZwDgqMV06Aap3qbivvoARMQSt3DdjODPTw=
Subject key identifier:   96:58:61:88:98:71:81:CD:2F:76:29:3D:62:88:1A:01:B7:4C:35:DF
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584AD23BC2E2DC1B5257D5CE6B80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     13445
IP address blocks:        144.196.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c2:e2:dc:1b:52:57:d5:ce:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=8403761a-0257-412b-9fff-c56ecaa59852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:5c:07:79:2b:db:f6:e8:6c:44:62:3c:fd:
                    12:ff:62:d0:9a:2d:ed:0b:98:91:b3:8e:2c:0a:21:
                    1a:c3:b6:c3:44:ef:e5:88:ed:44:77:a2:9d:ef:91:
                    6a:ef:6f:11:33:eb:0f:df:9d:f7:e8:91:7c:c6:97:
                    b0:0e:85:8a:7e:af:90:93:a7:29:8a:33:c2:82:b6:
                    54:40:0b:e5:fe:2c:7e:99:22:8a:5f:e0:9c:a3:b3:
                    e7:33:84:94:3e:f9:8a:e7:e4:4d:bd:a5:2b:a7:13:
                    f9:dd:b5:02:f6:d4:a7:18:d1:ce:37:0c:55:35:31:
                    2a:b2:9e:46:7a:f2:b6:6c:d1:f9:7d:54:d0:db:c6:
                    cf:92:ed:b8:7c:0b:05:b8:46:91:9e:c9:05:65:94:
                    80:86:31:12:36:5f:55:56:48:21:12:ad:90:cd:2e:
                    65:81:9d:0a:34:ca:52:f6:6f:1c:57:fc:a6:11:3c:
                    90:d4:34:5f:4c:82:10:ff:ff:e2:4d:c1:ec:8d:5d:
                    04:53:1c:44:95:b2:84:c1:f9:50:7b:ce:08:db:ff:
                    3a:f5:9f:29:e3:83:ca:87:ce:3a:c0:ab:2d:bd:08:
                    45:cd:8c:53:44:b9:22:86:d6:f7:72:d7:8d:08:10:
                    2e:35:72:22:32:6b:89:6c:a6:6d:e5:27:49:69:5a:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:58:61:88:98:71:81:CD:2F:76:29:3D:62:88:1A:01:B7:4C:35:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b242522d-2590-316e-941b-9b6cbc93ed22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:dd:05:69:d5:4d:61:82:d4:c4:a4:bc:76:f7:9a:1c:cd:
         4e:28:0c:be:43:62:13:00:d7:63:85:cd:7c:88:15:7a:c2:4f:
         df:bd:d6:de:c6:59:d0:4b:36:67:f8:89:93:20:61:fa:5c:41:
         b5:a6:a8:02:ed:c1:3f:16:32:eb:43:9c:a0:fb:5e:37:a4:5d:
         b5:5a:12:d1:ea:ec:c8:9f:9e:8e:49:11:79:4b:27:47:c9:d3:
         20:a5:c6:8f:31:d6:92:55:e8:23:b0:3d:e3:4a:b4:4b:0b:17:
         b7:ba:1c:3a:37:f0:d3:79:a9:75:aa:35:c2:7e:86:2c:1c:a8:
         81:a0:bc:ff:9d:ab:c4:34:47:a0:4a:77:ee:1f:5f:45:ae:67:
         bb:1d:0c:1d:ef:1f:8e:d9:2f:b2:99:87:4c:a8:8b:fe:4e:c0:
         b8:bc:fc:f2:b8:99:b2:9e:8d:26:86:c5:d4:3b:05:37:95:52:
         81:9a:40:df:01:ee:b5:ce:08:5c:49:60:85:01:82:8c:71:a4:
         df:4e:15:7c:38:40:b6:c3:eb:1a:52:40:1b:3e:7d:31:0d:09:
         ac:f1:17:37:be:6c:a2:e1:22:d7:07:73:68:ee:25:36:64:7b:
         91:2b:4c:20:74:77:30:ae:12:4c:6b:64:a1:b9:f8:ac:5c:96:
         02:d1:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:28 2025 by rpki-client