Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa
File:                     99cec357-039a-36f1-af2e-10ab3a50ae9a.roa (raw, json)
Hash identifier:          9h56/sPTvnfVkuQij8N84xKiilAGGjqNsIM1wAsPsv0=
Subject key identifier:   BE:BE:6D:A3:8F:D7:43:7C:A9:C2:6F:44:1E:1D:BD:B7:57:AD:40:7E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B0E416630A99205DD54EC5F74
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     4911
IP address blocks:        159.78.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:66:30:a9:92:05:dd:54:ec:5f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=ed5f397b-42a6-48c1-a58c-5e573b5c2624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:e4:c2:a0:04:f0:c6:b4:6d:e0:18:7e:52:
                    f1:e2:0e:10:e4:66:23:88:7e:cd:fd:44:51:d0:7a:
                    9c:19:cb:41:af:49:0a:fa:3f:57:7b:ef:2d:9b:b1:
                    ee:a2:ac:79:45:dd:45:77:3e:20:a2:6a:a2:23:3d:
                    5a:ad:e3:fd:ec:58:df:45:20:c6:e1:8d:19:1a:a3:
                    9d:d6:f4:1e:a5:3b:2e:c2:96:e4:47:de:a6:dc:7e:
                    09:b2:16:80:9e:4a:2d:31:30:60:84:39:31:7f:53:
                    33:0d:73:93:93:f1:3f:70:f7:ab:59:53:6b:3b:8b:
                    b9:27:fe:e0:63:65:2d:92:cf:44:86:d9:f8:e5:f2:
                    ba:b3:48:46:98:4e:8f:49:2b:0b:fd:6b:ec:ea:fd:
                    70:f1:0e:9b:50:79:d7:5e:f2:bb:aa:9c:53:43:61:
                    ba:2a:5b:ad:9d:b6:88:a0:db:b4:0e:14:80:3a:0b:
                    6e:64:55:c0:9e:5f:30:a2:94:98:bd:1c:fb:53:11:
                    dd:03:78:64:2b:71:94:7f:83:73:ae:bb:86:84:67:
                    2d:9f:5e:7d:87:c3:75:8d:28:c5:e2:70:d0:90:3f:
                    21:42:e8:78:39:b1:74:1e:ee:81:0c:39:a2:19:55:
                    88:26:57:7a:7e:7d:12:7b:79:d1:0a:25:79:42:86:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:6D:A3:8F:D7:43:7C:A9:C2:6F:44:1E:1D:BD:B7:57:AD:40:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/99cec357-039a-36f1-af2e-10ab3a50ae9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:94:98:ef:08:20:84:92:32:bf:4c:2d:c9:aa:1f:4e:b4:
         85:9c:4b:8b:40:6a:67:8d:15:c1:e9:c0:ec:2e:5a:5d:77:c5:
         47:f4:d8:6f:3e:66:68:8e:40:1c:40:af:57:6b:fb:64:55:95:
         58:61:b0:dd:6d:41:20:82:1c:48:e1:3d:fd:d9:09:38:7f:d6:
         29:58:2a:f4:14:ad:ac:a8:ef:27:e9:a0:3b:a4:76:de:f1:0f:
         d7:01:45:9c:e0:a2:4d:20:95:cc:f9:99:4d:02:83:02:60:c0:
         d0:d9:dd:c3:35:ac:e1:4f:fb:75:3e:02:f5:2a:61:ea:73:0e:
         8a:bf:8f:32:24:17:56:e4:25:be:6c:32:b3:e7:f3:fd:c6:10:
         22:b5:38:c9:04:a5:3d:48:6f:5a:c9:18:15:e6:33:85:e8:54:
         4c:cd:64:83:8f:1c:4e:3f:fc:68:b9:8f:cd:18:cd:03:6f:4e:
         76:31:67:19:57:fe:6d:82:d3:05:a9:83:0e:6b:22:9f:5b:62:
         c4:75:b5:1a:05:4b:7a:c9:51:ea:7c:3a:68:22:37:48:db:11:
         80:4d:65:56:dc:85:19:4f:b1:77:d9:a4:c2:ce:27:58:33:4f:
         b5:35:97:da:a4:7f:a2:15:66:37:72:8a:6d:28:4b:9f:ea:42:
         b9:9c:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:30:23 2025 by rpki-client