Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa
File:                     04189fbf-0a97-3490-934a-17e91dfa7ad4.roa (raw, json)
Hash identifier:          3fyRcziJHaq8gTHtwoouZidNAs8GC8pJqKAwh/IX+yU=
Subject key identifier:   33:7D:E7:AB:F3:BB:D5:DA:98:46:9D:F1:93:1C:C8:D3:3F:47:A8:FB
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B5B074A6494945185083C77E0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        69.26.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4a:64:94:94:51:85:08:3c:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e3e087ea-1bb8-4eb0-a0ff-c4eb4ae17666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:3d:21:cf:29:8e:b1:bf:2a:ae:a3:97:ad:
                    0b:e2:02:08:02:42:48:db:0f:85:8b:11:73:e2:b6:
                    87:76:01:2e:c8:c6:07:48:c5:89:e8:68:6b:94:aa:
                    59:93:21:8a:1f:e3:ce:a9:1a:35:7b:6b:ea:d7:c7:
                    18:39:1d:7b:33:61:a3:89:4d:e2:5c:20:75:b1:0c:
                    61:1e:9c:2e:3c:15:95:22:19:43:bf:86:45:b6:7e:
                    72:5a:e4:63:92:4f:ed:67:03:71:52:06:c9:b7:f6:
                    b2:26:3c:75:6b:30:3b:fc:d7:12:ea:e3:f8:7c:37:
                    d0:62:f6:12:ad:a8:44:c4:2e:66:37:0a:5d:c9:95:
                    d3:0a:61:ae:f1:d3:20:56:8a:40:e5:9f:12:a0:08:
                    ac:9b:bf:b1:41:1a:d8:a8:4f:c2:a1:e9:94:11:cf:
                    68:da:ad:b3:49:5d:d1:23:b8:82:42:a0:c2:fc:8a:
                    16:57:3f:84:02:61:8a:0c:fc:ed:91:76:49:19:45:
                    05:6a:94:02:7d:e4:dc:09:13:51:6f:58:c0:53:29:
                    a8:14:49:94:06:5e:fb:62:54:9b:bd:0d:db:a0:c8:
                    52:d2:8f:57:79:a0:c2:7c:18:78:a3:db:31:7e:6c:
                    3b:25:de:21:0f:4e:a0:78:1e:9c:cd:53:7a:ee:26:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:E7:AB:F3:BB:D5:DA:98:46:9D:F1:93:1C:C8:D3:3F:47:A8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/04189fbf-0a97-3490-934a-17e91dfa7ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:00:3c:d1:92:1b:b2:8d:3e:21:78:a7:9c:d2:ba:56:e7:
         90:e9:d4:d1:b4:61:31:60:db:69:27:be:d8:8e:ca:4d:a2:2c:
         e2:e2:6c:41:76:8a:09:42:d3:4a:3b:7b:89:0a:65:d1:30:66:
         38:55:b4:54:03:52:ac:a3:1e:d0:60:86:ab:f3:f5:8b:ef:27:
         37:96:50:fd:d5:e1:f3:51:21:15:3a:a5:fe:3c:1b:da:d3:0c:
         57:6c:82:7e:44:a8:65:35:ba:0c:03:1b:54:cf:d6:c4:1a:d8:
         8d:55:7b:e9:4a:4c:04:f7:94:c3:09:42:7e:27:f2:e7:82:cf:
         23:8d:1b:89:fd:4e:ce:62:85:64:af:1d:ef:37:40:b8:58:c4:
         74:b4:ff:af:bc:58:dd:11:61:fb:da:e1:72:11:b5:6b:f1:bb:
         b5:6e:6f:0b:aa:f1:79:e2:bc:80:b9:8d:a3:15:2d:71:27:33:
         f8:9e:28:2a:a9:88:c5:15:48:e2:4e:45:16:15:4f:93:3a:01:
         10:94:fc:f6:18:56:8a:f0:99:5e:79:e2:83:25:ca:fd:f4:cd:
         bd:dd:1e:92:fc:77:3c:6a:ba:01:1b:d2:c6:0e:18:3c:8b:ca:
         94:4b:2a:f9:fe:73:83:d1:66:4d:14:3b:5c:15:26:98:73:6b:
         fc:33:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:02 2025 by rpki-client