Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
File:                     a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa (raw, json)
Hash identifier:          4K367pMMmHl6SNVT5vsPuZapPMxCvgneBQeCFgeRVSA=
Subject key identifier:   0B:58:81:1D:79:23:52:0D:0E:27:C8:EA:80:D0:D4:72:FA:13:88:24
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584AFEE6CD5A11694D7FEDD7B000
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        144.196.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:cd:5a:11:69:4d:7f:ed:d7:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c2045c23-2100-453e-b111-cc81f9a0af7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:3e:82:d1:4c:b0:b0:9e:e9:9d:f2:60:b2:
                    9f:06:12:8c:b4:7a:77:34:f5:12:ac:ae:5b:b7:80:
                    81:34:f9:5c:4b:f3:38:0c:2b:3d:1d:2e:50:51:83:
                    47:02:1f:b6:f6:49:b4:1d:5a:99:0c:5d:5c:e2:e4:
                    b8:8a:c3:c1:80:4d:b1:e2:68:cd:1a:67:0e:96:14:
                    bc:67:08:a4:83:11:ef:f4:c6:4a:a7:ea:40:39:ae:
                    a3:ea:d3:af:81:4c:0c:2d:a7:26:7d:6e:e0:d8:1b:
                    9e:5e:18:44:b4:e4:41:44:da:13:cd:28:35:9f:72:
                    e6:51:6e:35:fe:d6:0d:dd:d7:58:6c:89:7a:b8:25:
                    d4:52:cf:7a:4c:41:86:f9:3b:aa:42:5f:84:1a:e3:
                    12:e8:e1:18:b8:9f:f6:cd:4e:b7:65:2a:f2:44:81:
                    0e:84:ac:9a:30:d2:6d:2e:e9:42:27:6d:b7:79:e7:
                    44:35:c7:80:bc:8f:aa:f5:0d:e8:f5:02:a1:00:2e:
                    25:90:c5:4b:58:68:76:fd:d8:98:a9:82:1a:1d:36:
                    22:08:23:15:c2:47:16:bf:61:28:d5:05:7c:c3:16:
                    2b:0a:f9:0d:f9:72:6b:2a:12:a1:f4:09:40:1d:08:
                    09:c9:69:7e:e6:d7:2d:50:81:c2:6c:0f:c7:1f:40:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:58:81:1D:79:23:52:0D:0E:27:C8:EA:80:D0:D4:72:FA:13:88:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a08b8785-fe90-30e4-a3c5-f1f48ba85ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5d:95:bb:72:1f:41:da:d1:9c:24:62:59:ed:66:09:a2:b4:
         b2:79:e7:57:12:5f:2c:2e:cb:2e:68:b4:96:48:79:96:ae:b8:
         fc:18:a2:d2:3c:98:3a:97:74:69:a1:33:3c:c0:16:f9:d7:c3:
         f9:87:14:3e:cc:9d:82:f2:e3:31:5a:2e:b2:a7:54:31:59:29:
         4d:c8:01:5a:52:d6:55:59:66:cb:5f:44:dd:0b:bc:2c:53:6c:
         f3:06:59:29:d1:7f:dd:45:49:3f:00:d3:32:bd:bc:32:a0:83:
         68:ff:24:41:41:5e:61:ce:75:af:e4:a6:07:b2:5d:d9:76:10:
         96:f5:a7:8f:4a:3a:3c:07:19:43:26:0f:aa:28:73:e8:f5:5b:
         9f:cd:91:f4:ec:c2:18:49:ab:cf:6b:f3:82:78:cd:5f:16:61:
         e8:54:6e:86:3b:53:af:03:a4:77:5d:99:0a:a4:5e:18:35:48:
         a2:27:a5:fb:f2:35:0e:58:cd:6d:6b:a7:21:b0:9b:3d:a9:16:
         18:c5:47:12:e5:b5:1e:21:33:9c:57:36:dc:a0:f8:85:7a:11:
         92:5d:76:fb:c8:db:0b:d8:e1:2a:7c:ea:d6:60:5e:2e:2b:b6:
         64:ee:9a:c6:15:86:aa:5e:8f:6e:57:26:2a:ef:1a:9e:41:06:
         78:99:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:43:03 2025 by rpki-client