Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e708041f-fb02-3858-aaaa-212f17d71b4d.roa
File:                     e708041f-fb02-3858-aaaa-212f17d71b4d.roa (raw, json)
Hash identifier:          bLFocMOMvKzYUPr70oz1cb5fX7dYAgTg7XY2DAozgX0=
Subject key identifier:   CA:2C:E8:B7:5C:BB:F2:E1:F5:9D:4B:66:6C:DF:8F:3A:81:28:FE:FD
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B5B074A3939BA6FC771D34240
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e708041f-fb02-3858-aaaa-212f17d71b4d.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        144.196.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4a:39:39:ba:6f:c7:71:d3:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=2ee726fd-7634-477e-948d-28cc4147bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:1e:ee:6c:92:3a:f4:e9:5f:87:a3:82:b2:
                    cd:9a:ca:eb:d8:5f:7a:67:22:bc:31:5a:c7:fa:77:
                    7b:d1:85:e1:60:1b:27:1f:34:35:89:16:aa:72:dd:
                    6a:f9:ff:67:89:fd:1e:06:13:a5:73:de:4a:19:ee:
                    52:97:a4:53:49:a7:6a:1a:e6:9a:76:72:da:0e:05:
                    03:1d:65:94:8a:7a:b6:7e:fa:f2:d1:f6:21:ff:33:
                    1a:a5:09:46:bf:06:71:84:49:af:5d:43:50:19:2f:
                    c0:1c:31:bc:13:33:e6:be:07:00:b2:66:17:28:16:
                    d9:35:01:72:2d:72:b2:5e:bf:35:90:a2:01:09:0a:
                    d8:d3:f2:11:9c:f6:ec:89:0c:71:72:d6:3e:3a:9e:
                    ff:5a:da:ce:41:3e:91:22:0a:08:7c:4e:64:e8:06:
                    b9:c3:67:48:3e:2f:e7:97:4e:b8:7e:d5:63:2c:38:
                    e1:f1:a9:46:87:5e:4c:cd:9c:3d:04:ed:d3:75:29:
                    22:ae:d8:3d:f1:30:b4:3a:e3:58:08:d2:42:15:18:
                    66:dd:ea:c4:19:de:18:bc:d8:68:d8:40:58:8e:1f:
                    0c:14:60:4d:1b:34:ca:a2:d2:12:12:28:9c:b7:c9:
                    0a:ff:80:0a:8c:08:54:ff:89:d4:2c:5b:9f:a4:fe:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2C:E8:B7:5C:BB:F2:E1:F5:9D:4B:66:6C:DF:8F:3A:81:28:FE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e708041f-fb02-3858-aaaa-212f17d71b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:9c:dd:b1:6a:d1:bf:86:58:af:51:a1:7e:88:a1:bf:85:
         4d:2a:8c:fa:f2:ad:f9:36:7d:d6:76:fe:fe:eb:fa:71:b9:33:
         e7:dd:d7:99:5b:3a:a3:67:1f:af:db:79:13:32:85:c7:6b:b2:
         7b:10:f9:a9:45:c5:69:1b:43:3b:9f:2f:a5:24:ee:c3:a2:5b:
         7b:9e:ac:c2:8d:cf:fa:a3:29:7b:92:1e:a1:2d:ff:f7:ea:f2:
         9b:4d:1c:4f:ca:47:ed:49:54:87:ea:90:50:ba:55:8f:9a:d0:
         2a:2a:e2:b2:e8:f7:4c:6d:65:dd:5a:4b:04:2a:45:0b:d3:6f:
         4a:ba:07:2e:4d:c1:f0:a3:c7:31:63:e2:99:40:3d:75:8f:92:
         5d:74:ba:e9:42:bb:5b:ec:1f:9e:31:02:a3:f6:50:cd:78:14:
         31:30:85:1a:c2:84:2a:d0:46:ee:c0:37:de:75:0e:40:f7:30:
         8b:1f:63:aa:c9:e7:75:6a:70:67:f7:bb:ed:65:43:8d:dc:8e:
         6b:04:ec:a2:6d:2e:9e:88:11:b0:40:d5:ab:59:59:52:5c:bd:
         e6:b2:49:0f:45:e3:ec:bb:bb:0e:31:35:cf:17:78:67:64:5a:
         83:cd:be:f3:d8:32:98:13:da:20:93:78:a0:86:58:f3:04:35:
         f5:32:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:22 2025 by rpki-client