Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
File:                     eac293e3-1805-34d4-a60a-cdd9145a0f52.roa (raw, json)
Hash identifier:          nkOvTq22NpJrbBshT3kTUIgglag18PrQeu+g18MT+kk=
Subject key identifier:   9C:24:90:9A:C7:7B:9D:49:F2:92:8C:AE:8F:0D:CD:8E:57:92:9C:6D
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B5571E14B5C98D48091BEBC00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     13445
IP address blocks:        144.196.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e1:4b:5c:98:d4:80:91:be:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=0bdc21bf-bec6-414e-9230-1a8d6aadbe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d6:e6:a2:8b:e3:0e:92:da:ad:8e:92:07:bf:
                    e5:b5:8f:40:8c:9d:a9:b8:1a:e1:c4:43:53:16:e4:
                    3f:99:b8:0f:b5:37:22:0f:e2:10:57:be:03:f7:a4:
                    dd:eb:76:53:68:ce:c6:6a:5e:d0:96:a1:28:d1:86:
                    e4:d1:9a:43:c0:09:e5:89:98:d3:60:54:fd:51:e4:
                    e8:41:a1:6a:bc:79:d3:b5:e4:c6:37:14:40:fa:9b:
                    27:27:30:bb:aa:80:07:22:bb:e4:05:53:aa:7b:24:
                    e5:a9:00:ec:31:b2:9e:99:e2:fe:7d:36:82:a8:a2:
                    00:94:66:07:44:28:a5:6f:b0:32:cb:a1:63:36:c3:
                    20:94:af:24:01:a1:15:3a:76:74:f9:93:1b:ef:69:
                    19:f1:fe:52:1e:eb:19:2e:5e:78:8a:0d:81:77:ea:
                    32:95:4b:fe:2d:c8:99:f5:86:aa:82:f1:7a:d5:60:
                    da:d6:e9:9a:4a:b5:ef:3d:1f:b2:7e:68:13:7e:ca:
                    a9:1f:a1:2f:ed:9f:3e:52:eb:dd:a2:c6:ca:c6:d8:
                    95:2f:66:03:14:3f:e4:98:58:bc:23:e1:4a:df:96:
                    7e:e0:58:e1:ef:d9:d8:f2:2e:e1:99:85:e7:f7:46:
                    04:64:99:d6:9c:cf:b4:2e:dc:50:74:65:bc:f7:c5:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:90:9A:C7:7B:9D:49:F2:92:8C:AE:8F:0D:CD:8E:57:92:9C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:93:76:0a:fc:ee:32:7e:f7:dd:d1:e2:86:da:fd:0d:6d:
         8e:80:23:4e:3b:55:63:93:a8:26:45:d2:97:4d:88:a7:b3:44:
         19:44:f8:af:ad:1b:91:5a:21:bb:77:e7:c6:8b:79:52:ee:11:
         f1:ee:56:d3:ad:91:d1:c7:63:ad:16:d5:fd:03:a4:ec:c3:d0:
         35:00:8a:6c:bc:f3:34:ce:f4:5a:18:d2:4b:ab:48:93:d8:16:
         ce:5a:be:8a:fd:32:b2:20:03:97:dc:b3:c9:81:dc:a9:a8:0c:
         f1:7d:44:40:f2:33:b7:46:6c:38:9b:4e:d8:ed:0c:51:ed:63:
         cf:49:ee:f8:8f:8f:c6:b9:39:11:af:92:06:2d:9c:1b:70:d0:
         30:f5:90:a6:ae:d7:23:33:e8:81:0b:82:ef:3d:c3:ff:e2:a5:
         d5:62:5d:bd:07:dc:6f:bb:7f:21:ae:d0:e2:37:f0:2c:d8:a2:
         c5:c1:92:24:6f:33:19:ca:a7:08:6a:ec:5b:3d:31:0a:46:fe:
         86:7c:4a:a2:f4:f0:32:11:06:0e:30:45:e6:78:b5:cb:13:d7:
         ca:43:be:63:9d:a4:dc:22:00:f9:25:d5:12:3c:96:cd:21:87:
         f0:a2:9b:5d:c9:0c:0e:d1:1d:8c:a0:22:ea:29:07:1f:b3:5b:
         70:f7:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:42:58 2025 by rpki-client