Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
File:                     3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa (raw, json)
Hash identifier:          bcEj51o1sWLez5asS++WCxq8BfJaPWmW7KzWr0Bask8=
Subject key identifier:   1F:82:C4:43:10:EA:F4:19:A4:C2:4E:14:18:29:A2:67:8C:88:C6:C9
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584B0746B295800F5867D94DAE40
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        143.116.78.0/23 maxlen: 23
                          143.116.78.0/24 maxlen: 24
                          143.116.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b2:95:80:0f:58:67:d9:4d:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=d4017144-44f9-426f-8a53-dcc73fbdbe9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:05:d6:9b:a5:de:d4:9a:36:02:64:c4:a8:
                    aa:f4:28:2c:dd:70:de:4a:96:da:72:76:2d:a9:8c:
                    f7:97:d0:9b:c6:dc:4e:3d:36:5c:cc:98:1e:55:94:
                    e4:f8:5a:cb:71:82:96:93:d5:4e:da:21:7b:4d:06:
                    8e:14:49:2b:ac:4d:9b:b1:a3:81:89:19:2b:01:75:
                    da:e7:bf:4c:77:4f:c4:ef:3d:5b:36:c7:4b:a3:68:
                    05:0d:99:27:9e:51:76:a4:08:bb:2b:71:b6:db:16:
                    c3:88:5f:30:72:c2:26:75:93:72:0b:2d:53:b3:4d:
                    15:4f:cd:ae:ad:da:51:9e:83:61:7c:6a:06:d1:cc:
                    2d:07:07:27:c8:81:52:2e:c7:82:6a:6a:f5:1d:77:
                    a9:5e:ac:7f:60:70:8e:95:d8:6a:f3:c9:7d:6c:52:
                    dd:df:8a:07:c6:1f:4e:2f:7b:3b:77:e2:92:d4:23:
                    8d:07:6f:9a:7f:50:8e:d3:06:91:7e:27:14:08:bd:
                    a6:70:a9:78:99:b3:1a:cc:47:90:02:85:a3:37:76:
                    4f:21:28:a4:99:bb:5c:e1:72:c4:08:73:2f:8a:d7:
                    3f:b8:44:d6:09:bc:32:d7:7c:c9:3f:15:9a:bd:96:
                    7d:da:44:c7:0b:23:b0:6c:b9:97:42:cc:ad:a2:ef:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:C4:43:10:EA:F4:19:A4:C2:4E:14:18:29:A2:67:8C:88:C6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:18:61:39:e3:de:c9:2b:13:b6:73:b2:4a:a8:3c:5b:de:
         62:38:01:bd:b7:b4:1e:e5:fb:d7:4e:b5:2a:cc:ab:63:28:2f:
         cf:56:60:85:4f:36:f6:1b:1b:9d:72:81:be:91:62:b0:b7:5e:
         d8:dc:50:ad:a0:08:d8:6a:3b:ac:ba:8f:2d:66:75:61:53:90:
         6d:b5:80:2f:0b:c5:95:ad:77:80:0d:9f:7c:dd:8b:62:a8:4c:
         b1:8c:b0:7e:13:b0:e9:89:96:7b:0e:b3:11:4c:0a:5b:7c:0b:
         6f:ed:16:90:af:a6:55:ad:50:b5:78:22:35:f1:71:e3:52:0d:
         5c:5a:42:a6:93:8b:fe:78:af:3b:4b:17:9f:9b:a3:ca:5e:62:
         a9:9e:4a:2a:7a:21:f7:38:27:18:4a:62:64:b9:63:d0:ae:03:
         ea:b2:3c:48:00:bc:f7:0f:12:ce:0f:e5:a7:3a:7f:8a:3c:b2:
         b2:69:42:50:d8:9a:02:55:5d:ca:cb:0e:96:01:8f:c8:ee:6b:
         f7:fc:b3:1a:67:d6:a7:6b:ce:57:f3:ff:35:27:a5:c1:2e:31:
         f4:bd:df:d4:e5:ed:70:97:37:30:b6:02:74:d2:18:7a:46:e0:
         f5:9a:90:01:2b:30:ff:f8:1b:92:6e:0a:f2:3c:58:e9:34:12:
         22:99:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:26:09 2025 by rpki-client