Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa
File:                     29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa (raw, json)
Hash identifier:          X4oWF7BbhiZ50/DpEJ5X6UPIsHWh0Xked8GSybTOi50=
Subject key identifier:   E5:F3:E5:77:12:83:49:EE:52:FA:70:B9:73:C7:52:34:7E:CC:6E:6E
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EA79A29E99F252902F607EE80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13445
IP address blocks:        144.196.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:29:e9:9f:25:29:02:f6:07:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a8dfdfd6-2bbb-4330-995c-7652f8765270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:66:64:d2:7b:92:5f:db:73:6f:d5:f2:4c:
                    ee:bc:6c:59:50:49:f8:2a:9c:1c:a6:15:b3:45:89:
                    68:ba:fa:a0:34:ed:1d:11:55:f8:69:5c:36:24:9a:
                    ba:e3:11:5b:75:a5:66:d4:b6:d1:11:db:f4:ab:42:
                    36:53:ca:70:4b:cd:bd:74:57:d0:4d:a9:8e:5a:5d:
                    cb:7c:19:2e:a3:46:a3:62:1d:66:39:72:f9:40:0f:
                    84:01:e5:8a:d3:fb:fa:ed:d9:0c:f6:dc:81:c4:52:
                    1f:01:5a:b7:1c:3f:e5:e1:60:e4:0b:9c:8a:37:83:
                    87:fc:7a:e7:56:ad:6e:c0:68:49:fe:e1:2f:9a:b8:
                    d1:4b:ec:d6:59:28:26:43:24:0b:96:a3:d6:8e:61:
                    ac:13:6f:c0:25:f1:dd:f5:95:63:3f:94:b6:da:a0:
                    c7:b1:12:5d:27:ee:8f:7c:d7:3b:6e:b1:11:8b:29:
                    64:70:66:4d:36:51:8f:bc:69:c8:59:f1:5a:fd:ef:
                    03:fe:46:9a:35:22:12:73:f4:75:27:32:a1:f1:7b:
                    a6:0d:cb:ef:99:1a:e3:9c:a5:a9:5e:6f:41:0a:e4:
                    05:d2:1a:2e:77:b0:bc:db:27:35:8a:d8:4b:d7:89:
                    05:ea:48:5a:2c:aa:45:18:48:6f:b5:2f:da:27:3c:
                    b1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:E5:77:12:83:49:EE:52:FA:70:B9:73:C7:52:34:7E:CC:6E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/29dcc40d-336e-3b4e-bb6c-7f041426aec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:92:af:1b:e2:61:e3:ea:27:c2:b3:a3:e5:f1:fd:84:8d:9e:
         4f:4b:3b:e2:72:de:0a:14:22:3e:5a:d8:37:e3:ec:7a:22:9a:
         82:bf:27:78:1d:77:2b:5d:f5:53:1d:8e:80:3d:8b:56:da:6e:
         4a:cb:e9:53:7e:0a:b1:f3:b8:37:92:b2:7f:72:fb:49:a5:4d:
         76:56:65:e6:36:c9:df:0b:64:84:c8:0d:0d:61:75:c8:47:ee:
         9e:96:5d:9a:65:43:8c:58:30:60:f6:aa:e0:d8:b6:e5:cf:bb:
         80:28:57:db:c1:b5:39:32:1f:1c:1e:ac:c4:d0:83:5f:12:0b:
         84:4b:90:8c:34:e5:7a:20:35:e2:fd:34:90:3f:09:1f:d2:eb:
         b6:10:ff:01:bd:9f:53:7a:b6:42:f7:45:6a:09:9c:3c:50:33:
         a5:af:7c:cd:a7:1d:92:7a:e1:52:24:8f:70:2e:a6:96:ee:20:
         a7:d2:11:4e:d9:40:b3:b6:5a:07:87:5a:0e:a0:f6:bb:2c:e1:
         c3:6f:d0:10:01:0b:18:ac:8b:4a:8b:86:76:a6:52:5f:f6:a9:
         80:00:8b:e5:2a:d4:10:e6:3c:0a:01:85:e4:6e:0b:8f:44:54:
         50:48:b6:00:70:ed:59:60:ea:93:0f:a6:f5:00:b9:79:e4:50:
         72:24:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:23:49 2026 by rpki-client