Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa
File:                     a0f2da57-8878-3284-b441-405e28e822c3.roa (raw, json)
Hash identifier:          vIWeYpNMeacdr4gGUsJMqRBol9zGZw1QgwT8U29HKJo=
Subject key identifier:   49:B7:DB:CD:5B:DC:68:E1:C4:06:F8:BE:1F:1A:E4:E3:F6:40:E3:FF
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E84C8491CB54F1359B0520580
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa
Signing time:             Thu 16 Jul 2026 14:18:46 +0000
ROA not before:           Thu 16 Jul 2026 14:18:46 +0000
ROA not after:            Wed 14 Oct 2026 14:18:46 +0000
asID:                     13445
IP address blocks:        144.196.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:c8:49:1c:b5:4f:13:59:b0:52:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 16 14:18:46 2026 GMT
            Not After : Oct 14 14:18:46 2026 GMT
        Subject: CN=8002b511-a3dc-402d-b280-abf78b17bdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:3e:7a:5f:d0:33:6b:0f:70:8f:8f:7f:8e:
                    d8:ca:d3:e3:42:60:88:ea:30:f7:b6:b7:e5:79:5f:
                    85:b1:c6:c3:19:fd:6e:0a:98:f8:55:f6:0a:2e:5a:
                    fc:d8:3c:26:aa:29:4c:5e:0b:37:a3:67:f7:19:30:
                    5e:f6:fd:10:b1:af:b0:76:95:03:19:06:9d:ea:ed:
                    99:af:b1:a6:91:34:30:00:ef:57:8e:26:21:74:93:
                    75:fb:30:ca:f1:35:5b:e7:2a:2d:a4:47:94:8e:0d:
                    ab:e9:12:99:73:19:35:39:14:cc:ca:73:ca:7e:e5:
                    15:94:71:84:ae:e5:3a:f1:af:1b:25:44:b5:71:5c:
                    46:92:7c:df:29:b3:50:2c:d0:b1:9f:dd:12:c7:73:
                    b6:3f:65:67:8f:b3:37:50:d7:91:fa:da:e1:08:5a:
                    26:80:99:c7:53:64:53:2b:53:17:62:33:cb:8b:19:
                    bf:48:52:8e:17:c9:2e:25:60:20:4e:3c:15:0d:78:
                    ac:46:39:3b:39:12:ad:fe:b8:d4:78:f3:3d:4d:c3:
                    fc:90:03:cb:95:97:36:fd:ce:68:fe:af:b0:4f:62:
                    00:86:51:fa:b1:5d:fb:f8:f4:cd:91:23:30:4c:d9:
                    13:c5:fb:9e:07:7f:54:2b:b4:a7:0d:cc:16:f3:9f:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B7:DB:CD:5B:DC:68:E1:C4:06:F8:BE:1F:1A:E4:E3:F6:40:E3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a0f2da57-8878-3284-b441-405e28e822c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:74:45:d5:2b:20:68:52:0d:b4:ef:0f:e9:46:72:f7:2b:
         47:9b:f6:35:ac:c9:c4:8c:7c:d9:f2:72:2c:da:ea:07:19:81:
         54:54:94:5a:9e:16:c4:11:73:ca:3a:cc:eb:5d:cf:e9:a0:30:
         ec:f9:b7:e0:0f:4c:3f:93:4c:75:94:61:84:31:6d:48:da:ab:
         91:4c:2c:22:42:b6:d0:d2:38:a2:7c:f4:de:dd:ff:7a:d6:7c:
         a8:8f:c4:ba:eb:ea:b3:69:ad:3b:bf:43:a0:82:8c:c5:c6:05:
         80:77:8c:36:98:16:e3:20:e6:7f:f6:03:62:97:4a:8f:21:63:
         95:98:42:2d:54:a1:4e:d2:a3:03:41:db:da:f4:ed:05:a4:4f:
         db:13:d3:9d:bf:2d:bb:bc:d1:ae:e5:09:67:2b:e4:d9:b8:34:
         e3:52:77:9f:6f:5d:4a:44:cf:a9:ca:bc:02:c7:a6:2d:90:47:
         17:4d:ad:7e:47:64:6c:9f:fa:dc:81:d9:a4:06:bc:58:61:53:
         52:5b:66:e3:92:1c:6b:a4:10:99:a1:a7:fd:eb:0a:b9:17:d1:
         8d:77:c7:9d:7c:91:f0:62:5d:54:54:4f:59:09:b5:3b:89:ea:
         5a:7f:a1:dd:f9:02:c0:13:98:00:04:df:85:e2:b6:0a:76:12:
         c1:2c:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 01:15:06 2026 by rpki-client