Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e05c87eb-c35f-348d-8897-2c55dbe036f3.roa
File:                     e05c87eb-c35f-348d-8897-2c55dbe036f3.roa (raw, json)
Hash identifier:          BRNfz/Lf+HiuIfVY1Y/kjzLYTkvPxjXGfBqtgy9xoo8=
Subject key identifier:   6F:0F:CA:66:29:C5:77:A8:6B:64:61:30:70:5C:83:0D:A6:93:2B:34
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E54B4A3732CC1D2840238CA80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e05c87eb-c35f-348d-8897-2c55dbe036f3.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     13445
IP address blocks:        144.196.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a3:73:2c:c1:d2:84:02:38:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=115da8b6-b50d-4b11-bb08-31177585799f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:f9:3d:f3:22:15:63:69:d6:55:8b:5d:e2:
                    99:09:ef:c8:65:26:1c:a1:83:be:80:72:23:cb:94:
                    95:51:cd:91:0b:9f:03:a7:a6:ee:49:24:a3:19:c2:
                    00:1c:45:7e:56:20:fa:cd:d3:07:26:94:52:6c:ff:
                    71:f5:be:b4:02:4d:1a:fd:c4:eb:dd:fb:7e:80:5b:
                    77:a0:57:92:fc:ba:10:51:01:fd:93:d1:6b:4d:d6:
                    fa:b8:58:53:a8:4e:66:02:3a:01:41:cc:83:6c:6a:
                    84:04:88:bf:f4:0b:81:90:c7:4a:de:18:96:6a:42:
                    c5:d4:53:62:0c:b2:f7:5b:b5:11:b5:c1:8b:29:5d:
                    24:50:8a:18:bb:5d:3c:e5:70:78:29:a3:48:2c:a9:
                    3c:64:2e:b0:16:59:e6:49:c5:f7:65:a0:11:e2:14:
                    1c:5c:1b:43:7d:ad:ce:40:12:a7:20:99:88:92:0d:
                    d6:9a:ba:d5:e4:c2:10:4c:15:84:8a:c2:69:0a:90:
                    15:84:92:5b:71:aa:23:e4:f6:74:a1:33:77:64:5a:
                    35:72:9d:71:f6:6e:4f:d9:20:61:e5:17:dc:35:b2:
                    10:c6:e0:33:53:08:e2:7b:1e:d7:8e:d5:9f:ce:2d:
                    93:e2:b9:5c:c7:98:6d:3e:7e:da:44:ca:24:34:21:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:CA:66:29:C5:77:A8:6B:64:61:30:70:5C:83:0D:A6:93:2B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e05c87eb-c35f-348d-8897-2c55dbe036f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:24:9e:c4:fd:60:57:90:b2:2b:67:d3:33:de:7c:de:a9:40:
         e0:6f:87:ac:85:e6:9a:c3:58:59:66:81:00:53:e9:85:fc:b7:
         27:b6:9b:3c:d5:8e:f6:70:a0:89:1b:90:ee:c5:0a:aa:5c:fd:
         31:ab:54:8e:60:8d:01:7c:89:a1:ed:05:2e:26:f2:d4:91:4f:
         fd:4c:7b:74:ba:3d:de:a6:fd:56:1d:e1:ca:0d:1f:42:6f:81:
         4d:66:c9:1f:34:1e:64:ae:cf:4e:cf:e2:0b:54:fc:75:6f:31:
         90:34:2e:40:5b:00:ee:16:b8:76:05:11:b1:bd:ee:18:5c:52:
         61:a7:99:14:db:90:ef:44:9b:5c:14:55:f8:40:06:c0:44:eb:
         e8:2f:ff:2b:d2:f5:a8:e0:46:0a:3a:0f:f8:bb:d9:3a:e7:c1:
         1c:ab:47:4d:da:a6:0d:0c:8b:4c:96:bf:d1:f0:93:8a:7c:b8:
         a0:b7:46:9f:b8:3d:84:30:7d:3f:25:ad:d1:91:c8:94:8a:d1:
         15:eb:37:9d:f3:cb:01:eb:d1:00:1c:28:b8:5d:58:07:b6:6d:
         54:71:61:73:42:92:f5:51:83:c5:74:e7:3c:c0:ef:3c:87:5a:
         70:70:a1:33:ea:8b:1f:80:9c:53:82:fb:9e:16:e4:bc:30:5f:
         65:85:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 01:16:00 2026 by rpki-client