Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/78410932-ef9a-3d77-a0de-bf49d4e9e668.roa
File:                     78410932-ef9a-3d77-a0de-bf49d4e9e668.roa (raw, json)
Hash identifier:          8YZTZr/sBYcHnfKMXRhEKMBUT8UCNucefD7Pv+TJ/HE=
Subject key identifier:   F4:6A:E6:89:44:8F:19:54:46:A3:6D:F5:02:CD:13:34:D2:1B:2A:04
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584B5141F0295DBC7A0376AA9120
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/78410932-ef9a-3d77-a0de-bf49d4e9e668.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7057
IP address blocks:        15.195.0.0/16 maxlen: 24
                          15.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f0:29:5d:bc:7a:03:76:aa:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=185e7613-efa5-4dba-8a1d-081f7d592f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:4e:5e:46:2e:78:e3:b7:e2:fb:95:77:e9:
                    84:c0:84:0a:cb:eb:80:92:bc:71:43:50:c1:bd:c3:
                    7f:97:77:3b:8c:02:95:ad:a4:48:53:4b:e9:1a:f2:
                    3a:e8:28:c1:0e:ad:94:71:3e:d1:bb:d6:d4:53:a9:
                    75:11:61:37:78:41:32:e1:5e:61:5b:8d:31:98:d7:
                    95:bc:f8:07:07:2f:fe:81:10:d6:3c:7b:19:76:b5:
                    ba:2c:ab:12:a0:a3:9f:3c:9b:30:51:f6:65:28:ba:
                    ee:04:45:0a:db:6a:d6:22:32:b2:fa:3e:56:5c:ca:
                    7a:bb:aa:da:32:9f:a5:8b:8e:51:3e:ec:e6:aa:d6:
                    e5:7f:3a:9d:bc:44:20:fc:74:0d:a6:9e:4b:25:1c:
                    32:d9:55:e8:7f:63:8f:b4:99:fb:aa:f4:68:5a:0b:
                    31:d9:ac:d5:b8:93:d2:93:94:67:6a:48:fa:eb:ea:
                    00:8f:17:2f:85:30:29:f9:f4:d6:1a:38:9b:82:b3:
                    69:72:5c:56:95:55:f8:da:75:8e:c7:fa:90:d0:3d:
                    d4:b7:04:c9:cb:a9:e4:6e:a6:14:e2:03:c6:5d:8c:
                    35:7d:2f:26:08:d3:1c:16:bb:f9:a1:0c:b4:8f:c7:
                    19:d8:c3:0f:2f:a5:9b:50:66:53:7c:b5:ee:8c:54:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:E6:89:44:8F:19:54:46:A3:6D:F5:02:CD:13:34:D2:1B:2A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/78410932-ef9a-3d77-a0de-bf49d4e9e668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.195.0.0/16
                  15.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:a2:bf:65:d7:84:52:f1:11:f7:b5:73:0a:e4:0a:ec:91:
         f6:ad:7e:72:98:e8:a9:27:d1:0d:d2:cd:3e:c0:c6:3f:7b:1d:
         47:ac:9f:db:a4:a1:98:d2:31:68:12:1e:49:a3:37:7e:66:14:
         2f:04:08:c8:b9:b1:10:c0:50:e7:d1:bb:88:82:5e:65:c2:e0:
         48:a0:20:e7:c5:2e:4b:04:29:4f:02:1f:11:af:02:10:9e:0d:
         5f:82:d7:c6:6d:1d:69:27:9a:03:3d:30:ad:f4:fc:b4:6c:af:
         36:a8:c8:97:50:fc:b2:c0:49:1b:fe:88:65:ad:a9:c9:83:2d:
         c9:59:85:aa:30:98:65:0e:37:20:30:19:bd:1b:e1:6c:88:85:
         92:58:dd:60:fc:62:ae:07:5b:c8:dc:d8:7c:b5:3b:cd:1c:ac:
         3f:1d:5f:99:6e:13:ef:83:e4:7e:9c:c3:cd:78:dd:df:2f:42:
         a1:04:a7:6e:c5:2f:8d:35:11:34:38:a3:f0:c7:db:8e:05:b1:
         e4:bd:85:7e:02:67:76:c3:1b:25:9e:de:51:6b:1c:2a:15:a5:
         cb:29:65:4e:79:ca:08:ef:2f:e5:cc:72:18:fe:3d:7c:15:d7:
         7e:28:a2:14:3e:3f:6e:a2:7a:72:35:b0:3a:6c:4c:4c:34:07:
         3a:aa:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:17 2025 by rpki-client