Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa
File:                     78b07b79-8312-3873-9072-b4e2f9b3b227.roa (raw, json)
Hash identifier:          YwQlE+KzV1Vf29G9xtgtgHeKFN1CxsFnDxu8Oa2H0+U=
Subject key identifier:   7A:A7:31:0A:47:58:6D:46:74:12:5E:23:11:F9:F2:A6:81:93:5C:0E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B41E731F19C533E95F66CE180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     396612
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:31:f1:9c:53:3e:95:f6:6c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=4d5e7ac4-4a81-4a4b-9255-595ce1286f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:89:8d:e1:db:f4:2f:82:ba:82:b2:96:c2:
                    bc:83:12:c7:7d:3b:03:e8:2e:75:6b:9e:36:fa:6c:
                    0c:d7:04:60:3d:ee:92:c5:f4:19:0a:1a:cc:08:e0:
                    11:47:34:e8:1f:d7:f1:5d:dd:b5:24:65:8f:49:6d:
                    61:b8:b5:0e:c0:8c:36:65:6e:d5:64:7a:a2:96:15:
                    66:41:25:de:e6:4d:23:6d:fc:13:9b:79:86:ce:ea:
                    a7:47:1f:5a:96:62:45:1a:3f:b7:8c:8f:c7:71:aa:
                    09:70:5d:d0:92:b5:c6:14:39:90:00:69:09:35:9c:
                    df:00:63:ae:62:78:aa:cf:34:d8:77:ff:cf:5a:ba:
                    38:b0:7d:35:50:7f:b9:cd:8f:6d:f5:7e:ee:65:f5:
                    43:0a:8b:34:b7:97:63:03:52:26:48:f9:9e:cb:34:
                    36:e2:61:cd:fa:76:9e:d3:7c:28:37:e0:ed:bc:6a:
                    5d:2a:dc:22:64:68:76:e2:8c:05:c5:25:e3:d2:87:
                    f0:3c:7b:c2:00:2c:af:69:d0:24:d3:d8:76:e0:81:
                    1e:2e:bf:5e:26:e5:67:50:94:ae:be:71:ab:d1:7b:
                    60:cf:56:d8:16:b4:f0:5d:be:26:32:2c:e7:b4:77:
                    d7:1c:09:7b:18:55:fb:81:13:4c:1e:c4:e1:db:e7:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:31:0A:47:58:6D:46:74:12:5E:23:11:F9:F2:A6:81:93:5C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:43:ea:a7:24:28:50:60:85:4c:f2:d4:24:65:51:2a:8a:
         08:ef:77:cb:55:36:10:c0:62:3a:2a:e2:20:47:3e:b9:42:f1:
         23:11:10:6a:d2:64:c4:7d:b8:1e:c3:b7:ba:4a:9d:e5:2c:2b:
         a8:c7:c6:86:20:55:26:52:48:4a:a6:34:4b:26:42:fc:f4:2a:
         ff:19:41:71:7c:90:ce:de:48:96:24:dd:b1:ac:83:cd:8c:b8:
         9b:54:25:13:4c:69:40:8b:d9:11:46:a7:5e:94:e4:d8:ab:8c:
         2a:67:db:a6:de:8b:f0:53:87:56:45:24:55:c1:0c:8e:d3:84:
         c6:81:98:c0:67:b2:d2:5c:00:e8:16:c3:f4:64:4d:3c:06:47:
         bd:6d:38:32:3c:62:ed:f8:a7:cc:5b:76:c0:4c:f0:60:ae:b9:
         f1:db:fb:e5:d9:b7:98:5c:3a:2a:5b:9e:1c:40:45:cc:d6:22:
         f8:c1:31:72:e9:d5:d5:ec:e0:02:e2:5c:57:cd:2f:a5:a2:b3:
         81:13:27:da:4c:13:7b:0c:12:3d:3b:e8:2d:0a:93:ea:54:35:
         dc:34:dd:25:d0:62:ee:6d:87:fa:d0:d5:42:16:53:a3:1b:1a:
         3b:63:2a:64:01:72:9d:cb:c6:5b:82:42:62:df:cc:01:cd:35:
         ab:ef:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:21 2025 by rpki-client