Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
File:                     7e41608c-f4a3-38f3-a7b4-736ec6086365.roa (raw, json)
Hash identifier:          rvGSA2WWhbSpALrSdsXYxqUws3ANxSty6aQOaYt3f0k=
Subject key identifier:   77:86:24:F9:23:03:AC:73:23:89:F6:EE:EB:58:B0:73:29:2E:06:30
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584AC9DB9FCC1ABE5FBA84DE5880
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        199.64.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9f:cc:1a:be:5f:ba:84:de:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5dd86b31-b171-45e3-88ab-23b50772cb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:a0:8a:f1:d8:89:f3:4a:bb:1f:41:1a:82:
                    72:64:58:0b:29:12:97:50:8a:1f:93:a2:96:27:aa:
                    3a:2a:f0:d1:e5:5f:0f:f0:30:16:05:6f:83:97:d5:
                    87:3b:63:3c:30:2f:37:06:be:48:b1:de:be:e9:ba:
                    25:17:49:28:51:3f:62:5a:61:cb:e4:42:f3:76:d2:
                    40:24:0c:cd:79:2d:56:77:c7:28:2e:16:c2:70:81:
                    44:c4:d0:68:b4:d6:b0:b0:c4:75:87:e0:f6:e1:4a:
                    db:40:78:08:3f:2c:e1:b4:f0:d0:1c:9c:24:81:9e:
                    c3:cf:24:4f:b6:39:71:48:09:91:75:7e:8f:88:ed:
                    90:54:c9:35:af:c3:33:8d:2b:0e:58:34:2f:a0:a3:
                    25:1e:08:e5:ed:0a:b6:0f:51:cf:96:f3:e2:4b:a9:
                    69:9b:4a:a6:10:f8:ef:40:63:4b:9f:64:4f:d6:d8:
                    e3:fa:79:df:68:b3:03:55:5c:6a:2b:04:5f:be:06:
                    39:f8:f0:fa:9a:9a:36:06:4c:3d:ea:9f:cd:08:0c:
                    36:18:05:8c:1a:0e:53:ea:8f:5d:c9:f4:5d:24:6b:
                    74:04:35:79:13:67:9c:0f:b1:be:e1:78:98:17:e2:
                    a3:9c:1d:09:47:69:12:8a:6f:74:7c:52:35:f2:a0:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:24:F9:23:03:AC:73:23:89:F6:EE:EB:58:B0:73:29:2E:06:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/7e41608c-f4a3-38f3-a7b4-736ec6086365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:f2:39:1a:94:c5:1b:d6:9b:58:77:1b:62:e8:63:72:fc:
         c9:25:bd:97:a0:72:41:c5:99:9e:88:fd:4e:5a:dd:60:a7:61:
         3e:f3:e2:a6:f2:75:0a:39:44:55:93:9a:9b:1e:eb:7b:41:79:
         ba:9a:42:72:e8:2b:2c:0f:01:8c:94:53:ab:47:e6:6f:6b:d1:
         38:71:ae:6c:79:2a:29:f1:eb:38:06:05:e2:20:db:50:27:9b:
         45:46:98:fe:f2:71:53:2e:5f:04:32:a8:ee:11:50:db:53:15:
         ae:93:5a:cd:74:9c:1b:c0:8e:a5:1b:21:a3:b8:f5:58:ce:ba:
         16:21:b9:1a:ad:2e:c0:13:9e:16:4f:32:c7:1f:b9:72:7d:02:
         fd:47:ee:2a:ad:f6:5a:b2:3b:f8:db:5f:a5:60:e6:0d:5f:3d:
         5f:aa:9c:a4:75:e0:ac:3d:0e:82:64:f8:88:e0:5c:0d:9b:90:
         5d:24:5d:fe:75:2e:7d:65:74:6e:1f:01:6c:39:49:37:f9:3a:
         a9:10:ae:3a:8b:f2:67:95:91:8d:c3:45:cc:cc:bf:ed:6b:c3:
         78:b7:dc:db:7e:74:ae:96:a5:9f:be:1e:74:2e:39:2a:22:e1:
         9f:14:fd:02:4f:b2:cc:0d:d5:51:0c:f5:41:e2:f2:3d:d4:53:
         a2:d7:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:16:43 2025 by rpki-client