Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa
File:                     5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa (raw, json)
Hash identifier:          Ltt0iQcg5BVGD3D1VQ2ODWwDijpPTrbkjKZ9QxXIJiw=
Subject key identifier:   F7:C3:B4:B8:16:1F:87:A9:00:45:33:F5:38:69:44:A3:3E:D7:82:85
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584AD3A11611CD4BB03C6D976200
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     22925
IP address blocks:        208.118.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:16:11:cd:4b:b0:3c:6d:97:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=74592068-444a-4ef4-8a6f-16604602fd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:d1:42:8a:5b:1c:b6:17:90:70:d4:f8:36:
                    8b:a4:f6:51:10:a9:ec:fe:36:fb:cd:ee:43:48:88:
                    1a:03:0f:f2:cb:20:4d:f7:f5:39:e0:7b:1e:66:56:
                    47:c7:a5:96:4e:d0:3e:54:65:a5:55:36:46:bd:02:
                    b3:dc:b8:3c:f9:94:e9:91:63:dc:7b:ec:ae:02:11:
                    a5:0c:43:3a:6d:e1:8d:93:90:c3:ac:39:59:b5:5c:
                    af:db:e2:b5:97:e0:5a:99:73:cb:79:7f:46:0d:66:
                    37:38:28:8c:01:15:3d:29:2f:92:9c:8b:75:cb:d9:
                    71:fb:cd:e6:c3:dd:cd:98:42:33:13:f6:3d:c0:3e:
                    ee:cf:e0:d7:de:3a:3c:ea:6e:20:16:45:f0:65:90:
                    81:87:ee:46:99:2f:af:19:b5:55:fa:c6:cc:72:f9:
                    e4:0a:0e:56:4a:e1:80:87:43:e1:47:31:4b:01:b0:
                    bb:9c:19:a4:2b:2b:ea:c7:0a:2b:dd:50:69:7a:42:
                    87:10:67:f8:8e:92:12:c9:14:a1:aa:fc:6d:57:6b:
                    83:3e:48:eb:d1:d9:8f:58:68:fe:fa:b8:e5:49:ae:
                    78:61:e5:f3:c9:2b:74:44:44:ee:d8:ae:d1:e8:bc:
                    ff:a7:e6:74:9f:26:d2:64:f6:45:61:bd:1f:ef:80:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C3:B4:B8:16:1F:87:A9:00:45:33:F5:38:69:44:A3:3E:D7:82:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/5ec6f37d-2f2a-301a-bbcb-82b65ea635c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:06:b9:0b:40:f0:78:04:9e:42:16:2e:e7:92:cb:e1:74:21:
         83:2c:c2:9c:9b:f9:f9:b3:ab:03:9f:83:c6:4c:33:02:69:53:
         5d:c6:e4:b7:29:80:5c:c6:ef:1b:ac:da:26:c8:67:5b:7f:ae:
         32:d0:6a:93:74:ae:b9:b9:38:b0:06:bf:2d:58:c7:a6:37:ec:
         9d:51:b3:4f:f0:79:96:22:b1:0e:5f:43:da:e0:77:93:b2:6a:
         f2:81:51:00:73:86:17:94:0f:7f:ce:3c:59:41:5f:49:59:ea:
         67:89:5b:62:ac:c0:77:68:85:78:0e:47:b4:c7:82:94:b7:7d:
         64:e1:a8:b7:96:72:fe:ef:8f:9e:d1:4a:3e:5f:9a:db:29:e9:
         f2:40:d1:50:0e:04:63:71:25:77:82:37:0a:ca:7c:fc:88:c3:
         ba:57:fa:bb:4e:6b:13:02:f6:9f:38:d3:bd:65:11:1f:59:be:
         19:24:fa:8f:91:54:30:48:d9:bc:d3:96:1b:98:68:a2:5d:8e:
         be:6e:f9:54:fd:6f:12:8e:b2:6f:51:92:57:1c:7f:92:6e:68:
         27:c6:1d:24:29:72:8d:e1:1c:5d:3d:11:f3:7e:30:50:26:ce:
         81:69:73:29:6f:43:1e:4a:b9:00:e8:a1:76:73:18:a8:26:f0:
         99:fd:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:58 2025 by rpki-client