Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
File:                     78b3d770-5faa-388a-a628-512ab2ceaa32.roa (raw, json)
Hash identifier:          NlTKIKFqyWwdTouA84QngGJKabRgM/h3nTv1kqTw7Vc=
Subject key identifier:   6F:9B:5E:60:28:D5:2A:AE:42:73:E9:F3:67:3E:F5:F5:B2:1F:E6:84
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584AE5C688C5A8F40DC93D377CC0
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     2914
IP address blocks:        142.147.128.0/22 maxlen: 22
                          142.147.132.0/23 maxlen: 23
                          142.147.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:88:c5:a8:f4:0d:c9:3d:37:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=dd02be05-742e-481a-b68a-03784af30327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6e:57:cb:08:54:e9:96:56:ad:a6:0f:1c:b9:
                    b8:e9:3e:08:4b:af:4c:f7:f1:1c:f0:72:de:1e:5f:
                    17:75:89:9e:c3:22:6e:c2:5c:2e:ab:97:e9:ce:17:
                    1b:1b:81:8d:a3:57:7e:d0:c8:cb:44:37:1a:92:44:
                    c3:95:c8:98:ed:e1:ee:c7:68:b2:5c:5f:a1:3c:b9:
                    ce:e3:bd:b0:f6:fd:b7:e3:3f:99:32:d3:fc:d6:cd:
                    f5:b1:f2:90:95:df:8c:35:51:3e:6d:7c:fa:3a:10:
                    d3:6c:42:35:6d:30:84:22:0e:ad:2b:de:34:5d:11:
                    8f:2d:e0:5d:6e:0d:24:5c:e2:19:d4:8d:1c:9b:76:
                    6d:fa:22:0f:7a:e0:30:9d:42:2f:e1:b2:4e:17:33:
                    11:8d:b7:e1:c1:14:f8:54:5c:15:2d:e8:dd:1f:68:
                    fd:0a:d0:7e:81:a2:ab:f8:97:7d:67:9c:64:0a:77:
                    34:c7:b0:63:62:e0:d2:a2:24:80:fe:d5:27:e0:62:
                    15:8f:8b:42:d6:fa:99:5d:fe:4b:2b:e3:96:d8:dd:
                    1e:cc:fa:fc:5d:04:37:2a:af:3f:74:1e:aa:6d:c9:
                    d8:30:3a:26:1f:fd:23:3a:86:98:10:c0:51:ed:04:
                    a9:f6:82:4e:25:75:cf:f4:8f:7f:99:3d:e2:d7:2c:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:5E:60:28:D5:2A:AE:42:73:E9:F3:67:3E:F5:F5:B2:1F:E6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/78b3d770-5faa-388a-a628-512ab2ceaa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.128.0-142.147.133.255
                  142.147.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:85:a3:04:75:6d:3b:cd:b8:36:c6:10:e7:d6:b9:15:23:d9:
         92:e3:85:98:5d:cd:ef:fd:2e:b1:23:c3:49:43:47:6a:9b:4c:
         25:3b:1b:81:a1:c4:be:67:30:c0:95:60:7b:6b:76:d4:b3:a2:
         da:f5:fb:df:46:98:9d:47:2f:99:a2:e0:4b:d9:60:a6:4f:1f:
         e6:77:a5:0a:03:e7:9a:8d:20:ce:74:07:4b:07:6d:5b:0c:dd:
         0c:1a:f5:fa:3d:fb:04:31:75:db:f5:3e:e7:34:a5:a0:d0:c9:
         b0:7e:f4:e6:18:60:ab:7d:71:55:e2:95:3e:74:26:19:22:89:
         47:2c:ae:cc:5f:3b:ab:93:d6:ff:1b:2b:58:ce:59:51:0f:eb:
         55:23:f9:db:a7:66:80:e1:a7:6c:95:41:0b:92:5a:da:ea:56:
         a2:90:e1:d7:f3:7d:05:31:26:8d:05:0c:04:4c:f7:81:5a:43:
         02:20:86:7c:0a:96:c8:65:65:8b:03:77:ac:41:e1:6e:6f:df:
         32:d2:bb:9b:77:02:f6:14:eb:52:24:56:a3:ca:88:2f:a4:68:
         8d:47:19:3d:1f:56:10:f1:e4:72:2b:8c:39:af:cc:1e:b1:7b:
         8f:db:ea:6f:18:29:27:ff:36:cc:6c:fc:33:da:e6:a9:12:96:
         50:8c:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:47 2025 by rpki-client