Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
File:                     5f596c8b-f66f-38b2-bbfa-5462502cea09.roa (raw, json)
Hash identifier:          WupaAjNvPt5VUmAgiQINcsTPjZGYF1MZbANdfXLsy90=
Subject key identifier:   24:31:8F:E2:16:8E:30:18:7D:DA:C0:BA:F6:7E:8A:14:42:CF:51:E6
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F49765D5923411B8102095540
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13445
IP address blocks:        144.196.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:5d:59:23:41:1b:81:02:09:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a8117aa8-f0e2-45c8-9f86-28a402885505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:7d:66:6d:92:64:3e:fe:ce:c1:07:25:10:
                    05:c0:8b:c6:9a:75:99:5f:ee:b9:5f:8f:66:2e:42:
                    23:c5:e5:99:1c:ef:17:2a:ca:7f:9d:16:37:e9:52:
                    57:6e:b6:aa:d9:5a:f4:b5:5b:bb:1f:0f:a1:89:2d:
                    b7:7f:09:53:f1:38:66:bb:ed:d5:4e:ef:13:d6:bc:
                    e8:5c:4e:a8:65:04:4a:8f:9f:57:d5:7d:22:16:be:
                    b6:e9:83:89:f4:17:73:ab:b6:f9:e6:9e:67:83:3a:
                    dd:a1:49:70:c2:52:1d:1a:ff:51:a1:a5:cb:b0:91:
                    31:f8:44:57:67:f1:ca:22:93:87:7b:9f:4b:80:7d:
                    f5:99:69:26:d1:76:0a:8e:3a:18:71:c9:35:05:5f:
                    23:66:f9:0c:66:e4:57:f2:1c:1c:40:61:1d:73:26:
                    5f:d0:c9:b9:20:28:02:0f:31:44:cf:e9:53:a2:76:
                    8f:13:f8:2c:d5:79:1c:c7:0b:8d:7c:7a:6a:a2:d0:
                    09:6f:89:26:57:94:59:fe:7c:24:1f:41:e2:65:e4:
                    d2:bf:b8:f2:88:92:fe:b2:a3:d1:aa:b2:2c:bd:61:
                    81:bc:b8:48:4a:17:fa:94:2f:21:7d:96:84:0d:75:
                    64:40:62:6f:ab:30:42:2e:2f:b4:ee:11:ba:71:7a:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:31:8F:E2:16:8E:30:18:7D:DA:C0:BA:F6:7E:8A:14:42:CF:51:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5f596c8b-f66f-38b2-bbfa-5462502cea09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:54:a8:dc:ab:db:7c:f8:3a:f2:fd:ea:77:60:99:7b:8d:
         c0:18:e7:dd:bc:0d:60:a0:4b:78:49:d9:26:6f:2b:ac:d9:3a:
         3d:37:be:ff:86:15:73:04:11:3e:1c:51:8a:5c:74:ce:ad:0b:
         76:f2:a1:4e:6c:47:fd:7d:5c:b6:6e:76:01:31:2f:39:15:1c:
         b8:34:12:e1:1a:cb:bc:b5:f6:13:ff:dd:bd:85:9f:3c:f8:7b:
         e5:60:f6:70:52:a5:86:b5:7d:11:41:c6:c1:a3:f9:e4:60:50:
         39:f7:1d:58:10:ae:f4:55:94:ea:ec:96:fb:00:d6:0e:0e:8e:
         de:e3:5d:06:69:99:b9:ed:f3:8e:58:fb:c1:b7:66:ab:64:df:
         a2:5b:88:0e:5d:f5:f4:1e:16:43:0f:51:d7:bc:18:b4:d1:46:
         b8:5e:7b:fc:a4:dd:b3:39:aa:08:b9:d8:3d:0d:80:9a:41:fe:
         4a:2e:6d:17:7f:c3:8c:41:99:88:97:71:c4:18:dd:86:ad:8c:
         9c:41:63:d9:b8:4f:55:2a:d7:77:5a:81:ed:bb:5e:6f:19:f4:
         06:c2:89:96:e3:fe:ff:b8:c8:da:ab:06:d8:1f:d7:6d:e3:7f:
         12:71:67:13:c2:5b:2e:cf:c0:fd:5b:41:46:c7:8e:43:80:52:
         21:07:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:21 2026 by rpki-client