Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa
File:                     984ed222-d765-3433-93a1-4d9be00bfd45.roa (raw, json)
Hash identifier:          50Zwt680A8rX3gsHzevPjyyi10xXkwUXx9Uypp2wpo0=
Subject key identifier:   DB:FB:9D:03:F9:7D:D8:A1:66:93:C5:E8:26:1A:A2:B7:93:59:D9:F7
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B8EACD0A30A147CB7337E1880
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        170.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d0:a3:0a:14:7c:b7:33:7e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=644eb8cf-1476-4a4e-b8e3-907d3571c976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:f7:cf:b6:d3:7b:23:74:12:dc:a8:09:e8:
                    f5:3c:e4:8d:c4:7b:de:d6:65:a7:c5:fa:70:63:cc:
                    b1:02:a6:1f:b4:0b:70:87:5c:9b:6a:d7:42:3e:fb:
                    ae:83:06:c4:e6:8a:b3:48:33:e7:e3:4a:d1:fd:09:
                    d3:2d:10:4c:fd:f1:36:d0:13:2b:d9:d2:b7:23:50:
                    ae:d1:43:b0:ec:00:6e:6d:2a:8a:bb:89:e2:51:f6:
                    c0:54:1e:ad:64:1c:46:13:a7:c0:76:5e:03:6e:12:
                    3b:8c:93:94:0e:b3:b3:a2:82:fd:5f:20:cd:0d:02:
                    6d:e8:e6:07:a0:2c:7c:28:91:d4:ee:69:c9:c6:a0:
                    31:47:a2:40:cf:fe:a7:ca:18:bc:9d:0a:6f:94:d2:
                    19:49:4c:7c:17:9d:08:4a:ee:c1:b0:36:39:be:61:
                    5f:ef:00:98:44:06:47:a8:48:ad:3a:62:4c:a8:d2:
                    73:6e:dc:88:19:5a:e3:49:3f:43:5b:a9:fe:89:4f:
                    5a:e9:42:3b:32:05:4a:73:32:84:f7:bc:c8:d1:92:
                    4b:ad:0c:af:be:3f:9c:cf:e1:d8:9d:f1:af:1a:b7:
                    f9:fd:78:0f:5d:51:49:3e:22:6f:98:1e:74:41:2e:
                    87:cb:d1:6c:db:7f:ba:cc:e2:a6:cf:3e:ae:d2:43:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FB:9D:03:F9:7D:D8:A1:66:93:C5:E8:26:1A:A2:B7:93:59:D9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:ad:e1:60:88:17:0b:8d:fe:39:bf:97:c9:03:f2:e4:42:
         ff:4d:f8:1a:f5:47:a1:fc:0d:93:df:28:7a:ac:76:85:17:35:
         bf:97:e2:48:24:73:b0:25:b5:03:57:01:c7:77:26:3a:03:12:
         9c:9c:56:0b:13:f3:da:90:bf:83:50:e2:87:03:80:50:1b:46:
         dd:71:3c:b3:82:81:65:88:0a:1a:cc:37:d7:e7:6d:ce:54:a7:
         f0:e7:e5:b4:a9:94:a7:0b:c2:02:43:12:2d:67:0b:ef:d1:6b:
         2d:46:40:41:56:95:40:6b:1b:0f:8b:9b:03:5f:96:3f:39:94:
         a1:a8:fb:e0:7b:b3:3c:3c:42:d4:fe:52:b3:78:66:e1:b5:cc:
         af:45:c9:28:7f:1d:94:fd:e7:2d:c5:76:ba:71:2f:47:65:dc:
         0f:1b:9b:d8:15:e0:8d:b4:43:6f:fc:86:5e:c5:46:f9:a4:31:
         7c:23:ab:33:af:f9:c2:e0:35:e2:c5:06:28:f9:f6:90:c3:34:
         ca:e8:86:8b:8c:bc:19:43:33:02:b8:98:60:13:53:3b:89:4b:
         c2:76:e7:6c:e6:30:b9:9b:ad:4f:fa:e6:95:a4:37:86:a2:c9:
         69:a0:ab:2d:a8:7e:76:da:4f:32:05:38:08:54:71:5f:65:6e:
         a6:7a:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:29 2025 by rpki-client