Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/5a4e6b6d-9e1c-3217-8f79-4553159f0bfb.roa
File:                     5a4e6b6d-9e1c-3217-8f79-4553159f0bfb.roa (raw, json)
Hash identifier:          NKJhuLv4r4JpFzLaZfh4bmgktahhxw85Owt9SGuXgz4=
Subject key identifier:   B4:68:0B:E7:7C:8D:22:43:61:95:12:76:4F:FE:13:82:F7:5A:B0:87
Certificate issuer:       /CN=78a35d59-5267-4ec6-965e-2346bd05cddd
Certificate serial:       010D0C9F4328584B0316947F43FF0E23D1819080
Authority key identifier: 91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/5a4e6b6d-9e1c-3217-8f79-4553159f0bfb.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     10750
IP address blocks:        132.147.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:94:7f:43:ff:0e:23:d1:81:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a35d59-5267-4ec6-965e-2346bd05cddd
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=57c08ea8-ba9e-432c-b8d8-d9d4280b1d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:6d:d3:eb:9d:ea:51:db:fe:64:36:a7:b7:
                    3f:f0:ba:fc:76:28:4d:a9:b4:4b:52:b4:47:d1:b5:
                    7a:97:b2:96:d2:8d:e1:8d:f0:00:2e:42:4b:ac:d1:
                    a5:44:6d:1a:ac:71:d1:8b:91:c4:f9:5c:2c:ee:fa:
                    21:6f:6f:90:94:59:04:99:bb:db:b9:e8:76:46:bf:
                    16:ab:de:85:08:3d:1a:06:f1:c9:7c:fc:35:9a:f6:
                    66:5a:ac:72:08:d1:27:6c:9b:15:bb:e2:c5:61:91:
                    30:9f:23:63:c1:ca:ca:79:0c:ca:98:4b:84:7c:71:
                    b4:00:85:1a:85:26:31:c0:56:d0:77:cb:d9:64:36:
                    20:49:ee:7b:e5:fd:e3:eb:4d:23:3d:e7:a0:b1:07:
                    0c:54:06:91:dd:3d:1d:3f:de:0b:cd:99:32:cc:01:
                    1b:38:0a:67:9f:64:4d:96:cc:24:a2:d1:a4:49:3a:
                    95:3d:26:8c:75:52:71:b9:a0:e2:76:99:84:1c:0d:
                    76:5a:17:64:e7:df:f7:a0:7b:aa:11:13:cb:24:40:
                    85:05:1f:fa:a9:4d:e2:b1:85:23:26:ae:0f:a5:7b:
                    b1:9c:e2:6e:d3:6b:4f:b5:3c:91:a6:35:4e:c6:8d:
                    06:0a:89:6a:c0:c6:04:9a:06:4f:1b:85:09:c8:73:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:68:0B:E7:7C:8D:22:43:61:95:12:76:4F:FE:13:82:F7:5A:B0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/5a4e6b6d-9e1c-3217-8f79-4553159f0bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd/78a35d59-5267-4ec6-965e-2346bd05cddd.crl

            X509v3 Authority Key Identifier:
                keyid:91:20:3B:BB:DC:6B:AC:2A:E6:DF:16:CC:27:B4:4C:31:44:09:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78a35d59-5267-4ec6-965e-2346bd05cddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.147.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:03:2d:20:1b:5a:7b:35:17:7e:5b:34:51:43:dc:c9:09:
         35:c2:eb:79:df:a1:ba:63:6d:6c:4a:52:bb:c1:9b:9d:24:cf:
         d3:d3:70:35:72:41:94:e1:a4:aa:0f:30:41:94:ff:87:93:8c:
         15:8d:d5:84:73:41:d9:96:76:3f:3b:be:ad:05:23:60:a0:b3:
         02:27:e9:c7:b8:79:c4:9d:09:78:9a:6c:03:49:90:42:67:22:
         73:0c:0f:c5:59:d5:cb:e8:13:a5:b2:fd:42:30:63:58:f6:e6:
         c6:71:64:d2:47:4f:52:d9:ed:ec:14:83:68:f8:a0:4c:ad:0a:
         3c:41:2a:18:11:04:61:9e:78:47:6c:a8:f7:74:cf:a4:bd:79:
         a4:6d:e0:47:6e:ae:b0:29:ef:91:d6:9f:99:53:7f:ed:85:9a:
         1b:9e:2b:38:b0:02:2d:16:64:60:34:73:16:1c:32:2b:c8:10:
         dc:73:29:db:f4:87:6f:05:2c:8d:71:a0:80:c2:cd:39:0b:83:
         59:e9:0e:b8:8d:31:7e:68:05:3f:7e:95:1d:95:19:61:3a:4c:
         84:92:02:a8:6f:ce:83:b9:3c:d5:b0:b2:b6:65:c2:bc:2b:ea:
         f6:a1:6f:bf:f8:ad:c8:f4:21:26:a9:e8:8a:6f:8a:fe:22:dc:
         cf:7c:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:00 2025 by rpki-client