Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa
File:                     87672430-cbec-3e81-a0dc-97dcc656fa58.roa (raw, json)
Hash identifier:          jRtRKJZ5Jv+SbM3wA9EhgOZFOhElI2WycmjgXFJQMz4=
Subject key identifier:   09:0F:E7:2D:69:6B:0B:34:ED:06:59:1A:FE:42:D3:CE:BA:EF:ED:45
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584EB2B1AA3BBEF050CBF6A3D680
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396253
IP address blocks:        163.120.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:aa:3b:be:f0:50:cb:f6:a3:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=80facc51-744f-429f-95de-4a14885ba363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:61:53:dc:cf:21:86:f0:4a:93:e9:ee:e7:
                    d4:5a:e4:b4:55:2b:47:75:b5:f1:ee:d6:47:97:bb:
                    d7:23:ce:52:1a:b0:5f:e5:1c:72:ce:08:10:b6:4a:
                    3b:dc:d3:09:88:a1:ec:63:9d:9c:04:8c:08:38:83:
                    98:03:e2:65:4c:29:9f:36:39:a6:5d:b4:b8:93:4b:
                    7d:d0:f6:c9:3a:a9:9a:42:18:da:54:2f:3f:7c:9a:
                    f6:77:a0:81:6f:a3:28:eb:69:af:b3:52:b9:6d:5a:
                    3a:50:7a:18:66:d5:f5:16:14:54:1f:e7:d6:da:7e:
                    9a:f6:2b:b4:01:14:c7:44:7a:34:a4:06:a6:ca:27:
                    1e:7e:58:32:68:9e:5c:96:0d:2c:d3:c2:d8:0f:fd:
                    63:14:3a:e3:d2:77:db:26:68:1b:e2:72:e7:70:63:
                    00:42:63:90:d4:73:21:d8:87:06:ab:84:8d:67:5a:
                    c6:bb:46:44:25:be:b2:62:27:ed:ec:49:05:71:cf:
                    10:66:2d:99:df:24:8e:4a:c1:cc:da:05:07:e7:1f:
                    8e:98:1c:e0:fd:b8:e5:7a:23:0e:96:75:62:e5:be:
                    8d:9a:e0:3c:29:3f:9e:6d:bd:76:87:8a:de:ad:05:
                    89:57:bf:a8:df:52:60:e1:19:62:09:1d:c0:99:7b:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:E7:2D:69:6B:0B:34:ED:06:59:1A:FE:42:D3:CE:BA:EF:ED:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:f0:99:bf:77:6b:bb:49:4c:c2:b5:01:f4:8a:d5:15:69:
         15:75:76:6a:e2:41:be:ce:c3:b5:ba:01:f9:b3:95:ab:f4:55:
         99:f6:f5:52:3e:54:16:56:a6:35:c6:31:71:7e:2d:10:74:c3:
         35:88:cd:b9:fa:c7:f6:9d:b4:22:62:84:d3:02:4d:cc:cc:8c:
         7d:bb:be:89:64:f5:46:f7:52:4b:ad:77:1f:7e:14:eb:8a:35:
         1d:79:ac:13:83:5a:03:27:23:b3:f6:8f:be:89:af:5c:70:e2:
         1a:46:04:a3:7b:23:82:5d:cb:bf:f1:85:c7:e5:ba:dd:5f:5d:
         a1:c7:69:d5:cb:23:20:3d:5d:d9:8a:02:ee:e3:97:fb:e4:f2:
         4c:69:3d:3e:51:51:1e:aa:1f:a6:48:76:6f:3f:e4:f2:f3:07:
         6a:c6:18:01:3f:56:33:19:34:10:ef:81:36:a5:7e:fb:ad:3d:
         51:1d:5f:18:5c:da:04:f8:5c:1c:b1:c6:90:97:c8:65:73:7d:
         34:80:c7:16:a8:ed:75:fc:dc:09:69:91:77:b7:e9:8e:f4:79:
         4a:1e:3d:f7:06:b7:cd:27:af:77:54:ce:8d:11:bc:58:43:35:
         e1:b7:33:6b:79:95:da:cd:03:94:28:57:91:56:29:d1:57:fb:
         3e:22:ed:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysao7vvBQy/aj1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
ODBmYWNjNTEtNzQ0Zi00MjlmLTk1ZGUtNGExNDg4NWJhMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv5hU9zPIYbwSpPp7ufUWuS0VStHdbXx7tZH
l7vXI85SGrBf5RxyzggQtko73NMJiKHsY52cBIwIOIOYA+JlTCmfNjmmXbS4k0t9
0PbJOqmaQhjaVC8/fJr2d6CBb6Mo62mvs1K5bVo6UHoYZtX1FhRUH+fW2n6a9iu0
ARTHRHo0pAamyiceflgyaJ5clg0s08LYD/1jFDrj0nfbJmgb4nLncGMAQmOQ1HMh
2IcGq4SNZ1rGu0ZEJb6yYift7EkFcc8QZi2Z3ySOSsHM2gUH5x+OmBzg/bjleiMO
lnVi5b6NmuA8KT+ebb12h4rerQWJV7+o31Jg4RliCR3AmXuNxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkP5y1paws07QZZGv5C08667+1FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODc2NzI0MzAtY2JlYy0z
ZTgxLWEwZGMtOTdkY2M2NTZmYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo3hAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEH+8Jm/d2u7SUzCtQH0itUVaRV1dmriQb7Ow7W6Afmzlav0VZn29VI+
VBZWpjXGMXF+LRB0wzWIzbn6x/adtCJihNMCTczMjH27volk9Ub3Ukutdx9+FOuK
NR15rBODWgMnI7P2j76Jr1xw4hpGBKN7I4Jdy7/xhcflut1fXaHHadXLIyA9XdmK
Au7jl/vk8kxpPT5RUR6qH6ZIdm8/5PLzB2rGGAE/VjMZNBDvgTalfvutPVEdXxhc
2gT4XByxxpCXyGVzfTSAxxao7XX83AlpkXe36Y70eUoePfcGt80nr3dUzo0RvFhD
NeG3M2t5ldrNA5QoV5FWKdFX+z4i7QQ=
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:38 2026 by rpki-client