Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/079b826f-a7b4-3def-8c2c-84221e444a4d.roa
File:                     079b826f-a7b4-3def-8c2c-84221e444a4d.roa (raw, json)
Hash identifier:          7kZ5elnJMbUnMFPT4xAK6BcMTfaADW4ASyVa0G/1kL0=
Subject key identifier:   5D:39:D3:54:70:0D:CC:C6:C7:97:A8:A1:4F:3F:1E:09:E6:50:66:99
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EA788BD86A3591608A5C8B3C0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/079b826f-a7b4-3def-8c2c-84221e444a4d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13445
IP address blocks:        163.129.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:bd:86:a3:59:16:08:a5:c8:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5bccc230-c44b-440d-b5a6-15e711849613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:be:31:9a:65:bb:84:e4:1f:f9:93:e6:01:
                    68:7d:4d:3a:f8:4d:9f:35:4d:13:29:17:61:20:f0:
                    88:2d:17:38:8e:5f:29:51:e8:3b:e0:9a:d7:b4:d5:
                    f9:cf:08:e0:ea:15:b2:97:64:f5:fd:16:e5:a9:b5:
                    9f:ed:2d:74:ae:0e:67:b8:0e:4d:be:5a:24:69:86:
                    77:39:52:3c:78:64:d3:61:d4:3a:13:62:02:50:c3:
                    f4:7f:4e:b6:12:f3:ba:09:1d:04:0a:3c:5c:5a:90:
                    c3:26:a8:6e:de:ad:25:09:78:d2:db:73:d7:2b:20:
                    cf:33:7c:e2:b1:21:3c:73:46:f1:95:04:db:70:11:
                    43:50:b2:53:f9:4a:be:42:6e:d5:72:37:38:de:75:
                    5a:4d:ec:23:d6:b9:d4:71:a1:8c:18:28:cd:fa:c0:
                    62:3a:0c:eb:64:79:b8:f7:8b:1d:f6:74:14:6a:67:
                    99:e2:dc:4e:fb:51:e6:c8:45:73:52:dd:c6:de:ae:
                    cf:29:01:0b:66:fc:c3:bb:b3:e2:3d:20:14:00:1a:
                    09:c0:28:2f:2e:ab:41:fe:be:93:11:f5:ac:42:c2:
                    8b:f4:ec:36:10:f2:44:42:e6:43:c2:b5:e9:23:12:
                    7d:59:8b:f4:c3:fc:a4:5e:49:45:a0:9e:88:4a:cb:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:D3:54:70:0D:CC:C6:C7:97:A8:A1:4F:3F:1E:09:E6:50:66:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/079b826f-a7b4-3def-8c2c-84221e444a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:52:d6:5e:3d:16:28:96:85:d6:b0:3c:35:a4:ad:d0:2e:49:
         4d:4e:a1:ed:c0:7e:a6:3b:ba:2e:8f:55:9a:2a:3b:91:db:25:
         83:4e:cc:1f:34:13:f8:e4:5f:2c:7b:c4:a6:52:98:91:fb:d8:
         ac:2f:14:ec:3a:b9:64:bc:34:8b:74:ab:da:bb:aa:9e:9a:46:
         cf:3b:13:e9:c8:b5:5b:6b:4a:6c:69:d9:42:7f:52:39:96:c8:
         fb:18:a6:1f:97:58:e6:a1:e1:ee:1d:7d:72:cf:00:fc:96:4e:
         6d:b7:2a:18:b0:ad:d9:d6:34:52:50:59:1f:b5:81:7e:55:1c:
         38:a0:54:01:c0:61:fb:fb:ba:36:0f:ff:f0:e7:90:1b:b9:7e:
         2f:93:09:12:73:e1:94:86:a0:5d:05:f8:95:48:1c:e8:b7:49:
         6d:84:5f:d0:9c:14:b1:9a:26:e6:55:1d:df:98:e2:b2:5a:c5:
         9d:c0:9f:72:5f:d7:a8:d9:de:e5:a3:d9:29:c3:3a:db:31:57:
         29:5b:2e:96:66:d2:d6:9e:aa:ff:98:a6:75:ef:0e:24:bb:e8:
         0b:81:77:7d:39:bb:18:7e:32:16:a5:28:00:a2:fd:ce:36:0d:
         2d:2e:11:b4:78:c8:fe:7a:06:0b:cc:92:d0:bf:ce:ec:7a:24:
         55:15:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:24:13 2026 by rpki-client