Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa
File:                     518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa (raw, json)
Hash identifier:          /SX0F583i6Igf9nZj7An2+TNW9pKu5AskNHzWvM8Zcs=
Subject key identifier:   6C:88:ED:20:41:AC:23:C1:D5:01:13:87:29:EB:C6:AD:91:9B:7E:A1
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E0005D7274A40AEC250DE0780
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     13445
IP address blocks:        144.196.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d7:27:4a:40:ae:c2:50:de:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7a8adc2b-f720-471a-98f6-c844d1b792ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:a0:76:45:6e:de:57:4d:7b:e5:30:fd:3e:
                    6d:90:af:be:3a:34:cb:1c:98:9e:aa:4f:61:cf:4a:
                    63:7b:7c:aa:f6:bb:cf:0e:d7:2d:7d:0b:37:f1:42:
                    b3:94:3e:13:56:67:8f:66:27:f9:8a:92:2d:1e:66:
                    3a:ac:c8:7b:8d:b8:53:27:97:a8:c8:e1:f8:36:ad:
                    43:5f:ee:05:e2:64:29:6f:69:9d:b9:02:0c:cd:53:
                    83:35:67:c3:4a:0e:a7:c8:30:5e:a0:87:8e:d2:86:
                    8b:4f:59:cb:11:12:ea:96:0c:76:4c:ef:1b:2c:50:
                    47:58:4a:97:d0:26:d8:05:49:b2:1e:dd:d9:89:71:
                    8f:9f:55:70:51:5d:31:93:cd:ed:39:c6:a9:cf:da:
                    b7:8c:bc:bc:5c:c2:a6:c5:4c:55:f4:ab:1a:58:7f:
                    5e:4c:36:e2:27:81:88:e9:d7:1e:a0:91:a1:f8:c6:
                    18:79:0d:7a:12:a9:fb:2c:64:16:3b:69:9a:fb:0b:
                    6c:bd:57:ec:1d:3c:20:db:4a:ba:67:89:56:f7:04:
                    2f:77:fb:6d:2c:b6:77:41:8f:93:be:55:d6:f0:f1:
                    59:db:d5:b5:0e:5a:2b:8d:27:44:cd:6a:e8:71:7e:
                    82:50:38:16:2a:99:ec:a9:fd:4e:d9:32:ad:df:51:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:ED:20:41:AC:23:C1:D5:01:13:87:29:EB:C6:AD:91:9B:7E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:40:02:08:6d:b4:74:06:aa:c4:6a:25:80:b2:ee:ed:b8:af:
         44:50:d3:d1:80:b1:ab:97:c2:44:4e:75:90:6e:85:b6:2e:8f:
         77:8f:ee:47:47:4f:a8:c4:1f:49:f2:32:d6:6c:ee:aa:e8:45:
         45:9c:4b:c9:92:36:7a:25:77:f0:e3:37:70:f4:d8:e7:e7:93:
         85:f8:a7:ec:30:a2:93:d1:e5:f2:45:ae:1a:6d:5a:77:ed:b8:
         c3:4a:e5:5e:0b:65:62:ef:77:fd:10:21:8d:6c:a9:a0:ba:c2:
         33:bc:d8:22:34:4a:9d:99:b7:d8:0b:45:c3:40:ef:76:f4:11:
         c8:50:7c:ef:98:6c:3a:2e:f4:e4:e3:52:2a:21:da:45:86:25:
         1b:5b:88:11:e7:29:f0:f4:4e:41:ec:c0:2e:00:e6:e5:c8:ed:
         88:6a:b7:c7:db:17:66:13:ba:9b:ae:48:0c:5e:b9:2e:77:cd:
         48:95:8e:e2:d2:17:87:98:24:33:b7:fa:93:95:25:f1:53:d9:
         d1:bb:db:0f:91:9c:28:00:78:dd:40:19:ee:c6:92:70:bf:53:
         a0:37:0a:34:94:c2:65:62:48:02:05:19:25:f5:58:61:02:56:
         0c:7d:bc:d2:8f:9d:cd:9f:26:d8:f4:0f:59:e8:ff:60:04:d2:
         5b:d4:04:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABdcnSkCuwlDeB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
N2E4YWRjMmItZjcyMC00NzFhLTk4ZjYtYzg0NGQxYjc5MmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+gdkVu3ldNe+Uw/T5tkK++OjTLHJieqk9h
z0pje3yq9rvPDtctfQs38UKzlD4TVmePZif5ipItHmY6rMh7jbhTJ5eoyOH4Nq1D
X+4F4mQpb2mduQIMzVODNWfDSg6nyDBeoIeO0oaLT1nLERLqlgx2TO8bLFBHWEqX
0CbYBUmyHt3ZiXGPn1VwUV0xk83tOcapz9q3jLy8XMKmxUxV9KsaWH9eTDbiJ4GI
6dceoJGh+MYYeQ16Eqn7LGQWO2ma+wtsvVfsHTwg20q6Z4lW9wQvd/ttLLZ3QY+T
vlXW8PFZ29W1DlorjSdEzWrocX6CUDgWKpnsqf1O2TKt31EMFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGyI7SBBrCPB1QEThynrxq2Rm36hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvNTE4ZDFiMWItNmNlMC0z
YWRjLWEwYjQtMWE1MjhkODIwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRAAghttHQGqsRqJYCy7u24r0RQ09GAsauXwkROdZBuhbYuj3eP7kdH
T6jEH0nyMtZs7qroRUWcS8mSNnold/DjN3D02Ofnk4X4p+wwopPR5fJFrhptWnft
uMNK5V4LZWLvd/0QIY1sqaC6wjO82CI0Sp2Zt9gLRcNA73b0EchQfO+YbDou9OTj
Uioh2kWGJRtbiBHnKfD0TkHswC4A5uXI7Yhqt8fbF2YTupuuSAxeuS53zUiVjuLS
F4eYJDO3+pOVJfFT2dG72w+RnCgAeN1AGe7GknC/U6A3CjSUwmViSAIFGSX1WGEC
Vgx9vNKPnc2fJtj0D1no/2AE0lvUBEg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:03:32 2026 by rpki-client