Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8be390b2-012c-3ada-9962-c77f8cd2674d.roa
File:                     8be390b2-012c-3ada-9962-c77f8cd2674d.roa (raw, json)
Hash identifier:          +0opOiqPjmlvKbi2u9POJVsGfDXM+wv2VcGiZ3d4ezY=
Subject key identifier:   4E:67:3C:13:D5:37:DD:90:1E:39:1B:AA:5B:7C:C0:C4:DD:0B:95:4D
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F225D1F96AB4A3ED69E85CEE0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8be390b2-012c-3ada-9962-c77f8cd2674d.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     13445
IP address blocks:        163.129.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1f:96:ab:4a:3e:d6:9e:85:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=ec40347c-ded5-4661-abbc-1d7db30228cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:55:7c:d3:8b:a9:c1:cc:24:1f:ce:5f:35:
                    36:9e:3d:e7:2c:41:c4:27:2f:6c:c2:05:11:14:fd:
                    e4:f4:8f:8a:77:7a:c4:a3:e5:7e:f7:40:21:83:aa:
                    4b:c5:0d:c0:ca:02:ee:d8:99:ae:1e:8c:a8:91:98:
                    11:08:a1:0a:63:55:82:22:d7:8e:dc:f2:56:b9:fa:
                    0e:39:ea:c0:f0:0e:77:2a:8f:c0:da:43:6c:c1:0d:
                    b6:09:88:10:48:0a:1e:11:38:2b:8e:09:8b:e0:b6:
                    12:51:f1:4a:21:0c:1d:c1:c1:4f:ef:a6:d9:e0:49:
                    88:8b:64:5d:80:df:b1:40:5c:d4:36:45:39:8a:51:
                    b7:08:30:e3:5f:90:a1:b0:3a:1e:35:bd:d1:71:3f:
                    1a:ab:fe:ac:40:b6:be:64:4a:ed:e4:11:46:f9:a2:
                    69:d0:91:c4:80:f7:82:82:55:c7:5f:8c:a1:93:ac:
                    73:90:ab:ca:ac:6d:96:91:be:70:2e:1a:3c:d4:86:
                    1b:ec:cb:78:10:d4:6f:85:54:87:a7:dd:c2:ad:9d:
                    73:b2:97:60:88:f1:0b:b4:85:9d:38:06:a9:2c:74:
                    74:89:04:33:4b:cf:2c:67:3c:44:9b:86:94:29:a6:
                    d7:34:5f:bf:42:c5:e9:52:be:2e:27:9c:9b:f2:c1:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:67:3C:13:D5:37:DD:90:1E:39:1B:AA:5B:7C:C0:C4:DD:0B:95:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8be390b2-012c-3ada-9962-c77f8cd2674d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:fe:30:bd:6a:96:57:94:e1:c2:3e:76:d3:bc:fd:36:73:
         b5:28:95:17:45:ae:2d:c7:ec:8f:ca:7a:71:1e:04:ae:2b:59:
         9b:a8:c9:82:98:b9:be:24:82:4f:9f:c5:ce:63:97:9a:e8:57:
         aa:bb:8b:0f:13:92:4a:73:1c:36:3c:97:48:dd:75:8a:d6:d4:
         29:05:e0:08:a6:3c:b1:6a:00:d0:61:e7:c3:39:d8:3e:f0:2b:
         45:80:3c:9f:83:ee:d4:3f:38:cb:bc:fc:50:52:64:23:7c:ee:
         d6:6a:d6:8c:df:a3:42:3b:69:13:ad:7a:10:52:e8:30:8c:e9:
         ba:f5:c0:2c:c7:36:ba:3e:85:69:5a:db:22:73:19:ff:e4:18:
         0d:ab:75:8c:42:15:22:36:e3:c5:5c:31:00:b0:2a:9c:2f:12:
         c0:9c:b6:a2:46:b7:8d:fb:5d:fa:df:46:8d:c3:81:0a:68:4d:
         c3:f3:cf:09:76:03:f1:51:82:ce:30:3e:a2:d0:57:95:61:06:
         94:f7:f7:36:10:77:3e:23:db:a8:ed:73:75:df:60:5b:3b:4e:
         3c:53:ae:59:9d:cc:89:2c:f3:ec:63:d5:c0:18:a0:a9:e1:d2:
         39:6c:59:da:87:65:6e:5a:5c:61:e7:d4:99:28:64:22:cf:93:
         1a:d4:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:24:21 2026 by rpki-client