Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
File:                     a440a230-96b4-382a-b894-1a422d4202ed.roa (raw, json)
Hash identifier:          b3WXx3mdV/4WbyLRKTiM6FzR0CO2oMW+yQsT+FqfLBY=
Subject key identifier:   E6:97:6D:C7:41:29:4E:93:0E:73:13:D7:10:24:ED:B5:0C:48:2B:05
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E3601754BE29DB6A217903500
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     13445
IP address blocks:        163.129.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:75:4b:e2:9d:b6:a2:17:90:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d30222f1-92da-465c-aee1-74b329e16d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:a9:2d:e5:cd:5d:4b:71:d6:33:d2:61:f4:
                    26:b2:c7:9b:87:99:a1:f9:ba:73:0a:cd:4d:15:fc:
                    b5:b8:9c:c3:08:81:21:51:c9:33:ca:d2:5d:80:1d:
                    e4:27:2b:6c:e3:ad:d2:e8:3e:f7:28:d6:df:10:67:
                    30:d5:57:74:b8:83:18:67:fa:0c:63:86:73:e2:43:
                    46:0d:16:2b:a7:93:fb:f8:ad:3f:57:bb:59:0d:86:
                    0b:46:83:08:55:60:5a:ef:6d:8e:a1:09:ba:be:c5:
                    73:65:74:50:e0:c6:51:9d:9e:f5:72:e9:86:10:47:
                    18:2e:f1:29:88:30:d1:05:7b:21:67:58:d0:ad:a9:
                    f7:1e:82:b3:6c:2a:ba:cf:cb:88:e9:ad:c2:82:66:
                    af:e9:76:7d:0c:9c:4d:7c:b4:1c:96:98:4b:03:be:
                    93:bb:3f:08:c8:6b:f7:ac:aa:63:4d:d9:e2:02:e8:
                    11:e5:b2:b3:dd:82:7f:76:20:ef:b1:f0:ae:28:b0:
                    5f:5a:91:5d:ca:7f:e3:f3:74:4f:f9:30:c9:0f:b5:
                    0d:cd:db:d6:73:6c:52:96:29:e8:96:78:9b:a6:2e:
                    bc:15:49:c6:86:f9:07:0d:80:7d:10:52:ca:2f:29:
                    f4:b2:2d:97:6a:ca:6e:d2:a1:94:97:28:71:41:1d:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:6D:C7:41:29:4E:93:0E:73:13:D7:10:24:ED:B5:0C:48:2B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:37:99:b0:7f:7b:1d:bf:fb:85:5f:67:32:db:42:ee:d4:a7:
         4a:b8:d9:f5:a2:ac:94:88:7f:69:58:8c:ce:a2:9b:06:74:83:
         84:46:27:e1:70:a4:12:2b:12:5a:16:67:be:d8:e2:a7:f8:b4:
         8d:4f:f7:07:c1:35:4c:06:da:c6:8a:64:5e:7e:ab:df:22:fc:
         34:07:be:90:ae:61:99:df:be:b3:da:af:12:1c:b8:02:c3:ab:
         a2:1b:a2:02:27:ed:44:ec:2c:1f:52:97:1b:a0:3b:14:82:6e:
         e3:59:e1:08:a5:ec:83:aa:23:9c:58:be:bd:2d:64:7b:2c:85:
         a2:fc:ab:99:46:63:0e:d3:09:d4:fa:88:b8:70:c0:ac:46:07:
         3b:00:26:2a:e0:1b:2f:1b:92:78:ee:d3:31:32:9c:e5:03:c9:
         f2:76:a5:44:84:f9:8a:2e:2f:75:33:c8:56:a4:db:63:16:22:
         c6:38:60:5a:5f:96:52:92:58:46:a1:8f:e0:49:c7:0c:6b:ea:
         62:3e:72:17:b8:7e:98:5d:28:91:fb:5d:eb:4c:bb:c3:31:42:
         1a:61:d1:ae:3c:75:3a:18:ea:6d:c4:4d:0e:80:bf:73:ba:58:
         0f:a7:98:2c:f9:1a:99:4e:33:23:f7:90:24:86:cb:19:79:6c:
         c3:53:c8:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AXVL4p22oheQNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZDMwMjIyZjEtOTJkYS00NjVjLWFlZTEtNzRiMzI5ZTE2ZDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4epLeXNXUtx1jPSYfQmssebh5mh+bpzCs1N
Ffy1uJzDCIEhUckzytJdgB3kJyts463S6D73KNbfEGcw1Vd0uIMYZ/oMY4Zz4kNG
DRYrp5P7+K0/V7tZDYYLRoMIVWBa722OoQm6vsVzZXRQ4MZRnZ71cumGEEcYLvEp
iDDRBXshZ1jQran3HoKzbCq6z8uI6a3Cgmav6XZ9DJxNfLQclphLA76Tuz8IyGv3
rKpjTdniAugR5bKz3YJ/diDvsfCuKLBfWpFdyn/j83RP+TDJD7UNzdvWc2xSlino
lnibpi68FUnGhvkHDYB9EFLKLyn0si2Xaspu0qGUlyhxQR3SOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaXbcdBKU6TDnMT1xAk7bUMSCsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYTQ0MGEyMzAtOTZiNC0z
ODJhLWI4OTQtMWE0MjJkNDIwMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDo4FYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAME3mbB/ex2/+4VfZzLbQu7Up0q42fWirJSIf2lYjM6imwZ0g4RGJ+Fw
pBIrEloWZ77Y4qf4tI1P9wfBNUwG2saKZF5+q98i/DQHvpCuYZnfvrParxIcuALD
q6IbogIn7UTsLB9SlxugOxSCbuNZ4Qil7IOqI5xYvr0tZHsshaL8q5lGYw7TCdT6
iLhwwKxGBzsAJirgGy8bknju0zEynOUDyfJ2pUSE+YouL3UzyFak22MWIsY4YFpf
llKSWEahj+BJxwxr6mI+che4fphdKJH7XetMu8MxQhph0a48dToY6m3ETQ6Av3O6
WA+nmCz5GplOMyP3kCSGyxl5bMNTyDI=
-----END CERTIFICATE-----
Generated at Mon Jul 20 01:17:05 2026 by rpki-client