Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
File:                     a440a230-96b4-382a-b894-1a422d4202ed.roa (raw, json)
Hash identifier:          dAmniMQrjTO+zYwwGP0PQo5/ICCYQYlKhyc6Wc463+g=
Subject key identifier:   CE:81:28:BC:24:0A:5E:AB:10:68:33:4A:D9:A4:C7:E2:2B:7E:D8:77
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584ED864808DD4ACBE13B308B200
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        163.129.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:80:8d:d4:ac:be:13:b3:08:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=8da5198c-6c0e-4237-b5cd-9f2aa14a99ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:d8:7b:39:14:70:ee:ca:51:39:da:20:75:
                    aa:67:78:e4:e4:2a:f6:7e:69:74:6c:e7:88:d0:eb:
                    f7:b9:5c:31:f4:2c:16:a3:06:c7:da:c0:2d:8d:cc:
                    d0:13:82:5e:af:7d:6a:a5:59:87:1f:88:d1:b0:fc:
                    ea:e8:49:29:8d:c7:1f:34:78:a4:f2:45:66:17:3a:
                    13:db:d8:0e:2b:96:48:b2:3a:ce:a6:6f:ae:52:32:
                    0d:a5:bb:be:b8:2a:e3:66:fd:83:01:94:3e:46:3c:
                    3b:61:c1:16:c1:ad:b9:6e:e3:85:5d:40:cc:c2:ed:
                    9a:a8:92:2c:09:b0:f1:fc:34:03:83:b4:f6:4a:b8:
                    33:12:b3:36:9b:e6:6f:81:ba:dc:ed:ea:ff:6a:64:
                    6d:dc:02:be:2b:49:1c:ca:e2:14:73:21:2b:80:49:
                    c2:35:43:a4:35:6f:45:21:a8:4b:82:d4:fb:76:43:
                    ce:86:84:7d:29:dc:2b:2e:e4:9c:d6:5d:bb:5f:8c:
                    96:9d:22:b4:e0:ec:6f:ba:b2:07:b7:d4:4d:8e:17:
                    62:1d:ae:aa:18:e9:bc:84:21:83:49:e9:60:75:49:
                    d5:ac:77:80:5e:f8:b1:c2:a1:a8:63:47:b5:ec:ba:
                    5c:f8:3e:43:5c:65:85:59:99:5c:e2:36:01:0b:27:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:28:BC:24:0A:5E:AB:10:68:33:4A:D9:A4:C7:E2:2B:7E:D8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:95:37:fa:ff:2b:1b:b1:41:38:d2:98:ce:ef:40:8d:4e:6f:
         48:95:d5:50:5f:70:29:35:15:14:f9:9c:c8:53:e5:7e:f4:30:
         6a:97:55:7e:bb:4b:01:5d:d0:46:a3:19:8a:5c:cf:a7:50:46:
         cc:69:e2:ad:f7:c4:d6:59:9c:eb:ef:54:15:16:a8:1d:45:ce:
         78:20:8a:31:1a:24:22:45:21:d2:58:fc:09:b9:4f:27:63:f9:
         1d:10:fa:b9:f6:2b:5b:d5:ff:5f:b2:66:49:a9:0a:cb:dc:d3:
         bf:8f:96:b5:9b:11:d0:ae:fc:35:3a:b8:96:35:11:fe:37:c7:
         ed:10:1a:d8:56:79:8b:dd:10:5c:6f:a1:c0:01:8d:bb:43:21:
         4e:5d:e3:a4:5c:52:87:ff:d0:da:d7:a1:b0:f5:53:f9:e6:cd:
         84:90:43:5e:8f:e1:54:3b:fe:81:36:d1:65:54:4f:76:66:ff:
         4e:47:6d:5d:27:4b:50:6c:9d:31:cb:30:f7:49:46:34:77:f0:
         12:7a:77:6c:b5:51:eb:bb:62:4c:96:ad:b2:65:9a:a8:05:ac:
         4e:74:17:fc:e8:1d:55:96:92:db:d5:16:ef:a1:7d:ed:88:05:
         bf:2c:9d:a0:f5:4a:a1:83:8a:1a:cf:3f:71:0c:30:e8:89:f5:
         f5:7a:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:25 2026 by rpki-client