Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
File:                     bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json)
Hash identifier:          FOkPAaiiT7qDIhZOUJwXbZHHUnnv99bHffrAqXTP8Lo=
Subject key identifier:   4B:83:49:01:6C:91:4B:87:EB:75:23:5E:93:41:85:64:23:CC:07:BE
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EE6FEA9BBDB6E9D3984353780
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
Signing time:             Thu 20 Aug 2026 18:37:33 +0000
ROA not before:           Thu 20 Aug 2026 18:37:33 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13445
IP address blocks:        163.129.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:fe:a9:bb:db:6e:9d:39:84:35:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 20 18:37:33 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=1b770ec0-7033-4cec-98b3-2038cc25c58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9b:87:6d:10:14:96:1a:32:bf:c7:8b:43:74:
                    69:00:bc:57:85:5e:66:ff:01:31:a0:9f:ec:ca:de:
                    ad:80:5e:1b:af:bd:49:98:cc:28:43:d5:88:97:78:
                    d0:78:af:c8:b3:56:8a:6d:ba:c3:e9:eb:f2:f8:da:
                    e3:ee:e4:b8:24:0d:eb:90:c9:12:50:82:1b:d7:5a:
                    80:b7:80:d3:a9:ff:26:a7:42:4c:ae:a2:10:c4:b6:
                    dd:22:9e:23:64:83:45:f6:b9:f2:93:52:c3:89:bf:
                    21:88:54:8c:34:89:1d:47:1a:11:b4:18:bd:07:da:
                    b0:f6:5c:ff:e3:38:d6:1a:93:43:19:f5:bc:f1:64:
                    97:6a:47:d5:dd:7d:82:96:8e:26:62:99:37:e9:c2:
                    5f:87:c9:1b:7a:20:ae:a4:e6:d7:00:b7:72:f0:be:
                    b5:b9:f3:71:0b:3a:32:a1:b1:4f:e7:66:da:04:92:
                    7a:68:27:19:63:fd:89:e1:05:2c:c0:c6:87:11:1c:
                    83:8f:5a:39:52:cf:8e:bb:00:42:cd:96:a3:92:66:
                    da:9c:e8:ed:68:55:bc:4a:77:1d:fc:9a:1d:3d:38:
                    62:91:bf:c5:f9:ec:af:a1:f5:6a:b5:9e:9e:9f:c3:
                    c3:54:e0:3b:cd:d4:30:cb:50:b7:13:00:88:94:71:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:83:49:01:6C:91:4B:87:EB:75:23:5E:93:41:85:64:23:CC:07:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:a8:8e:30:76:14:57:01:a0:3a:bb:16:5b:53:3b:98:03:
         74:9c:4a:69:c4:b7:5e:f7:a3:47:fe:99:ee:46:dd:3c:42:6f:
         0d:28:bf:27:1e:9f:27:2e:33:58:5e:08:80:eb:99:7c:6d:29:
         10:c5:13:b6:ce:30:70:8f:5a:cd:45:f3:ae:f4:ce:5f:cd:d5:
         65:de:3b:7a:60:95:48:aa:9e:fc:4e:ac:ce:f8:98:23:09:f9:
         76:4a:35:46:6e:24:c5:b2:5c:79:ab:e8:21:d3:13:f2:2f:e4:
         9b:7f:db:25:6f:8f:aa:35:75:74:b9:11:98:20:69:81:28:c9:
         93:c6:01:8d:2a:df:c0:d6:45:24:94:d3:52:ae:7b:98:3b:90:
         f5:ab:55:73:53:8a:e2:11:10:ca:40:51:76:18:4f:62:3a:62:
         f6:b0:d8:80:bb:20:56:ad:82:74:51:a9:e1:1c:4e:30:1f:bf:
         1a:ab:60:69:63:30:25:ea:da:1e:f9:d7:03:08:57:f3:f2:7f:
         c2:9d:2a:30:01:5a:da:9d:fa:8b:96:0c:67:9e:dd:74:9f:db:
         8b:e7:22:d5:dc:e4:e8:1f:25:e2:74:0e:bf:d2:39:1c:43:b4:
         83:7f:f2:f4:e8:7d:3e:ed:91:41:de:6a:80:91:94:75:cf:cc:
         1b:e0:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:10 2026 by rpki-client