Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa
File:                     dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa (raw, json)
Hash identifier:          uYoPcIGKEyzcam23klF0hB71cPimizEKcTN9BsEhEnM=
Subject key identifier:   8B:2E:BD:1E:A9:9B:DA:6F:10:23:3F:C8:4F:C6:D2:41:36:22:09:63
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EE38CAB84FC47F657E296B2AC
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        216.151.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:ab:84:fc:47:f6:57:e2:96:b2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=0089f493-0e1d-4f76-b34d-9c4a4509466c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:48:f0:f2:71:af:fd:a4:48:e7:80:3f:2a:
                    27:e9:66:7f:d8:e2:47:d9:df:61:ce:70:43:a9:3d:
                    93:68:df:74:63:f2:eb:e6:b5:2c:7e:85:ad:c3:e7:
                    99:9b:75:d3:04:f1:ac:6d:8a:7b:70:d0:8e:08:3b:
                    2e:18:ed:83:ae:e3:8c:20:75:32:9d:56:59:c2:60:
                    64:59:9d:d6:aa:ea:c1:31:f8:3b:b4:65:2c:83:fe:
                    60:2e:72:a3:46:3a:29:41:fd:b7:41:3f:48:00:04:
                    47:4d:99:68:10:f9:9e:75:d2:d6:97:1f:ef:76:d4:
                    d3:e8:da:68:eb:ff:b3:fb:ee:ca:75:30:29:e7:e7:
                    81:02:6e:f6:3f:10:22:0c:87:5b:91:5f:00:7f:00:
                    a0:5a:74:65:a4:f0:4f:76:83:21:21:a5:16:cc:b8:
                    28:9c:42:84:1a:22:32:8e:c5:4d:0d:ff:ca:34:72:
                    fc:f5:0a:c6:15:ec:d9:85:e4:35:f9:24:9c:a9:20:
                    2d:9d:1a:0a:f0:83:c1:d5:bd:99:de:9f:ee:6f:e0:
                    fe:e2:6a:f1:28:f1:22:0a:63:b2:81:0a:07:ff:f6:
                    ff:5a:80:de:62:3b:a3:dd:38:b3:ec:93:ae:59:c5:
                    42:73:8b:63:c1:fe:ac:3f:b5:e7:0a:2f:4d:0f:50:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:BD:1E:A9:9B:DA:6F:10:23:3F:C8:4F:C6:D2:41:36:22:09:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dc880d2c-8ceb-3cb4-9df8-6455753b1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:ed:b8:a4:13:6b:7a:ec:df:26:e2:20:6b:13:60:98:9a:
         76:74:b4:ef:42:f4:89:1a:85:fa:73:84:31:61:8c:96:6a:12:
         2d:96:9c:c2:b1:ec:b7:8a:9b:df:f9:b8:0a:71:17:00:3e:97:
         16:9e:77:56:dc:98:7b:8b:4f:42:2a:00:34:1a:9e:57:8a:76:
         d3:c8:2c:a7:7a:39:da:56:7e:c9:c4:e3:66:e1:bf:04:70:8f:
         bc:5c:5b:70:d4:ca:98:c0:c9:ec:55:9c:5d:9f:be:c8:e7:e7:
         b6:f1:0a:d5:f2:30:da:d9:ab:90:d9:87:54:1f:ab:08:48:b6:
         cf:d2:0a:8c:1c:48:3f:13:8f:30:d5:68:67:e1:3a:a1:a8:06:
         55:7e:6d:b6:cb:0a:19:29:8a:25:47:21:14:bc:52:09:77:ab:
         5d:cc:fa:a0:51:2b:e1:a5:15:91:5d:5d:26:99:70:12:dd:bc:
         dd:de:4b:d1:00:dc:38:1c:b6:ea:13:0e:ef:01:fa:0b:4e:2b:
         f8:e8:c1:fb:62:d5:99:9a:c4:3d:22:55:38:4a:76:f4:a1:9c:
         d1:c3:b4:72:3d:ae:81:c0:cd:0e:70:41:47:89:73:80:8d:48:
         9b:f3:6d:73:82:c0:70:2d:22:63:ae:4f:39:f8:7d:6f:a3:c2:
         32:aa:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:24:10 2026 by rpki-client