Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa
File:                     296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa (raw, json)
Hash identifier:          WHSkxQS0y2EzuZSP+RUIG69T8lK4bQHp02K7bW6r1nw=
Subject key identifier:   33:5C:D7:CC:EF:DB:0C:8F:E7:33:C2:BE:98:69:2A:90:5B:25:21:CB
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584EA797ED5F041E936C4F128000
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18978
IP address blocks:        107.163.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:ed:5f:04:1e:93:6c:4f:12:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f321cc09-bb00-4749-b820-4aa1b68d9eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:f4:9b:2c:37:ef:ae:1e:68:79:21:f8:3d:
                    22:e2:59:83:0a:65:c6:da:cf:79:28:46:1f:8f:46:
                    23:ac:fb:e5:8b:11:65:63:22:cd:d9:63:0d:55:56:
                    2f:fb:c5:1c:91:72:8f:11:73:e8:b1:ae:95:2d:e4:
                    9c:28:d4:2f:5d:7f:bd:d4:46:e1:89:0f:c3:d1:92:
                    32:a9:6f:33:ba:47:02:ec:69:5d:b5:86:2b:d1:68:
                    a5:43:ec:fc:aa:b3:cb:58:fb:0b:8d:89:bc:3b:b3:
                    4e:70:77:51:0f:fb:9c:87:5a:85:89:b8:e6:92:13:
                    84:8a:11:21:4c:3e:63:1d:1e:6d:e2:f2:5d:1f:53:
                    9e:40:a7:c7:5d:04:88:44:13:58:31:33:4a:00:76:
                    65:85:c1:56:4a:d1:73:18:1c:fb:b4:41:1e:b0:b0:
                    b0:b5:b3:f5:51:d4:73:11:e7:23:f1:9b:19:b1:59:
                    48:52:f8:91:df:47:7f:cd:52:d7:29:88:53:8f:49:
                    f9:e2:c7:fa:62:b5:c4:08:5f:c9:1f:b7:1b:d4:7d:
                    29:67:d2:b0:df:50:4f:18:ce:9e:ba:4f:96:f4:94:
                    39:5e:e6:5d:bb:ba:ce:c1:78:20:33:da:eb:32:e5:
                    5d:a5:af:02:c9:91:27:4d:03:30:ca:f2:21:90:5d:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:D7:CC:EF:DB:0C:8F:E7:33:C2:BE:98:69:2A:90:5B:25:21:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.163.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:56:73:f2:bd:6e:57:ce:6b:35:c6:9b:63:9b:2c:c9:fa:
         38:0c:9d:cf:e3:ff:c6:81:0c:3a:c5:c5:50:fc:d5:9c:c0:6d:
         5a:77:09:a2:16:61:8c:43:d2:31:81:9f:1c:89:04:34:f4:9a:
         66:cd:77:0b:ad:98:2e:df:d5:6f:f7:1b:42:45:0a:8e:6f:fd:
         62:21:9a:f3:6a:62:46:41:fa:f8:36:62:d2:85:d9:78:b4:d4:
         58:d5:a4:96:73:66:0d:6c:d9:8e:7b:dc:df:a3:b2:73:e2:36:
         91:fb:18:26:86:f6:1d:56:31:30:fd:24:11:7a:d9:81:dc:2b:
         cc:65:46:4e:77:06:bc:ea:84:9f:2e:d3:b1:79:f7:1a:25:61:
         44:0a:9c:f3:89:fc:77:79:e7:4d:8b:57:1a:17:3a:62:af:13:
         43:8d:19:6b:cd:fe:5d:bd:2d:e1:e9:5e:46:2c:30:98:34:5c:
         96:dc:09:0f:c8:6b:2e:a8:17:c5:f0:8a:2c:7c:35:64:66:58:
         45:c6:5e:30:2b:d0:28:a1:42:30:8a:6f:f9:d5:f9:59:01:b8:
         21:4e:29:ae:df:1e:de:e1:b9:cc:bd:70:11:09:d0:17:68:4a:
         4a:cc:07:12:74:a1:4c:85:52:49:6b:84:34:a7:dd:9d:2a:5f:
         52:94:f9:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+1fBB6TbE8SgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFmZjMyNmItMWYyNC00NjhjLWI5YzYtZmEwODlhNDYx
MzUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjMyMWNjMDktYmIwMC00NzQ5LWI4MjAtNGFhMWI2OGQ5ZWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bz0myw3764eaHkh+D0i4lmDCmXG2s95KEYf
j0YjrPvlixFlYyLN2WMNVVYv+8UckXKPEXPosa6VLeScKNQvXX+91EbhiQ/D0ZIy
qW8zukcC7GldtYYr0WilQ+z8qrPLWPsLjYm8O7NOcHdRD/uch1qFibjmkhOEihEh
TD5jHR5t4vJdH1OeQKfHXQSIRBNYMTNKAHZlhcFWStFzGBz7tEEesLCwtbP1UdRz
Eecj8ZsZsVlIUviR30d/zVLXKYhTj0n54sf6YrXECF/JH7cb1H0pZ9Kw31BPGM6e
uk+W9JQ5XuZdu7rOwXggM9rrMuVdpa8CyZEnTQMwyvIhkF1IWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNc18zv2wyP5zPCvphpKpBbJSHLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZm
MzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4OWE0NjEzNTAvMjk2Nzg2ZDYtNmMwZS0z
OGFkLWJmMTAtNzU5ZDlhMGQ2YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFmZjMyNmItMWYyNC00NjhjLWI5
YzYtZmEwODlhNDYxMzUwL2JhZmYzMjZiLTFmMjQtNDY4Yy1iOWM2LWZhMDg5YTQ2
MTM1MC5jcmwwHwYDVR0jBBgwFoAUBS2WIHdO/bxHLByhCY5bMV0c/DIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWZmMzI2Yi0xZjI0LTQ2OGMtYjljNi1mYTA4
OWE0NjEzNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFa6OgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1XVnPyvW5Xzms1xptjmyzJ+jgMnc/j/8aBDDrFxVD81ZzAbVp3CaIW
YYxD0jGBnxyJBDT0mmbNdwutmC7f1W/3G0JFCo5v/WIhmvNqYkZB+vg2YtKF2Xi0
1FjVpJZzZg1s2Y573N+jsnPiNpH7GCaG9h1WMTD9JBF62YHcK8xlRk53BrzqhJ8u
07F59xolYUQKnPOJ/Hd5502LVxoXOmKvE0ONGWvN/l29LeHpXkYsMJg0XJbcCQ/I
ay6oF8Xwiix8NWRmWEXGXjAr0CihQjCKb/nV+VkBuCFOKa7fHt7hucy9cBEJ0Bdo
SkrMBxJ0oUyFUklrhDSn3Z0qX1KU+SI=
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:07:43 2026 by rpki-client