Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5c94ac2d-d56f-3e9e-b6c4-40eeb107d328.roa
File:                     5c94ac2d-d56f-3e9e-b6c4-40eeb107d328.roa (raw, json)
Hash identifier:          4L1zn5ASA7WkjCc2sH81F30AcqWoEHIoa8g6JGUqlLc=
Subject key identifier:   5F:26:1B:BD:0B:72:78:95:E9:FA:DC:FF:EA:CA:F6:83:41:A7:BC:08
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584BBB75983AF642CD9504E82380
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5c94ac2d-d56f-3e9e-b6c4-40eeb107d328.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        163.129.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:98:3a:f6:42:cd:95:04:e8:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=5e51aaf9-a6dd-4c49-a416-3213653e5110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:df:13:d8:de:81:12:1c:17:25:13:ca:88:
                    6f:77:00:39:1a:35:c0:ce:2b:ad:51:7a:92:1f:fb:
                    ec:06:c6:a1:6d:6f:e2:a3:c4:b0:f4:c0:be:0b:c5:
                    38:70:22:24:ff:62:de:73:eb:72:d7:88:9f:e2:46:
                    3d:f5:00:18:bc:7f:57:aa:da:c7:d0:78:90:85:f1:
                    af:2e:77:ec:3b:f8:7b:fb:92:b3:e5:d4:ec:3b:ca:
                    fb:0f:57:65:0c:23:9a:79:04:61:e1:3f:ec:15:5c:
                    60:bd:e2:04:a9:27:fd:2c:20:f5:45:f0:c7:08:ed:
                    0d:9b:6a:8b:0b:5d:77:80:2b:3e:f6:e5:e2:83:8f:
                    28:42:95:5d:55:7a:b8:28:26:ed:50:fe:f1:6e:01:
                    71:a0:b8:7e:6a:e6:2c:e2:d1:c5:54:7e:c1:bc:ed:
                    e9:c3:60:b1:41:44:bb:75:7b:5a:34:b7:4e:f6:69:
                    15:36:48:70:7c:aa:16:52:46:cc:4d:af:bb:c1:49:
                    72:d8:d7:1f:a7:f8:a3:50:27:3c:d7:4c:f7:63:79:
                    e8:b7:12:81:bd:72:3f:04:6c:cd:6d:75:08:7f:29:
                    25:86:aa:b3:21:00:eb:14:3e:52:65:6f:88:09:c1:
                    15:c8:0e:0e:01:5f:bc:e4:b2:c5:99:ed:1b:b1:ab:
                    b3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:1B:BD:0B:72:78:95:E9:FA:DC:FF:EA:CA:F6:83:41:A7:BC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5c94ac2d-d56f-3e9e-b6c4-40eeb107d328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:de:2a:4a:8f:d2:64:ad:fe:8f:22:b6:c7:a0:6d:67:05:
         cf:f0:a5:80:2e:1f:b4:3d:93:d7:d3:f0:de:37:62:94:5f:85:
         2c:e2:36:aa:e0:81:89:56:78:d3:c8:26:48:84:f9:2e:3e:c1:
         ec:fd:4b:26:05:47:11:27:91:1c:a8:fd:2e:ca:95:e9:5f:ab:
         2e:4a:20:7a:46:42:9e:68:1f:5c:29:d2:94:ca:ce:1f:52:ef:
         da:ff:d9:5e:0a:3f:16:ad:b4:d9:59:35:07:07:6f:41:ec:84:
         a0:2c:f4:3a:01:da:e4:05:17:75:80:73:0b:a6:9f:70:c1:b2:
         d7:a1:3a:73:21:b8:59:a1:98:4f:0c:b9:c9:8a:a5:af:a4:ca:
         3d:b9:e9:cc:b8:08:99:f5:1f:14:da:77:4d:a6:93:fa:d1:92:
         22:b3:28:33:cf:8d:ea:ce:91:67:ec:4d:e4:8c:88:a6:5a:ca:
         49:b9:14:8d:fb:22:6f:e3:8c:b9:28:03:35:74:97:4a:ff:9f:
         f6:44:a3:11:b5:9b:b7:7f:f7:a3:f6:53:2a:ff:d5:77:9d:f8:
         73:56:1d:99:79:11:2f:0e:44:4c:e8:f9:42:4e:98:15:8c:59:
         fd:a5:37:39:ae:35:d9:d0:34:cf:8b:76:6a:43:4a:7f:c5:00:
         6e:99:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:18 2025 by rpki-client