Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
File:                     a440a230-96b4-382a-b894-1a422d4202ed.roa (raw, json)
Hash identifier:          8t0Hoqq3e7dSFBK4l5jeyxto7RgbqY7oQL9/6zqWMlc=
Subject key identifier:   69:AA:56:11:3B:73:93:7C:6E:67:4A:54:AF:63:C3:0D:59:50:04:D5
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584AB4048FB851FFB899B049D900
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa
Signing time:             Thu 31 Jul 2025 17:15:27 +0000
ROA not before:           Thu 31 Jul 2025 17:15:27 +0000
ROA not after:            Wed 29 Oct 2025 17:15:27 +0000
asID:                     13445
IP address blocks:        163.129.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:04:8f:b8:51:ff:b8:99:b0:49:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 31 17:15:27 2025 GMT
            Not After : Oct 29 17:15:27 2025 GMT
        Subject: CN=dc9d4820-bac6-4a40-9cdc-8f24f46a0512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:7a:f5:ef:b6:9d:aa:12:24:e3:68:d1:db:
                    1a:75:31:4c:4c:2b:db:06:97:30:37:6f:d9:d6:45:
                    59:22:21:0b:e9:5e:2a:08:89:9a:9d:b8:97:c5:c5:
                    e1:2e:04:ca:74:99:e0:3a:a0:8c:49:df:2c:89:2f:
                    fd:77:fa:d6:9b:9d:fb:c0:36:92:3a:ab:bc:fb:70:
                    d4:44:e6:60:35:a2:42:09:ed:4b:10:16:a3:c7:f5:
                    bb:d5:7e:54:9f:32:85:0d:97:60:51:b8:36:d3:2d:
                    df:46:d6:f0:9d:ab:5d:4f:22:a9:e2:d1:3d:73:e9:
                    d0:90:cd:ef:b6:15:9c:10:19:35:7e:23:93:b8:bb:
                    f2:8c:3d:06:b8:74:9e:1d:db:0c:0e:aa:e5:1d:81:
                    a0:18:55:2b:e6:5c:67:cc:bc:41:46:64:c5:ab:22:
                    00:4c:a2:0f:6c:16:7f:b4:b1:a4:55:1a:8d:e1:9e:
                    3b:9f:17:d7:63:d9:c9:b3:bf:d0:4d:2d:e7:9d:ac:
                    1c:74:a4:1f:82:f8:77:0a:0d:52:e8:ab:e5:15:5e:
                    79:9b:95:59:49:cc:d8:e8:8a:39:ef:4f:e4:3e:38:
                    c4:dc:68:f2:08:19:3c:d5:40:3b:3c:f4:ed:82:4b:
                    dc:1d:60:c0:ba:fd:b2:12:6f:f6:0d:b9:07:0b:ee:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AA:56:11:3B:73:93:7C:6E:67:4A:54:AF:63:C3:0D:59:50:04:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a440a230-96b4-382a-b894-1a422d4202ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:04:03:96:90:cd:4e:a6:1d:0a:5b:dc:38:5d:d7:de:cc:
         17:09:d3:14:bc:0c:bf:4b:c9:74:fb:be:26:5d:1a:27:84:39:
         bd:59:7e:72:0c:7d:dd:b2:7c:4f:a4:c1:4e:63:49:04:80:6c:
         f6:4b:a4:a4:be:8c:db:b2:d4:44:4d:b6:5e:4c:1e:91:18:85:
         5d:c0:51:bc:53:01:de:a7:ae:86:64:4e:06:ca:c4:e7:9e:27:
         c3:c0:e0:9a:13:54:1c:41:ac:42:22:d9:57:42:dc:02:c8:68:
         d9:90:d5:26:ae:b3:66:9e:77:e6:70:e9:31:cf:bd:c3:80:c5:
         0d:79:b0:49:4f:2c:4f:7e:72:06:9e:66:2b:62:77:13:fc:7c:
         4d:4c:db:5d:f8:ed:22:48:3d:b8:cf:18:93:61:0f:90:d2:1e:
         20:32:09:19:3c:fd:bb:2c:86:63:80:ed:30:07:43:97:b7:9d:
         ab:9e:5f:74:7c:42:8c:a3:a8:c7:16:89:f4:ab:1b:f4:c5:86:
         68:84:21:dd:64:82:8c:9a:a9:df:41:a1:23:ce:7f:03:4b:4f:
         c3:88:df:65:63:89:a2:b3:70:20:e1:ee:ae:06:29:44:08:67:
         95:79:49:1b:aa:69:35:59:e2:97:60:f2:d7:a3:fe:e7:20:15:
         03:e3:33:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0BI+4Uf+4mbBJ2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDczMTE3MTUyN1oXDTI1MTAyOTE3MTUyN1owLzEtMCsGA1UEAxMk
ZGM5ZDQ4MjAtYmFjNi00YTQwLTljZGMtOGYyNGY0NmEwNTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOd69e+2naoSJONo0dsadTFMTCvbBpcwN2/Z
1kVZIiEL6V4qCImanbiXxcXhLgTKdJngOqCMSd8siS/9d/rWm537wDaSOqu8+3DU
ROZgNaJCCe1LEBajx/W71X5UnzKFDZdgUbg20y3fRtbwnatdTyKp4tE9c+nQkM3v
thWcEBk1fiOTuLvyjD0GuHSeHdsMDqrlHYGgGFUr5lxnzLxBRmTFqyIATKIPbBZ/
tLGkVRqN4Z47nxfXY9nJs7/QTS3nnawcdKQfgvh3Cg1S6KvlFV55m5VZSczY6Io5
70/kPjjE3GjyCBk81UA7PPTtgkvcHWDAuv2yEm/2DbkHC+67fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmqVhE7c5N8bmdKVK9jww1ZUATVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYTQ0MGEyMzAtOTZiNC0z
ODJhLWI4OTQtMWE0MjJkNDIwMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDo4FYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsBBAOWkM1Oph0KW9w4XdfezBcJ0xS8DL9LyXT7viZdGieEOb1ZfnIM
fd2yfE+kwU5jSQSAbPZLpKS+jNuy1ERNtl5MHpEYhV3AUbxTAd6nroZkTgbKxOee
J8PA4JoTVBxBrEIi2VdC3ALIaNmQ1Saus2aed+Zw6THPvcOAxQ15sElPLE9+cgae
ZitidxP8fE1M21347SJIPbjPGJNhD5DSHiAyCRk8/bsshmOA7TAHQ5e3naueX3R8
QoyjqMcWifSrG/TFhmiEId1kgoyaqd9BoSPOfwNLT8OI32VjiaKzcCDh7q4GKUQI
Z5V5SRuqaTVZ4pdg8tej/ucgFQPjM0Y=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:41 2025 by rpki-client