Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa
File:                     b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json)
Hash identifier:          UM0OrU0KxJN1Y5QdWKQCCnKOA8L2CoGn5FQat4fyakM=
Subject key identifier:   01:4F:75:B2:8D:31:67:18:FE:50:2A:5D:AC:2B:F1:29:C8:A7:F2:6C
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EA79A2A1FD2CCFC088D659700
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13445
IP address blocks:        144.196.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:2a:1f:d2:cc:fc:08:8d:65:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fce33e2e-909d-4ce7-97fa-50eeb64af84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:48:37:87:0a:23:25:91:30:fc:44:e9:f6:
                    41:38:27:e9:27:55:6a:72:5f:53:24:ba:b1:a0:ee:
                    55:8c:17:05:d5:a1:8b:17:e3:66:51:cc:7a:2f:76:
                    83:bb:b9:75:20:4a:89:c4:54:ca:90:b3:c9:36:ba:
                    eb:bc:a1:44:bb:25:49:0a:94:7f:2b:5f:fc:05:b9:
                    ec:a5:7d:eb:cd:1b:e8:32:d2:a2:95:03:4c:26:f9:
                    af:02:6b:1b:bd:72:97:b4:0d:0a:1a:b4:e8:d3:48:
                    c8:98:de:83:0a:80:19:c1:81:12:30:23:30:ff:d5:
                    7c:7f:00:1d:b9:93:35:ae:7e:02:63:2b:0f:f3:06:
                    b6:74:64:97:5e:8c:3b:8e:0c:06:7a:50:9c:12:4c:
                    bf:55:47:c7:92:29:fe:8f:5a:15:59:36:af:15:51:
                    16:01:05:63:77:07:5a:2f:0f:70:d9:a3:9d:a1:7b:
                    b3:90:33:ad:7d:f6:5e:ea:f6:39:29:7c:08:b8:6e:
                    46:c6:00:48:cd:93:ee:99:13:36:8b:c6:f1:bb:79:
                    44:b8:0f:54:b3:0a:f9:68:21:10:1e:73:f4:9e:a6:
                    de:21:23:8b:ae:41:02:76:10:c4:b6:3f:04:25:78:
                    6a:71:44:c4:86:72:62:db:31:fa:e7:df:a5:af:08:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:75:B2:8D:31:67:18:FE:50:2A:5D:AC:2B:F1:29:C8:A7:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:df:f1:9e:4f:0a:03:69:c7:41:34:a1:d3:0a:c2:39:21:7e:
         68:8e:1e:24:89:cc:9c:43:14:85:b4:3c:3e:19:50:fb:28:42:
         38:a2:c4:6f:58:93:dc:6b:3a:fa:85:2b:d4:67:9f:5b:37:33:
         4f:28:00:dc:6a:ea:fa:83:a3:06:64:82:d6:fa:21:de:e2:0c:
         18:78:ae:90:25:3e:99:fe:ca:49:ce:ed:c7:c0:40:bf:8b:d5:
         71:31:5e:aa:35:a9:d4:ce:0f:eb:6b:3b:6f:2f:fa:7a:8b:26:
         12:00:b6:a9:c4:41:ea:09:2b:36:9a:14:7c:7c:9c:31:46:e2:
         9f:b0:d7:f9:7a:a1:70:0d:5c:f1:80:6d:9c:99:05:ed:83:50:
         6a:8c:75:78:89:d5:d8:d2:67:bd:b8:d4:f3:c8:6d:e3:23:d9:
         b2:59:9e:5a:10:3e:f3:7c:9b:3e:c6:44:4c:98:9a:20:41:76:
         56:85:b3:6d:d2:8b:7f:e2:fe:19:5d:6d:dc:f6:b9:6f:c3:7c:
         97:a5:be:3e:20:73:d1:4c:fe:96:c2:7e:97:71:c3:23:4e:df:
         01:08:f6:24:90:27:5b:bd:d3:95:1e:6e:e7:5b:77:0b:51:49:
         2e:22:ab:d4:0e:93:18:6d:5c:b0:71:99:df:7f:a2:f0:38:59:
         20:08:58:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmiof0sz8CI1llwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmNlMzNlMmUtOTA5ZC00Y2U3LTk3ZmEtNTBlZWI2NGFmODRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mtIN4cKIyWRMPxE6fZBOCfpJ1Vqcl9TJLqx
oO5VjBcF1aGLF+NmUcx6L3aDu7l1IEqJxFTKkLPJNrrrvKFEuyVJCpR/K1/8Bbns
pX3rzRvoMtKilQNMJvmvAmsbvXKXtA0KGrTo00jImN6DCoAZwYESMCMw/9V8fwAd
uZM1rn4CYysP8wa2dGSXXow7jgwGelCcEky/VUfHkin+j1oVWTavFVEWAQVjdwda
Lw9w2aOdoXuzkDOtffZe6vY5KXwIuG5GxgBIzZPumRM2i8bxu3lEuA9Uswr5aCEQ
HnP0nqbeISOLrkECdhDEtj8EJXhqcUTEhnJi2zH659+lrwheXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFPdbKNMWcY/lAqXawr8SnIp/JsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z
YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTf8Z5PCgNpx0E0odMKwjkhfmiOHiSJzJxDFIW0PD4ZUPsoQjiixG9Y
k9xrOvqFK9Rnn1s3M08oANxq6vqDowZkgtb6Id7iDBh4rpAlPpn+yknO7cfAQL+L
1XExXqo1qdTOD+trO28v+nqLJhIAtqnEQeoJKzaaFHx8nDFG4p+w1/l6oXANXPGA
bZyZBe2DUGqMdXiJ1djSZ7241PPIbeMj2bJZnloQPvN8mz7GREyYmiBBdlaFs23S
i3/i/hldbdz2uW/DfJelvj4gc9FM/pbCfpdxwyNO3wEI9iSQJ1u905UebudbdwtR
SS4iq9QOkxhtXLBxmd9/ovA4WSAIWJo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:10 2026 by rpki-client