Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
File:                     bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa (raw, json)
Hash identifier:          BcXqpPLVEhpCAK3X55MNFR8Vugfzt+qtq66BCa4Zkww=
Subject key identifier:   61:35:C4:66:B1:02:1A:90:E4:B1:78:87:D9:56:F6:4D:C4:74:C8:9E
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F2957C34D62D796F9BD85A500
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        163.129.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c3:4d:62:d7:96:f9:bd:85:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=11349c49-e212-4e03-8ed0-59cb2875ef58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:e2:a6:9f:c2:5e:8a:5a:e7:dc:e5:f0:66:
                    4f:52:cf:da:5a:cb:e7:10:8e:cb:a4:7d:35:e8:57:
                    f5:b8:56:2a:b2:21:42:a9:d5:47:48:36:28:d3:51:
                    a4:d8:ea:60:1a:f0:e7:f3:a2:34:8c:30:df:b4:09:
                    f3:d7:fb:da:38:65:9c:12:6b:28:10:ec:26:0d:7b:
                    06:7d:bd:c7:78:fc:95:1a:f6:6c:ad:69:a4:f7:ca:
                    0f:1a:59:0f:43:11:bc:75:f7:82:d8:1f:d8:1e:22:
                    c6:d1:0a:c9:7b:9e:5c:72:5c:d7:bd:b7:9c:f2:e5:
                    e1:64:ac:ec:f8:c7:82:8b:2d:3a:d4:84:70:57:0f:
                    49:98:9f:55:9f:cd:56:59:22:b2:4b:81:82:37:34:
                    08:f7:2a:5d:8a:74:51:9b:92:76:9f:da:fa:c9:72:
                    eb:0e:03:d7:80:49:90:80:68:ae:6e:76:a4:4d:dd:
                    91:b0:3a:46:8c:ff:41:e1:5f:2b:ee:51:b1:72:e9:
                    87:bd:74:78:9b:bb:4d:4a:6c:4e:7d:a0:a5:e1:46:
                    17:33:86:c2:cd:5e:d1:09:06:90:f8:1d:6b:9b:d4:
                    f7:ef:74:b4:a9:c8:3a:03:01:2f:12:13:47:d2:2e:
                    49:9b:f5:4a:24:38:3a:6b:59:3a:5d:e4:62:29:fd:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:C4:66:B1:02:1A:90:E4:B1:78:87:D9:56:F6:4D:C4:74:C8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/bb544a06-0da6-3c57-b9ab-0d7694546f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.129.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c8:dd:e1:ae:f5:76:a8:b1:ae:b1:26:71:58:b7:38:a6:57:
         c3:bd:b8:ca:71:99:2e:c3:7f:36:eb:3a:f6:fa:0c:b4:cb:8c:
         4c:41:2d:12:c2:26:2e:69:89:ac:34:a4:3c:2b:ba:f4:da:45:
         b0:3d:26:ea:93:87:ae:d6:38:61:e0:72:3f:6f:b2:33:6f:3b:
         f2:ce:60:d7:53:42:5a:64:79:c3:10:37:53:4a:87:7c:14:97:
         a9:8b:f8:72:68:02:d0:70:32:48:e5:96:33:c7:e1:eb:60:66:
         37:94:bd:aa:8d:dd:17:d3:aa:d0:16:3e:09:e0:f4:ed:38:02:
         d0:50:db:98:39:d8:87:c1:d1:76:d8:3e:76:d2:fe:c4:b5:c5:
         cf:0d:3a:bb:4e:f7:15:12:97:4d:21:3e:5a:4f:ca:fe:75:b0:
         d5:0a:01:96:52:0e:29:5d:21:1a:9f:a2:d9:c8:97:a1:fa:d0:
         e8:0f:61:9d:94:8d:52:f1:e1:df:7e:93:64:d8:7e:74:a1:be:
         2e:01:ac:5e:76:73:b1:79:37:9a:ae:c6:99:50:e8:7e:3c:da:
         8f:a7:c9:a6:a4:a3:61:02:ca:1b:59:13:7c:14:a6:e1:71:47:
         5f:c5:6e:38:18:80:b5:18:e9:85:a2:4e:35:0c:d6:c1:cf:c9:
         3b:dc:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:36:41 2026 by rpki-client