Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa
File:                     8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa (raw, json)
Hash identifier:          sfqlA2nx53pXr3xBhAroHPJr+xLns0t2QRaQy4wl/VE=
Subject key identifier:   FE:2D:07:CB:31:77:F6:B3:4E:8C:A2:51:0A:F8:F7:CF:C7:90:A6:B7
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584F778366BE9BAB569719C2EC80
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     10111
IP address blocks:        131.143.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:66:be:9b:ab:56:97:19:c2:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=31ff9d53-5939-440c-8c86-6e21c01ad571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:54:f0:a1:64:85:81:d4:b1:e1:4f:7c:f0:
                    47:c5:4d:e3:9e:20:ef:40:b5:1a:47:20:89:77:6f:
                    92:32:1e:56:da:25:0c:f9:a4:65:a0:4d:01:3d:f1:
                    3c:98:a0:60:aa:1b:59:b7:0b:4d:14:d2:a4:13:e9:
                    a1:e4:d6:01:92:19:92:1a:1c:09:f3:fe:ed:55:9f:
                    98:73:cd:5a:c0:b7:58:92:d1:67:bf:87:f6:74:ff:
                    9a:58:af:55:77:a1:0e:47:f4:4d:d8:a5:d6:c3:31:
                    09:ea:ff:18:31:5e:c5:00:b6:5f:68:6b:86:e5:85:
                    0d:3a:70:a8:2e:ac:7f:fe:0c:bd:c6:fd:dc:5b:c2:
                    e1:72:e7:8c:f6:d8:1f:f6:d5:ba:09:5f:2d:57:18:
                    f9:2a:5f:7a:38:bf:e9:7a:17:2a:16:56:d3:35:1d:
                    4e:ba:53:4a:b5:ee:ab:bc:d0:5e:e7:ab:c6:c3:16:
                    c2:d6:09:db:e3:48:04:60:d6:32:59:84:c4:71:d7:
                    16:54:81:49:e6:2a:db:79:d0:6e:4b:74:17:fc:56:
                    c9:a5:4d:b9:46:9b:cb:33:37:5e:79:7a:ca:8b:c7:
                    9f:3a:07:03:e1:38:d3:c7:be:b2:e4:db:e8:1b:4a:
                    a7:22:4e:98:9f:9c:57:9e:05:7f:c3:58:56:14:7d:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:07:CB:31:77:F6:B3:4E:8C:A2:51:0A:F8:F7:CF:C7:90:A6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:85:de:31:5d:84:d3:80:f0:46:a7:3c:88:74:d0:ad:37:ec:
         3e:64:40:f0:60:42:cb:9c:3b:f8:8e:c7:81:00:11:de:d0:3e:
         07:69:0f:01:2f:8d:f2:63:33:3f:48:f2:f1:56:65:2a:78:7a:
         e2:e0:95:d1:da:76:2d:cd:7b:19:48:bb:e8:0a:b1:ce:94:86:
         12:2e:0b:38:a1:9b:e1:38:c6:2a:ee:c0:f4:1d:3c:87:d7:b4:
         99:64:dd:fc:87:a8:6c:5e:6d:7a:eb:d7:38:99:4a:65:60:4a:
         10:0d:9b:60:e6:32:54:d1:da:e6:c3:7d:1f:1f:7a:76:bb:8c:
         40:07:6a:ae:a3:b1:c2:de:41:99:3a:53:74:a9:91:2c:4b:2c:
         e7:6d:86:4b:bb:e5:4a:82:65:5e:0a:1a:18:5d:06:e3:b5:75:
         d1:3a:74:95:81:dc:52:32:d4:4c:c9:e0:1b:64:d1:5c:6b:cc:
         3b:dc:89:13:4e:36:36:a4:43:7e:8c:c8:06:7f:89:92:33:f0:
         6d:c0:53:64:00:86:78:07:82:ef:47:67:b2:9f:ad:98:0f:56:
         f1:18:dc:c1:96:65:b5:17:34:9d:13:d0:87:ff:15:78:bb:7d:
         dc:81:5d:a8:4d:49:c3:00:81:09:7e:f7:a3:74:df:0c:12:9c:
         ff:ec:91:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2a+m6tWlxnC7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg4MmFjNjctOTZiYy00M2JhLWIwNmUtYzJmNTMzYzg1
MmY0MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MzFmZjlkNTMtNTkzOS00NDBjLThjODYtNmUyMWMwMWFkNTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqhU8KFkhYHUseFPfPBHxU3jniDvQLUaRyCJ
d2+SMh5W2iUM+aRloE0BPfE8mKBgqhtZtwtNFNKkE+mh5NYBkhmSGhwJ8/7tVZ+Y
c81awLdYktFnv4f2dP+aWK9Vd6EOR/RN2KXWwzEJ6v8YMV7FALZfaGuG5YUNOnCo
Lqx//gy9xv3cW8LhcueM9tgf9tW6CV8tVxj5Kl96OL/pehcqFlbTNR1OulNKte6r
vNBe56vGwxbC1gnb40gEYNYyWYTEcdcWVIFJ5irbedBuS3QX/FbJpU25RpvLMzde
eXrKi8efOgcD4TjTx76y5NvoG0qnIk6Yn5xXngV/w1hWFH1ddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4tB8sxd/azToyiUQr498/HkKa3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODgy
YWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1MzNjODUyZjQvOGFmZmQ4YTUtNTA3ZC0z
MWQ1LTg2ZmUtZDdmZDg5YmQ2NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjg4MmFjNjctOTZiYy00M2JhLWIw
NmUtYzJmNTMzYzg1MmY0LzI4ODJhYzY3LTk2YmMtNDNiYS1iMDZlLWMyZjUzM2M4
NTJmNC5jcmwwHwYDVR0jBBgwFoAUzMgpXPbSbm1R4oeTRWf1hotLHrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODgyYWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1
MzNjODUyZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2F3jFdhNOA8EanPIh00K037D5kQPBgQsucO/iOx4EAEd7QPgdpDwEv
jfJjMz9I8vFWZSp4euLgldHadi3NexlIu+gKsc6UhhIuCzihm+E4xiruwPQdPIfX
tJlk3fyHqGxebXrr1ziZSmVgShANm2DmMlTR2ubDfR8fena7jEAHaq6jscLeQZk6
U3SpkSxLLOdthku75UqCZV4KGhhdBuO1ddE6dJWB3FIy1EzJ4Btk0VxrzDvciRNO
NjakQ36MyAZ/iZIz8G3AU2QAhngHgu9HZ7KfrZgPVvEY3MGWZbUXNJ0T0If/FXi7
fdyBXahNScMAgQl+96N03wwSnP/skRc=
-----END CERTIFICATE-----
Generated at Mon Nov 2 23:41:50 2026 by rpki-client