Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa
File:                     3263be37-b0f0-3073-8ac2-bc56e43303c8.roa (raw, json)
Hash identifier:          0NGYz+qRcsrSCoHRTp0Y43iMP3rHYfJvYPjJADV93tM=
Subject key identifier:   70:AE:28:DB:09:F9:6C:DA:E6:28:19:A1:3B:70:8E:DC:45:13:90:6B
Certificate issuer:       /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
Certificate serial:       010D0C9F4328584F9FFDCA04A73A1AA55B776C90
Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa
Signing time:             Mon 26 Oct 2026 01:00:13 +0000
ROA not before:           Mon 26 Oct 2026 01:00:13 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     152179
IP address blocks:        131.143.170.0/24 maxlen: 24
                          131.143.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:fd:ca:04:a7:3a:1a:a5:5b:77:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
        Validity
            Not Before: Oct 26 01:00:13 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=e776a643-f088-4d88-b528-bef0c72ba1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:94:e7:6a:36:5a:fe:9b:5a:e0:04:a9:ed:
                    db:3d:69:b7:75:d0:88:73:ee:15:5f:a0:d9:be:13:
                    06:49:7d:f3:11:aa:56:eb:38:df:84:1e:38:4d:54:
                    f9:5a:a8:a3:d4:2d:5d:ee:1f:29:7c:ce:1f:83:16:
                    4a:4a:60:fb:14:ce:92:b8:ac:3a:f5:f6:d8:5e:f8:
                    ed:ab:c9:fc:23:1f:d6:0b:df:ee:62:71:75:65:89:
                    59:3d:4c:75:fe:32:8a:59:24:3a:14:b9:a6:11:0c:
                    ef:98:a1:8b:16:e3:19:aa:40:6c:92:00:3e:aa:8e:
                    c9:f9:09:70:d2:aa:df:33:7c:55:7e:8f:49:71:02:
                    8b:de:ba:fb:d2:e1:50:b8:57:f9:e6:dc:32:d8:e1:
                    1a:de:b9:4b:f3:65:48:75:64:59:89:42:47:61:9e:
                    a2:03:41:22:72:77:28:75:ee:80:ef:e1:30:9f:5b:
                    32:a6:16:d5:38:ac:a7:e6:5b:d3:89:5e:80:2e:00:
                    90:ba:72:c0:25:0a:13:c1:12:61:c7:d8:fc:90:27:
                    66:26:a1:06:51:89:d1:a7:e3:ff:db:4b:16:15:79:
                    26:a1:e7:8f:47:68:4e:1f:b6:7f:a8:b8:93:29:d7:
                    d7:16:0b:08:1a:6f:d6:7c:1e:e1:87:dd:03:91:6f:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:28:DB:09:F9:6C:DA:E6:28:19:A1:3B:70:8E:DC:45:13:90:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl

            X509v3 Authority Key Identifier:
                keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:a7:7b:91:f4:5f:61:61:82:b2:05:d8:77:82:7d:7b:01:
         14:13:e6:af:84:58:ac:bc:f8:b0:20:01:03:f7:cf:00:98:89:
         ea:bb:1d:46:3f:c7:c6:58:f9:64:f8:09:e7:e1:f2:5a:1d:77:
         6f:82:36:ab:32:d4:27:4a:3f:8a:d8:61:d4:1a:cd:68:bc:ba:
         c7:52:3b:9b:57:71:da:35:27:1b:b0:49:97:f7:c0:37:90:92:
         17:83:33:58:e2:07:22:7b:23:d1:24:a2:e7:36:ca:13:31:3e:
         3e:75:3c:be:6d:9d:5c:5f:56:d5:fe:ed:cd:35:a0:30:ac:5b:
         8a:57:05:56:21:f0:1e:2c:8e:2e:4e:01:7e:35:83:e9:68:23:
         c7:8e:4b:77:c0:c6:86:4d:05:53:1f:d9:3a:c7:d9:16:b5:67:
         e5:63:51:94:d3:b1:b2:a6:0a:03:8a:ef:fc:0f:0d:6f:92:28:
         78:1c:40:9a:cc:c0:e1:c1:07:87:c7:b1:7c:df:73:31:e2:ec:
         58:86:24:e7:5b:90:27:e0:35:8b:9d:9f:a1:77:c1:70:4d:41:
         b7:63:ce:91:9f:a1:af:43:42:2c:b2:5a:6b:49:37:8a:a8:65:
         6e:e2:8d:93:67:a0:26:3c:e7:f9:fc:ab:0f:56:a1:2a:f1:dd:
         fd:63:b7:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/coEpzoapVt3bJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmZTNmNWUtN2JiYS00NzYzLTg0YWQtNDU3NTA2NmZi
NDZlMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk
ZTc3NmE2NDMtZjA4OC00ZDg4LWI1MjgtYmVmMGM3MmJhMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUWU52o2Wv6bWuAEqe3bPWm3ddCIc+4VX6DZ
vhMGSX3zEapW6zjfhB44TVT5Wqij1C1d7h8pfM4fgxZKSmD7FM6SuKw69fbYXvjt
q8n8Ix/WC9/uYnF1ZYlZPUx1/jKKWSQ6FLmmEQzvmKGLFuMZqkBskgA+qo7J+Qlw
0qrfM3xVfo9JcQKL3rr70uFQuFf55twy2OEa3rlL82VIdWRZiUJHYZ6iA0Eicnco
de6A7+Ewn1syphbVOKyn5lvTiV6ALgCQunLAJQoTwRJhx9j8kCdmJqEGUYnRp+P/
20sWFXkmoeePR2hOH7Z/qLiTKdfXFgsIGm/WfB7hh90DkW/4TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCuKNsJ+Wza5igZoTtwjtxFE5BrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWZl
M2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1MDY2ZmI0NmUvMzI2M2JlMzctYjBmMC0z
MDczLThhYzItYmM1NmU0MzMwM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDlmZTNmNWUtN2JiYS00NzYzLTg0
YWQtNDU3NTA2NmZiNDZlL2Q5ZmUzZjVlLTdiYmEtNDc2My04NGFkLTQ1NzUwNjZm
YjQ2ZS5jcmwwHwYDVR0jBBgwFoAUFzP/zEq5l7KndDtZUyAbGuFmo04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kOWZlM2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1
MDY2ZmI0NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg4+qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAS9p3uR9F9hYYKyBdh3gn17ARQT5q+EWKy8+LAgAQP3zwCYieq7HUY/
x8ZY+WT4Cefh8lodd2+CNqsy1CdKP4rYYdQazWi8usdSO5tXcdo1JxuwSZf3wDeQ
kheDM1jiByJ7I9Ekouc2yhMxPj51PL5tnVxfVtX+7c01oDCsW4pXBVYh8B4sji5O
AX41g+loI8eOS3fAxoZNBVMf2TrH2Ra1Z+VjUZTTsbKmCgOK7/wPDW+SKHgcQJrM
wOHBB4fHsXzfczHi7FiGJOdbkCfgNYudn6F3wXBNQbdjzpGfoa9DQiyyWmtJN4qo
ZW7ijZNnoCY85/n8qw9WoSrx3f1jt9U=
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:38:28 2026 by rpki-client