Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa
File:                     3263be37-b0f0-3073-8ac2-bc56e43303c8.roa (raw, json)
Hash identifier:          o7na2lWL3NinC5OjDgQVVjKl25tREv8/fe9exOBRTSs=
Subject key identifier:   38:B8:91:F9:B9:8B:5C:C1:99:79:69:FD:74:5B:E8:DD:E3:87:D3:21
Certificate issuer:       /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
Certificate serial:       010D0C9F4328584EFE121B8A2D9283EB4D26EFE0
Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     152179
IP address blocks:        131.143.170.0/24 maxlen: 24
                          131.143.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:8a:2d:92:83:eb:4d:26:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=b1c101de-bb54-49b5-9358-81b9783d52d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:cd:55:fa:4f:a0:ab:56:45:11:d6:d6:32:
                    77:18:6c:49:e2:92:a6:e8:18:a8:7e:0d:50:0c:38:
                    23:8e:9e:f0:de:3f:cc:db:9d:95:1b:f9:36:e6:66:
                    f7:8b:e8:3c:ab:b5:c6:92:cb:c9:65:f5:58:a6:d8:
                    e4:4d:e6:07:87:2d:59:a9:af:d8:8b:c1:61:d0:cf:
                    6f:91:fa:49:8b:c8:db:32:2a:ea:60:a1:92:fe:e2:
                    df:ed:ee:61:7f:fb:a2:a6:d7:bb:24:ec:9c:ec:03:
                    16:63:23:6e:b5:53:54:9f:3f:a7:a5:ca:b8:a3:7e:
                    ed:c7:0f:0f:e3:34:f3:09:de:52:35:fc:0f:84:f9:
                    db:99:18:2d:4b:df:ea:cd:eb:95:16:98:71:e0:fd:
                    86:28:af:a2:c4:86:94:ed:db:cd:04:28:be:6d:7a:
                    77:29:73:65:60:f8:49:80:e9:07:23:c6:2a:a8:61:
                    a3:58:68:1b:51:82:f9:c1:63:e2:0a:ae:03:ee:13:
                    7c:ac:42:d3:4a:eb:8b:c6:25:21:b7:b6:42:60:aa:
                    b6:48:f0:a7:dd:88:9f:5d:1f:ba:ee:c2:fe:b0:72:
                    30:d1:a5:9c:ef:3e:1c:8e:66:f8:a1:46:c5:a0:4a:
                    90:a5:c3:44:ac:65:3b:75:ba:69:06:04:40:ac:c5:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:91:F9:B9:8B:5C:C1:99:79:69:FD:74:5B:E8:DD:E3:87:D3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/3263be37-b0f0-3073-8ac2-bc56e43303c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl

            X509v3 Authority Key Identifier:
                keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:33:9c:6f:f3:ee:d0:c9:52:31:65:1d:bf:ba:4b:62:74:3f:
         6a:6d:17:38:2d:e7:f4:5b:7a:9f:57:34:8e:37:95:6b:dd:3f:
         d0:03:7c:37:25:2f:fe:d0:31:97:97:46:94:ce:e3:a1:20:93:
         c2:f9:19:24:90:41:c2:52:dd:cf:4f:de:70:61:d6:c4:6f:4b:
         7f:c6:86:1b:cb:76:4d:ee:4b:86:b7:90:ea:58:d7:88:13:e1:
         1b:1d:af:cb:c5:a3:fa:6f:1b:a4:79:8d:69:7d:53:eb:5d:b9:
         73:2d:8b:a1:5d:44:9e:fc:16:5e:41:21:d7:2a:ba:e7:c1:8d:
         87:f8:38:84:70:40:b2:2a:0f:c5:1d:97:c9:a0:27:b0:02:a9:
         54:bd:5f:66:ed:db:59:f7:84:d9:50:c2:c0:16:ec:e0:76:7c:
         48:8f:6d:50:52:f7:a9:b7:3e:35:b5:94:53:02:c4:c4:37:ff:
         9c:63:f2:a9:03:8e:00:c5:a9:d6:54:67:d8:a1:eb:02:57:b8:
         b5:5d:2c:a1:21:b6:69:20:e2:0e:36:bf:f0:2a:63:14:75:14:
         5f:23:5e:bf:64:5b:87:7b:b5:eb:f1:7d:65:1a:8b:af:a5:a2:
         c8:d9:8f:a0:68:2e:b0:80:12:24:0b:af:a2:e2:41:0a:6f:02:
         a3:34:fa:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhuKLZKD600m7+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmZTNmNWUtN2JiYS00NzYzLTg0YWQtNDU3NTA2NmZi
NDZlMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
YjFjMTAxZGUtYmI1NC00OWI1LTkzNTgtODFiOTc4M2Q1MmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEXNVfpPoKtWRRHW1jJ3GGxJ4pKm6Biofg1Q
DDgjjp7w3j/M252VG/k25mb3i+g8q7XGksvJZfVYptjkTeYHhy1Zqa/Yi8Fh0M9v
kfpJi8jbMirqYKGS/uLf7e5hf/uipte7JOyc7AMWYyNutVNUnz+npcq4o37txw8P
4zTzCd5SNfwPhPnbmRgtS9/qzeuVFphx4P2GKK+ixIaU7dvNBCi+bXp3KXNlYPhJ
gOkHI8YqqGGjWGgbUYL5wWPiCq4D7hN8rELTSuuLxiUht7ZCYKq2SPCn3YifXR+6
7sL+sHIw0aWc7z4cjmb4oUbFoEqQpcNErGU7dbppBgRArMXmPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDi4kfm5i1zBmXlp/XRb6N3jh9MhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWZl
M2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1MDY2ZmI0NmUvMzI2M2JlMzctYjBmMC0z
MDczLThhYzItYmM1NmU0MzMwM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDlmZTNmNWUtN2JiYS00NzYzLTg0
YWQtNDU3NTA2NmZiNDZlL2Q5ZmUzZjVlLTdiYmEtNDc2My04NGFkLTQ1NzUwNjZm
YjQ2ZS5jcmwwHwYDVR0jBBgwFoAUFzP/zEq5l7KndDtZUyAbGuFmo04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kOWZlM2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1
MDY2ZmI0NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg4+qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAznG/z7tDJUjFlHb+6S2J0P2ptFzgt5/Rbep9XNI43lWvdP9ADfDcl
L/7QMZeXRpTO46Egk8L5GSSQQcJS3c9P3nBh1sRvS3/GhhvLdk3uS4a3kOpY14gT
4Rsdr8vFo/pvG6R5jWl9U+tduXMti6FdRJ78Fl5BIdcquufBjYf4OIRwQLIqD8Ud
l8mgJ7ACqVS9X2bt21n3hNlQwsAW7OB2fEiPbVBS96m3PjW1lFMCxMQ3/5xj8qkD
jgDFqdZUZ9ih6wJXuLVdLKEhtmkg4g42v/AqYxR1FF8jXr9kW4d7tevxfWUai6+l
osjZj6BoLrCAEiQLr6LiQQpvAqM0+rI=
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:21:57 2026 by rpki-client