Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/6efd752a-3b14-3505-a2e4-fc8ccddb6fa0.roa
File:                     6efd752a-3b14-3505-a2e4-fc8ccddb6fa0.roa (raw, json)
Hash identifier:          A74oLJacZR39/H5WQdS9m5oJSnB27mk0KH62qZBfTN4=
Subject key identifier:   3E:EB:A4:81:75:30:51:B2:3D:5A:7E:0A:3B:2B:21:55:B3:A7:E4:4D
Certificate issuer:       /CN=98bb1a5e-296b-4265-806f-5bfbd7773fb7
Certificate serial:       010D0C9F4328584F90A2F892938D69FE130E1410
Authority key identifier: 34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/6efd752a-3b14-3505-a2e4-fc8ccddb6fa0.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     6079
IP address blocks:        131.143.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a2:f8:92:93:8d:69:fe:13:0e:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bb1a5e-296b-4265-806f-5bfbd7773fb7
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=6fffb05b-cec1-4076-bbdf-c2efca5ac6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:b4:e1:c7:3f:9f:86:91:33:d2:5d:b8:a2:
                    06:01:03:e3:a1:c6:88:de:6c:bd:32:82:bc:6b:2e:
                    f0:a1:03:8a:58:c3:19:0c:64:49:52:02:4e:14:d6:
                    9a:41:f7:f5:5f:10:84:74:49:d9:66:de:9b:b9:09:
                    28:55:91:38:8a:78:6c:23:3b:26:c7:6c:a2:34:81:
                    1e:91:78:54:5b:55:9f:0f:a8:1d:6f:9c:8e:2e:77:
                    18:2c:6f:ea:76:5f:dc:ff:5e:82:72:6b:de:ad:a5:
                    40:43:93:8e:05:e7:02:ad:b4:59:78:59:8b:4c:9d:
                    20:30:32:41:10:d1:5d:35:0b:48:5a:84:de:c7:9d:
                    43:c1:87:09:80:f8:ef:3e:65:c4:69:55:e0:6b:bd:
                    11:ac:ee:66:df:e5:4c:23:03:df:5c:09:a0:ca:ac:
                    c1:06:e3:0c:b5:3d:8c:29:dd:80:da:cc:bb:68:56:
                    ec:46:ef:04:b4:8b:47:e4:6d:73:ac:ad:2f:51:f8:
                    ef:c1:a4:e8:09:04:7a:20:aa:d6:36:73:22:2a:06:
                    a6:4e:8c:a7:5e:b7:7a:4d:af:de:4b:94:3c:a7:8c:
                    29:a1:4d:1a:fe:4b:2b:ee:d2:2a:6e:76:a4:c1:a8:
                    73:aa:8c:0b:8e:1b:e5:88:78:2f:78:2d:a1:9e:54:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:A4:81:75:30:51:B2:3D:5A:7E:0A:3B:2B:21:55:B3:A7:E4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/6efd752a-3b14-3505-a2e4-fc8ccddb6fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7/98bb1a5e-296b-4265-806f-5bfbd7773fb7.crl

            X509v3 Authority Key Identifier:
                keyid:34:AD:46:B4:D3:2F:57:24:80:23:A9:28:49:2F:B0:61:CE:E5:FD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/98bb1a5e-296b-4265-806f-5bfbd7773fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:73:be:5f:ab:41:66:47:03:98:f0:af:0a:1d:a0:27:85:16:
         7d:ad:0f:08:0a:0a:c1:d6:6e:08:2c:d4:22:e3:4b:b0:c4:c4:
         97:0f:ea:88:4a:55:3b:98:ad:4f:89:99:a0:e5:d6:44:ee:c8:
         c1:73:4d:16:fe:23:5f:05:cb:ad:dd:a9:cb:62:d2:c5:84:8f:
         82:2c:2a:0a:c1:7a:1b:b5:ff:a8:66:9a:00:72:99:4e:37:a6:
         54:03:94:7e:ff:e9:77:c2:9e:fc:13:b7:7c:25:44:9c:cf:b0:
         4a:ca:69:a3:bb:4d:62:49:17:55:c2:43:0a:c7:c5:8b:bf:26:
         0e:1a:78:8f:28:1c:e3:9b:08:7f:05:30:f1:cd:eb:0b:55:03:
         64:70:31:31:3c:cd:1b:68:82:89:11:7d:29:40:a4:fd:34:f3:
         1b:27:d4:f1:24:7f:88:7a:c5:6b:1b:de:01:b9:23:16:f9:7d:
         4c:24:5b:99:76:47:be:09:42:f8:77:d2:d2:7b:0e:10:b2:a6:
         85:3f:e0:d1:92:d3:a4:a7:33:b4:4e:42:1c:de:3a:a9:fa:91:
         52:da:cc:c8:ca:ae:f2:b2:ae:83:4a:b1:15:23:97:b9:ea:16:
         bf:26:be:94:24:5a:d0:ff:b0:a4:1e:9c:34:4b:7e:97:53:3b:
         90:98:72:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoviSk41p/hMOFBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThiYjFhNWUtMjk2Yi00MjY1LTgwNmYtNWJmYmQ3Nzcz
ZmI3MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk
NmZmZmIwNWItY2VjMS00MDc2LWJiZGYtYzJlZmNhNWFjNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNi04cc/n4aRM9JduKIGAQPjocaI3my9MoK8
ay7woQOKWMMZDGRJUgJOFNaaQff1XxCEdEnZZt6buQkoVZE4inhsIzsmx2yiNIEe
kXhUW1WfD6gdb5yOLncYLG/qdl/c/16CcmveraVAQ5OOBecCrbRZeFmLTJ0gMDJB
ENFdNQtIWoTex51DwYcJgPjvPmXEaVXga70RrO5m3+VMIwPfXAmgyqzBBuMMtT2M
Kd2A2sy7aFbsRu8EtItH5G1zrK0vUfjvwaToCQR6IKrWNnMiKgamToynXrd6Ta/e
S5Q8p4wpoU0a/ksr7tIqbnakwahzqowLjhvliHgveC2hnlSKkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7rpIF1MFGyPVp+CjsrIVWzp+RNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85OGJi
MWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZiZDc3NzNmYjcvNmVmZDc1MmEtM2IxNC0z
NTA1LWEyZTQtZmM4Y2NkZGI2ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOThiYjFhNWUtMjk2Yi00MjY1LTgw
NmYtNWJmYmQ3NzczZmI3Lzk4YmIxYTVlLTI5NmItNDI2NS04MDZmLTViZmJkNzc3
M2ZiNy5jcmwwHwYDVR0jBBgwFoAUNK1GtNMvVySAI6koSS+wYc7l/ZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85OGJiMWE1ZS0yOTZiLTQyNjUtODA2Zi01YmZi
ZDc3NzNmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg494MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhzvl+rQWZHA5jwrwodoCeFFn2tDwgKCsHWbggs1CLjS7DExJcP6ohK
VTuYrU+JmaDl1kTuyMFzTRb+I18Fy63dqcti0sWEj4IsKgrBehu1/6hmmgBymU43
plQDlH7/6XfCnvwTt3wlRJzPsErKaaO7TWJJF1XCQwrHxYu/Jg4aeI8oHOObCH8F
MPHN6wtVA2RwMTE8zRtogokRfSlApP008xsn1PEkf4h6xWsb3gG5Ixb5fUwkW5l2
R74JQvh30tJ7DhCypoU/4NGS06SnM7ROQhzeOqn6kVLazMjKrvKyroNKsRUjl7nq
Fr8mvpQkWtD/sKQenDRLfpdTO5CYcjk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:06 2026 by rpki-client