Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa
File:                     e3867801-adb1-3f01-b7b4-25206f7298ca.roa (raw, json)
Hash identifier:          qBAJGARjQfqI+kOmyKW84aQJqZ1U5yq9L/j/7xnk86o=
Subject key identifier:   11:22:5E:13:1E:F8:00:7F:57:00:4D:2B:4B:1B:92:53:C7:AC:22:9D
Certificate issuer:       /CN=e734f405-fad0-4043-a254-832503e4ef89
Certificate serial:       010D0C9F4328584F698D6CBDC2DA77CE531D6660
Authority key identifier: B5:06:B6:CA:F2:D7:96:B6:E0:74:F9:A1:5C:5D:1F:43:ED:45:E5:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     32115
IP address blocks:        131.143.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:6c:bd:c2:da:77:ce:53:1d:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e734f405-fad0-4043-a254-832503e4ef89
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=1c3a266c-5ee7-45d6-8f7b-cc95b41d2c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:c1:db:6c:a7:9d:76:f8:fe:e4:20:54:95:
                    fe:12:3a:58:5d:0e:d1:91:db:46:f6:72:aa:7e:7b:
                    fa:91:9b:1b:f6:a0:25:2d:cf:c0:30:29:43:0b:21:
                    9a:ae:5d:62:69:69:16:14:5f:50:91:9e:24:f9:7a:
                    81:94:83:76:d3:5a:f0:82:68:9f:78:b9:b0:35:cd:
                    40:bc:bf:76:6b:c0:bd:12:df:cf:4c:7b:65:dd:63:
                    18:e3:37:ed:3b:2d:73:25:98:ba:28:b7:19:a8:ce:
                    f6:6b:96:2b:21:52:0e:86:9e:a8:b2:74:53:ee:d9:
                    16:61:08:07:98:fa:65:99:4f:8f:68:d5:35:80:08:
                    fd:55:9a:40:30:40:e3:b1:ba:bf:18:ea:e7:d4:5c:
                    fa:81:3a:f1:e3:4a:b6:22:f1:83:11:86:4f:f7:a6:
                    b0:6e:74:a4:9f:25:a0:04:46:e9:15:1e:cd:12:43:
                    18:3d:84:a3:85:74:7b:f5:94:8e:70:6e:16:c0:39:
                    01:f2:d0:64:d9:1c:e5:fd:05:37:12:65:7c:a7:24:
                    5a:68:ff:a1:9f:9a:04:0a:1d:06:9c:d5:5c:e9:cd:
                    d7:29:8c:19:28:49:6c:0b:ec:51:d8:fa:dc:6d:68:
                    69:ed:78:01:81:2d:95:f7:78:ae:f0:71:da:4f:f0:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:5E:13:1E:F8:00:7F:57:00:4D:2B:4B:1B:92:53:C7:AC:22:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.crl

            X509v3 Authority Key Identifier:
                keyid:B5:06:B6:CA:F2:D7:96:B6:E0:74:F9:A1:5C:5D:1F:43:ED:45:E5:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:44:69:25:dd:ed:c1:e3:a2:7d:35:c4:c8:48:4a:c5:64:
         12:f3:68:7c:0d:fe:4d:1e:36:b9:53:34:78:a3:ed:3c:cf:39:
         9d:79:45:4e:62:e3:2d:a3:51:53:ec:5a:44:f5:a1:b8:60:86:
         7c:87:24:6b:ca:06:7b:3a:ce:24:89:22:74:1c:35:81:72:ee:
         7a:12:d4:c5:88:5c:da:23:0a:dd:a4:02:03:41:8f:5b:0b:96:
         8f:3f:08:dd:3d:8d:a6:a2:d7:f7:f4:e9:77:8e:4b:18:c5:0f:
         34:0b:63:d5:71:01:98:76:18:57:fe:d6:d8:8a:b9:5b:7f:f9:
         3e:b6:a5:99:e7:c7:84:73:2b:aa:f9:08:bf:84:50:7f:ad:7a:
         73:54:28:42:be:6e:0d:af:dd:14:08:6a:e0:d4:cd:c6:55:f8:
         8c:85:03:8c:e6:5c:82:92:b9:75:e1:4e:33:ca:88:ad:6f:e9:
         43:78:89:64:54:17:c9:d0:1f:0a:ec:5d:cd:a7:2e:28:1f:d4:
         44:3b:61:c4:54:15:bc:2b:98:81:b7:1a:cb:2a:19:f9:6f:13:
         93:d8:cf:38:d9:b1:bb:b0:2c:df:1c:ad:0c:26:a5:3d:2a:36:
         c8:fe:03:1e:77:7e:41:fa:3b:b9:65:40:81:3d:99:7e:56:db:
         9b:b4:16:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWy9wtp3zlMdZmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTczNGY0MDUtZmFkMC00MDQzLWEyNTQtODMyNTAzZTRl
Zjg5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
MWMzYTI2NmMtNWVlNy00NWQ2LThmN2ItY2M5NWI0MWQyYzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GDB22ynnXb4/uQgVJX+EjpYXQ7RkdtG9nKq
fnv6kZsb9qAlLc/AMClDCyGarl1iaWkWFF9QkZ4k+XqBlIN201rwgmifeLmwNc1A
vL92a8C9Et/PTHtl3WMY4zftOy1zJZi6KLcZqM72a5YrIVIOhp6osnRT7tkWYQgH
mPplmU+PaNU1gAj9VZpAMEDjsbq/GOrn1Fz6gTrx40q2IvGDEYZP96awbnSknyWg
BEbpFR7NEkMYPYSjhXR79ZSOcG4WwDkB8tBk2Rzl/QU3EmV8pyRaaP+hn5oECh0G
nNVc6c3XKYwZKElsC+xR2PrcbWhp7XgBgS2V93iu8HHaT/CcGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEiXhMe+AB/VwBNK0sbklPHrCKdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNzM0
ZjQwNS1mYWQwLTQwNDMtYTI1NC04MzI1MDNlNGVmODkvZTM4Njc4MDEtYWRiMS0z
ZjAxLWI3YjQtMjUyMDZmNzI5OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTczNGY0MDUtZmFkMC00MDQzLWEy
NTQtODMyNTAzZTRlZjg5L2U3MzRmNDA1LWZhZDAtNDA0My1hMjU0LTgzMjUwM2U0
ZWY4OS5jcmwwHwYDVR0jBBgwFoAUtQa2yvLXlrbgdPmhXF0fQ+1F5YMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNzM0ZjQwNS1mYWQwLTQwNDMtYTI1NC04MzI1
MDNlNGVmODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg49MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsGRGkl3e3B46J9NcTISErFZBLzaHwN/k0eNrlTNHij7TzPOZ15RU5i
4y2jUVPsWkT1obhghnyHJGvKBns6ziSJInQcNYFy7noS1MWIXNojCt2kAgNBj1sL
lo8/CN09jaai1/f06XeOSxjFDzQLY9VxAZh2GFf+1tiKuVt/+T62pZnnx4RzK6r5
CL+EUH+tenNUKEK+bg2v3RQIauDUzcZV+IyFA4zmXIKSuXXhTjPKiK1v6UN4iWRU
F8nQHwrsXc2nLigf1EQ7YcRUFbwrmIG3GssqGflvE5PYzzjZsbuwLN8crQwmpT0q
Nsj+Ax53fkH6O7llQIE9mX5W25u0Fok=
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:50:23 2026 by rpki-client