Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5b265e73-33d6-3acb-9432-c2ec6d90bbae.roa
File:                     5b265e73-33d6-3acb-9432-c2ec6d90bbae.roa (raw, json)
Hash identifier:          e5H9rlCnfjaKX6PFOXQeOS8jbpOlM6iA5naBAwG0QsA=
Subject key identifier:   96:BF:D0:5E:05:48:70:71:C6:94:80:06:49:44:2D:0C:43:F9:07:8A
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584D95EFF6892771F11A754F2640
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5b265e73-33d6-3acb-9432-c2ec6d90bbae.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     18434
IP address blocks:        63.141.160.0/24 maxlen: 24
                          63.141.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f6:89:27:71:f1:1a:75:4f:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=89262d27-b4dd-4380-aa8a-8f0009be6c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:72:e2:e4:7f:c9:52:d8:5c:d9:7c:e9:97:
                    dc:e2:06:2d:21:05:98:f8:ec:25:8e:71:f9:fb:d6:
                    04:93:9a:4b:bb:ad:e2:93:bc:60:ce:1a:75:b7:79:
                    d4:00:52:05:e1:41:79:90:27:a1:87:c1:c3:13:20:
                    91:b3:ed:35:78:54:55:42:ab:c6:93:da:1e:8c:02:
                    fd:79:6f:b3:0f:4c:18:65:21:23:04:16:9c:35:c2:
                    e0:f9:9d:c3:e5:2c:6f:d2:a1:d1:66:4b:9f:65:0c:
                    23:9b:ad:64:b7:08:fd:26:58:dc:37:f1:9e:3e:99:
                    1d:66:4c:0a:48:77:0c:72:17:44:ff:32:df:47:6b:
                    e8:08:13:3b:d1:45:d8:09:a1:b3:38:37:bc:36:1d:
                    b5:5d:4f:af:9f:02:bb:dd:56:32:8c:83:64:92:90:
                    3a:8f:ef:57:16:21:51:a2:be:cd:a9:9b:c7:94:4d:
                    ce:83:be:23:51:f3:c9:9b:eb:f8:4f:f9:9f:81:2b:
                    04:44:a6:85:8c:da:77:0d:f4:0a:65:d1:9b:2c:05:
                    68:14:2d:8d:6b:f6:1f:a2:3a:21:32:27:f8:0d:51:
                    41:4e:89:cb:f4:47:20:72:55:02:96:b1:51:df:8a:
                    ac:f3:b7:70:46:a7:8a:42:06:ac:bb:86:16:5f:94:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BF:D0:5E:05:48:70:71:C6:94:80:06:49:44:2D:0C:43:F9:07:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5b265e73-33d6-3acb-9432-c2ec6d90bbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:bf:a9:30:58:45:4b:f4:86:3c:f3:f8:cf:a9:bd:df:f3:
         a1:f6:b7:5d:fa:07:bf:17:ed:60:84:33:6b:63:d2:13:23:8d:
         51:af:f4:87:e9:99:22:1e:f5:0f:34:aa:f8:27:5e:a5:e3:36:
         a8:7d:f1:d2:b2:75:5e:78:d2:df:c3:58:32:76:06:d6:22:80:
         77:6f:0e:e2:6c:45:9c:2a:ca:01:d5:a8:03:e3:20:0f:a9:a0:
         96:23:27:c4:bd:4e:08:21:1c:50:ed:8d:f6:78:a8:91:8a:98:
         22:6a:72:04:8a:0e:1c:8f:2f:ca:ea:d0:4a:bb:a1:d3:a4:a1:
         ea:c6:ff:f5:87:97:00:d2:cc:45:38:db:d9:cb:f9:8a:43:5e:
         1d:63:b7:5f:07:4a:b1:43:58:67:cb:8d:20:64:39:99:3b:db:
         ca:b1:02:9b:a6:3e:a5:96:1f:ca:2b:57:f2:2f:ab:0b:09:97:
         b8:7e:07:4f:3e:92:70:8f:95:a2:44:7f:4c:df:f3:05:57:2b:
         e8:33:a7:a7:20:7a:68:db:aa:51:90:69:4a:2b:6f:18:02:ec:
         56:bf:e8:08:51:a5:bb:e1:17:8e:ff:dc:07:a5:36:75:e0:9c:
         4a:31:e7:6b:18:a6:06:7c:f1:ec:2c:c4:54:46:fb:7c:47:94:
         d6:ee:e6:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/aJJ3HxGnVPJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
ODkyNjJkMjctYjRkZC00MzgwLWFhOGEtOGYwMDA5YmU2YzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi81y4uR/yVLYXNl86Zfc4gYtIQWY+OwljnH5
+9YEk5pLu63ik7xgzhp1t3nUAFIF4UF5kCehh8HDEyCRs+01eFRVQqvGk9oejAL9
eW+zD0wYZSEjBBacNcLg+Z3D5Sxv0qHRZkufZQwjm61ktwj9JljcN/GePpkdZkwK
SHcMchdE/zLfR2voCBM70UXYCaGzODe8Nh21XU+vnwK73VYyjINkkpA6j+9XFiFR
or7NqZvHlE3Og74jUfPJm+v4T/mfgSsERKaFjNp3DfQKZdGbLAVoFC2Na/Yfojoh
Mif4DVFBTonL9EcgclUClrFR34qs87dwRqeKQgasu4YWX5T2CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJa/0F4FSHBxxpSABklELQxD+QeKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNWIyNjVlNzMtMzNkNi0z
YWNiLTk0MzItYzJlYzZkOTBiYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP42gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAj4v6kwWEVL9IY88/jPqb3f86H2t136B78X7WCEM2tj0hMjjVGv9Ifp
mSIe9Q80qvgnXqXjNqh98dKydV540t/DWDJ2BtYigHdvDuJsRZwqygHVqAPjIA+p
oJYjJ8S9TgghHFDtjfZ4qJGKmCJqcgSKDhyPL8rq0Eq7odOkoerG//WHlwDSzEU4
29nL+YpDXh1jt18HSrFDWGfLjSBkOZk728qxApumPqWWH8orV/IvqwsJl7h+B08+
knCPlaJEf0zf8wVXK+gzp6cgemjbqlGQaUorbxgC7Fa/6AhRpbvhF47/3AelNnXg
nEox52sYpgZ88ewsxFRG+3xHlNbu5lg=
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:42 2026 by rpki-client