Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/d6132e14-94a0-3425-adb1-31cc705d578e.roa
File:                     d6132e14-94a0-3425-adb1-31cc705d578e.roa (raw, json)
Hash identifier:          WQrVYXHUxUcn8qRAjQxxe0Mj8/Ml5AsNIy2U9fhoqWY=
Subject key identifier:   67:1E:80:D7:37:3E:59:1F:AF:8B:8E:2E:84:83:63:79:EA:98:85:EA
Certificate issuer:       /CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
Certificate serial:       010D0C9F4328584F331D326D82FDDED8AC338CC0
Authority key identifier: 6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/d6132e14-94a0-3425-adb1-31cc705d578e.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     33554
IP address blocks:        63.142.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:32:6d:82:fd:de:d8:ac:33:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45172e0b-02b7-43fc-843c-98c0f87cafa4
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=a931fd61-3631-47cf-818c-9d9a0e0b06d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:7e:1f:7c:ce:50:f7:11:96:13:f6:43:47:
                    d4:0e:dd:03:5f:e5:71:a5:fd:10:b3:3b:e3:4c:05:
                    88:57:f9:90:70:00:5e:46:4b:a6:24:4f:60:41:66:
                    14:a4:91:71:14:d7:58:f1:76:9b:94:d7:6b:e3:17:
                    90:d2:78:5d:8b:29:76:71:fc:a1:50:ba:c8:48:df:
                    8d:9a:68:de:42:60:cd:14:6d:cc:82:9b:4a:0e:89:
                    0a:42:d5:b2:4f:65:19:1c:3e:25:86:ab:74:14:7e:
                    e0:3f:6c:28:b7:b6:ee:c5:eb:f3:4b:f1:7e:8b:bb:
                    89:81:ef:06:5d:45:52:c2:18:0b:67:6a:8f:6f:f6:
                    b2:c4:55:47:5a:92:90:dd:3b:d9:f5:8b:c7:3b:a9:
                    6d:8c:a2:fa:ce:af:a3:25:a0:c4:24:79:da:91:4c:
                    a8:eb:60:ac:8e:ac:66:ac:01:13:22:5d:ca:bd:09:
                    3a:af:bd:c1:7c:ad:df:38:c6:b9:35:68:2d:e0:1a:
                    b1:17:37:60:ae:5e:b9:39:44:71:92:6f:50:67:05:
                    66:6c:75:6e:27:6a:ba:03:20:35:7f:40:da:2e:b5:
                    bb:24:41:9a:27:e0:2c:8b:1a:ee:26:49:d1:5a:ef:
                    df:d2:94:f7:0c:4d:6f:e3:1e:3a:0b:f5:60:22:8f:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:80:D7:37:3E:59:1F:AF:8B:8E:2E:84:83:63:79:EA:98:85:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/d6132e14-94a0-3425-adb1-31cc705d578e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4/45172e0b-02b7-43fc-843c-98c0f87cafa4.crl

            X509v3 Authority Key Identifier:
                keyid:6D:29:CD:58:DA:B1:10:CE:4D:CC:52:5F:D6:FD:71:2D:D8:DD:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/45172e0b-02b7-43fc-843c-98c0f87cafa4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:8f:29:50:b0:0b:47:86:95:9c:8c:19:9f:23:38:a8:a4:
         15:7d:37:f9:77:56:58:45:38:d4:98:b9:20:fb:f7:d5:7e:fb:
         89:1a:66:6d:99:31:4d:d0:5c:72:ab:e3:38:a3:19:fd:d2:59:
         b7:11:2f:c8:e5:4a:2b:8f:54:0b:9c:33:a6:20:56:f0:e8:e8:
         c4:a2:0a:1c:88:09:bd:0e:10:2c:64:5a:f0:aa:c3:2d:55:64:
         f9:fe:ad:56:ac:1c:b2:69:a4:24:e0:02:f0:35:10:01:bc:aa:
         b5:52:f7:8a:da:9f:cb:03:f0:32:21:b4:9b:14:51:bb:7c:21:
         0e:1d:4b:62:f3:1b:b9:5c:15:45:5b:01:01:c0:5b:0f:26:3b:
         1a:dc:a3:73:cd:ff:d3:98:11:b7:d4:20:4b:86:92:92:a5:fc:
         ff:cd:c5:87:f0:d9:40:97:e3:c3:f0:3a:d5:23:ec:4a:40:db:
         3b:1f:ae:f6:1f:3f:e1:a7:4c:56:d4:2b:1f:aa:c6:1f:8a:14:
         4e:17:db:3e:51:92:98:69:71:73:ca:37:b0:43:63:f4:32:ca:
         26:29:73:01:ab:17:10:62:b0:ad:5d:43:f4:4d:62:ae:b7:4d:
         98:57:f6:30:b8:1c:39:f0:59:58:e8:ef:dd:bc:43:6b:ca:4e:
         6b:3a:6d:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHTJtgv3e2KwzjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxNzJlMGItMDJiNy00M2ZjLTg0M2MtOThjMGY4N2Nh
ZmE0MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
YTkzMWZkNjEtMzYzMS00N2NmLTgxOGMtOWQ5YTBlMGIwNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKd+H3zOUPcRlhP2Q0fUDt0DX+Vxpf0Qszvj
TAWIV/mQcABeRkumJE9gQWYUpJFxFNdY8XablNdr4xeQ0nhdiyl2cfyhULrISN+N
mmjeQmDNFG3MgptKDokKQtWyT2UZHD4lhqt0FH7gP2wot7buxevzS/F+i7uJge8G
XUVSwhgLZ2qPb/ayxFVHWpKQ3TvZ9YvHO6ltjKL6zq+jJaDEJHnakUyo62Csjqxm
rAETIl3KvQk6r73BfK3fOMa5NWgt4BqxFzdgrl65OURxkm9QZwVmbHVuJ2q6AyA1
f0DaLrW7JEGaJ+AsixruJknRWu/f0pT3DE1v4x46C/VgIo+WMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcegNc3Plkfr4uOLoSDY3nqmIXqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80NTE3
MmUwYi0wMmI3LTQzZmMtODQzYy05OGMwZjg3Y2FmYTQvZDYxMzJlMTQtOTRhMC0z
NDI1LWFkYjEtMzFjYzcwNWQ1NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDUxNzJlMGItMDJiNy00M2ZjLTg0
M2MtOThjMGY4N2NhZmE0LzQ1MTcyZTBiLTAyYjctNDNmYy04NDNjLTk4YzBmODdj
YWZhNC5jcmwwHwYDVR0jBBgwFoAUbSnNWNqxEM5NzFJf1v1xLdjdrqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80NTE3MmUwYi0wMmI3LTQzZmMtODQzYy05OGMw
Zjg3Y2FmYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP46gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/FjylQsAtHhpWcjBmfIziopBV9N/l3VlhFONSYuSD799V++4kaZm2Z
MU3QXHKr4zijGf3SWbcRL8jlSiuPVAucM6YgVvDo6MSiChyICb0OECxkWvCqwy1V
ZPn+rVasHLJppCTgAvA1EAG8qrVS94ran8sD8DIhtJsUUbt8IQ4dS2LzG7lcFUVb
AQHAWw8mOxrco3PN/9OYEbfUIEuGkpKl/P/NxYfw2UCX48PwOtUj7EpA2zsfrvYf
P+GnTFbUKx+qxh+KFE4X2z5RkphpcXPKN7BDY/QyyiYpcwGrFxBisK1dQ/RNYq63
TZhX9jC4HDnwWVjo7928Q2vKTms6bao=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:57:21 2026 by rpki-client