Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/64a48e70-2014-3f24-8966-c6e125505cbb.roa
File:                     64a48e70-2014-3f24-8966-c6e125505cbb.roa (raw, json)
Hash identifier:          7pqnxNC0GzYE+kAW0JRYfJqEqgFf4NFwU6hxtGfaY3k=
Subject key identifier:   84:A9:B3:8C:81:FD:F4:1B:A8:13:8C:47:A3:C4:EE:64:F0:DC:1E:DE
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584F5768079535244A015E900580
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/64a48e70-2014-3f24-8966-c6e125505cbb.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     395934
IP address blocks:        131.143.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:07:95:35:24:4a:01:5e:90:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=3403df52-78e7-4d11-a24a-307bde5397b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:0e:04:97:2c:f1:7b:57:a3:8e:ae:34:2f:
                    44:ee:ee:43:66:37:5b:7f:5d:2e:86:ca:1a:ae:cf:
                    70:ab:31:83:61:63:30:0b:50:46:30:de:21:73:c8:
                    15:54:69:c0:70:35:72:6d:c4:93:cb:0f:33:07:22:
                    39:ff:1a:e0:03:af:6a:dc:5b:67:da:aa:9e:d1:23:
                    75:51:91:fa:4f:22:12:e3:75:65:d4:38:75:52:b9:
                    6f:ad:df:81:ba:bd:be:6d:ad:da:86:b1:01:0c:d6:
                    35:41:57:88:eb:aa:04:fc:3a:ba:d7:af:03:73:7c:
                    45:27:04:72:ee:d6:92:96:ee:b1:ab:a6:49:ca:e5:
                    29:df:85:8e:b6:c8:e6:b1:cd:0c:7e:2c:a3:ef:81:
                    c6:07:ea:a4:7f:5d:0b:5a:65:9d:56:42:3a:d4:16:
                    45:a9:5f:e5:5f:cb:57:7e:85:c2:df:66:4a:f3:53:
                    04:13:e1:ed:d4:63:0a:bc:8e:fd:34:0d:9d:91:1b:
                    5c:57:9d:95:a5:6b:15:12:07:90:f2:61:ba:8f:14:
                    78:05:61:21:57:8a:d8:21:4c:23:45:e2:9e:d4:16:
                    71:6f:04:67:af:02:7e:46:18:88:13:cd:6d:d3:9e:
                    4f:e1:c8:3d:0e:45:20:63:e1:7c:26:dc:6f:b0:da:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A9:B3:8C:81:FD:F4:1B:A8:13:8C:47:A3:C4:EE:64:F0:DC:1E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/64a48e70-2014-3f24-8966-c6e125505cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:03:51:75:da:ce:a4:47:2d:34:37:e8:71:2f:fc:ee:c8:dd:
         31:2c:a9:76:05:c5:06:a5:64:e3:c6:83:34:33:4c:ad:c7:06:
         b8:74:d7:41:ac:0a:e3:3c:6a:e6:6e:17:7b:26:2f:42:26:c6:
         09:79:d7:f9:0e:47:af:66:31:3b:b6:4e:d8:e2:9a:cc:b0:9d:
         b9:b5:88:51:95:e4:07:e3:39:cf:cb:e9:21:35:48:f3:c1:97:
         b9:55:e0:7c:01:49:a2:25:bc:47:aa:83:8a:8e:4b:59:1c:f7:
         de:46:bf:6a:47:36:2e:c1:82:e8:10:78:b6:6b:55:d3:fb:d2:
         3c:ed:43:c9:90:58:84:79:85:bc:5f:69:e3:89:9f:fa:4c:f6:
         3f:d3:08:3d:24:61:b3:cf:80:df:1b:30:15:a4:a5:c1:f1:41:
         06:cd:16:30:37:6c:3e:e1:48:a0:12:08:24:31:99:1e:5a:ac:
         5e:4d:b1:62:90:e0:eb:e2:75:f7:4a:0b:b9:91:5c:c3:3b:08:
         3a:01:76:5a:1b:68:f1:c2:6d:06:5f:17:9b:b2:56:ae:83:77:
         38:42:d0:15:08:2f:35:a2:87:cf:99:61:7e:56:3c:54:8e:3f:
         07:81:0d:48:dc:cb:b5:7e:2c:1d:19:47:af:19:c6:1d:cf:6a:
         35:50:2d:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAeVNSRKAV6QBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgyZjMxNzYtY2ViOC00MmJmLWE1MWMtOWZiMjg2ZTVk
YzAwMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
MzQwM2RmNTItNzhlNy00ZDExLWEyNGEtMzA3YmRlNTM5N2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4sOBJcs8XtXo46uNC9E7u5DZjdbf10uhsoa
rs9wqzGDYWMwC1BGMN4hc8gVVGnAcDVybcSTyw8zByI5/xrgA69q3Ftn2qqe0SN1
UZH6TyIS43Vl1Dh1Urlvrd+Bur2+ba3ahrEBDNY1QVeI66oE/Dq6168Dc3xFJwRy
7taSlu6xq6ZJyuUp34WOtsjmsc0Mfiyj74HGB+qkf10LWmWdVkI61BZFqV/lX8tX
foXC32ZK81MEE+Ht1GMKvI79NA2dkRtcV52VpWsVEgeQ8mG6jxR4BWEhV4rYIUwj
ReKe1BZxbwRnrwJ+RhiIE81t055P4cg9DkUgY+F8JtxvsNooVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISps4yB/fQbqBOMR6PE7mTw3B7eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODJm
MzE3Ni1jZWI4LTQyYmYtYTUxYy05ZmIyODZlNWRjMDAvNjRhNDhlNzAtMjAxNC0z
ZjI0LTg5NjYtYzZlMTI1NTA1Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjgyZjMxNzYtY2ViOC00MmJmLWE1
MWMtOWZiMjg2ZTVkYzAwLzI4MmYzMTc2LWNlYjgtNDJiZi1hNTFjLTlmYjI4NmU1
ZGMwMC5jcmwwHwYDVR0jBBgwFoAUexxb9718DJAh2mhmrF9NnBW1dBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODJmMzE3Ni1jZWI4LTQyYmYtYTUxYy05ZmIy
ODZlNWRjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg480MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQDUXXazqRHLTQ36HEv/O7I3TEsqXYFxQalZOPGgzQzTK3HBrh010Gs
CuM8auZuF3smL0Imxgl51/kOR69mMTu2Ttjimsywnbm1iFGV5AfjOc/L6SE1SPPB
l7lV4HwBSaIlvEeqg4qOS1kc995Gv2pHNi7BgugQeLZrVdP70jztQ8mQWIR5hbxf
aeOJn/pM9j/TCD0kYbPPgN8bMBWkpcHxQQbNFjA3bD7hSKASCCQxmR5arF5NsWKQ
4OvidfdKC7mRXMM7CDoBdlobaPHCbQZfF5uyVq6DdzhC0BUILzWih8+ZYX5WPFSO
PweBDUjcy7V+LB0ZR68Zxh3PajVQLUg=
-----END CERTIFICATE-----
Generated at Fri Oct 2 19:55:20 2026 by rpki-client