Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa
File:                     8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa (raw, json)
Hash identifier:          efj38FVkS7oGCn6BWSx185mXvSeXaUZgS8eOnlQbfl8=
Subject key identifier:   20:19:2F:46:F2:55:A8:7A:3D:C1:11:FE:53:53:BD:85:6B:88:72:87
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584E333457A57D3D8AAFEB134370
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa
Signing time:             Wed 17 Jun 2026 09:00:12 +0000
ROA not before:           Wed 17 Jun 2026 09:00:12 +0000
ROA not after:            Tue 15 Sep 2026 09:00:12 +0000
asID:                     10111
IP address blocks:        131.143.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:34:57:a5:7d:3d:8a:af:eb:13:43:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Jun 17 09:00:12 2026 GMT
            Not After : Sep 15 09:00:12 2026 GMT
        Subject: CN=8c5b12be-489f-4d2b-856b-5304c3e97036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:ae:b5:62:81:60:1c:c5:4e:60:5a:c3:a0:
                    d6:01:63:d6:33:7f:16:dd:7f:54:03:a6:de:24:be:
                    58:db:51:93:7c:0f:d4:31:e6:37:3a:f3:cb:6e:98:
                    7b:b2:df:a9:9f:69:74:1f:ad:9f:4e:1f:77:5e:17:
                    69:0d:e0:53:0c:92:1e:43:74:90:83:7c:43:fb:05:
                    d3:a8:88:fc:c5:c5:d4:9e:dc:25:a1:29:e7:f8:1d:
                    be:5f:0e:05:2f:9c:86:ed:2e:4f:f7:8e:2f:37:0e:
                    50:9b:40:ad:f0:04:b3:a1:59:33:c0:2c:40:48:f8:
                    60:a7:ff:dd:92:80:11:29:cd:d1:5a:69:ac:4d:8c:
                    4b:97:0d:da:93:c5:0a:52:ee:0f:58:ae:b3:66:f8:
                    97:49:32:f3:0d:9b:7a:b1:50:e5:96:5f:18:f7:84:
                    87:69:cf:9a:6b:3d:01:33:ea:19:fd:0f:58:a3:78:
                    f2:df:42:eb:53:58:8d:67:4f:9b:d5:0c:70:2f:ec:
                    46:03:ea:4e:e4:fd:e1:64:9e:6c:a7:36:b6:45:e2:
                    76:d5:b6:80:99:0b:a6:8f:5b:e2:b8:73:e8:a8:68:
                    44:42:be:94:2f:cf:3d:31:6f:31:c0:df:7a:7a:2a:
                    f3:41:cf:5d:1a:e7:bd:2b:7d:bf:fc:de:4d:66:6a:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:2F:46:F2:55:A8:7A:3D:C1:11:FE:53:53:BD:85:6B:88:72:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/8affd8a5-507d-31d5-86fe-d7fd89bd655b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:6d:d1:99:0e:fe:5a:02:d3:5b:25:50:e2:92:cd:b4:95:
         b4:ef:06:68:08:5c:10:a8:bd:4d:e9:f8:66:80:bd:7c:87:fb:
         c3:bf:14:ea:87:28:6f:6c:50:ab:af:25:44:50:31:dc:e1:27:
         02:8d:7f:41:02:1c:6b:47:0a:c1:ad:27:a3:46:f8:ba:ce:8a:
         84:02:52:56:f2:a2:79:38:47:28:46:21:15:67:de:e8:46:a3:
         fb:1c:a9:1b:a8:99:be:9b:5e:6e:0b:bd:d9:22:76:a7:49:20:
         17:5e:9f:18:36:5f:e1:d1:7d:9e:c1:d2:74:b5:64:52:5d:73:
         9d:de:26:d8:a8:04:f9:f7:3c:b1:b6:a1:aa:a5:54:15:23:3b:
         b2:13:57:1f:5b:5b:a1:a3:b1:72:a8:a8:0e:f6:a9:0e:06:e8:
         58:2e:c1:51:59:86:82:3e:38:bc:79:a7:06:79:d0:ec:94:c4:
         93:66:83:6d:ee:b0:87:f2:76:42:92:44:b9:64:e1:aa:5a:d5:
         93:73:5a:76:f7:d0:56:43:17:39:91:26:ae:2c:3e:2e:74:e0:
         eb:02:d3:83:06:7a:83:db:dc:13:38:eb:a2:07:9c:6e:4f:c1:
         dc:b7:bd:ce:f0:18:e4:71:83:3b:ae:5b:16:d6:8e:3e:8d:8c:
         1c:6d:76:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4zNFelfT2Kr+sTQ3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg4MmFjNjctOTZiYy00M2JhLWIwNmUtYzJmNTMzYzg1
MmY0MB4XDTI2MDYxNzA5MDAxMloXDTI2MDkxNTA5MDAxMlowLzEtMCsGA1UEAxMk
OGM1YjEyYmUtNDg5Zi00ZDJiLTg1NmItNTMwNGMzZTk3MDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9eutWKBYBzFTmBaw6DWAWPWM38W3X9UA6be
JL5Y21GTfA/UMeY3OvPLbph7st+pn2l0H62fTh93XhdpDeBTDJIeQ3SQg3xD+wXT
qIj8xcXUntwloSnn+B2+Xw4FL5yG7S5P944vNw5Qm0Ct8ASzoVkzwCxASPhgp//d
koARKc3RWmmsTYxLlw3ak8UKUu4PWK6zZviXSTLzDZt6sVDlll8Y94SHac+aaz0B
M+oZ/Q9Yo3jy30LrU1iNZ0+b1QxwL+xGA+pO5P3hZJ5spza2ReJ21baAmQumj1vi
uHPoqGhEQr6UL889MW8xwN96eirzQc9dGue9K32//N5NZmqMfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAZL0byVah6PcER/lNTvYVriHKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODgy
YWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1MzNjODUyZjQvOGFmZmQ4YTUtNTA3ZC0z
MWQ1LTg2ZmUtZDdmZDg5YmQ2NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjg4MmFjNjctOTZiYy00M2JhLWIw
NmUtYzJmNTMzYzg1MmY0LzI4ODJhYzY3LTk2YmMtNDNiYS1iMDZlLWMyZjUzM2M4
NTJmNC5jcmwwHwYDVR0jBBgwFoAUzMgpXPbSbm1R4oeTRWf1hotLHrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODgyYWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1
MzNjODUyZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2YbdGZDv5aAtNbJVDiks20lbTvBmgIXBCovU3p+GaAvXyH+8O/FOqH
KG9sUKuvJURQMdzhJwKNf0ECHGtHCsGtJ6NG+LrOioQCUlbyonk4RyhGIRVn3uhG
o/scqRuomb6bXm4LvdkidqdJIBdenxg2X+HRfZ7B0nS1ZFJdc53eJtioBPn3PLG2
oaqlVBUjO7ITVx9bW6GjsXKoqA72qQ4G6FguwVFZhoI+OLx5pwZ50OyUxJNmg23u
sIfydkKSRLlk4apa1ZNzWnb30FZDFzmRJq4sPi504OsC04MGeoPb3BM466IHnG5P
wdy3vc7wGORxgzuuWxbWjj6NjBxtduw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:32 2026 by rpki-client