Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/465b693e-fe1e-3971-9841-86883f0a0b08.roa
File:                     465b693e-fe1e-3971-9841-86883f0a0b08.roa (raw, json)
Hash identifier:          YpHTpb4XKyQtVaSwZYdbbZlniRAQfobpCFM0crMahQU=
Subject key identifier:   6E:72:66:B6:BE:10:06:A7:24:22:47:9A:6B:EB:05:AC:BD:42:66:CD
Certificate issuer:       /CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
Certificate serial:       010D0C9F4328584F4112C3C6113C5F5A1B33D100
Authority key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/465b693e-fe1e-3971-9841-86883f0a0b08.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     13437
IP address blocks:        131.143.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:c3:c6:11:3c:5f:5a:1b:33:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=5a09b56a-b022-4c9d-aefa-61d1c33e0ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:11:97:c6:6d:b6:f1:a8:7e:ad:7c:54:d4:
                    19:d2:74:f6:0d:a8:1f:ea:e7:ef:03:34:ef:69:b0:
                    ef:b8:79:96:b1:cd:0c:78:8a:7e:f5:87:7a:23:be:
                    3c:b2:66:a6:5f:8a:c7:af:00:06:8a:77:ab:71:1d:
                    43:dd:f4:1c:13:67:6f:a8:2b:16:7e:6a:ee:33:de:
                    5b:a4:50:01:06:e0:88:6f:dd:bd:51:5e:d4:9e:ed:
                    7f:b7:9d:55:82:bc:df:9e:50:60:b9:8f:47:90:b9:
                    6f:4f:5a:f5:7a:34:fa:af:41:ba:93:92:45:57:c0:
                    6e:6e:2e:d2:62:4b:0c:92:c0:70:54:55:69:b5:08:
                    60:c6:bd:49:96:21:72:4b:cd:88:b5:0f:3d:13:85:
                    e7:32:90:02:42:cf:d1:d7:6f:00:66:a4:46:fe:18:
                    94:4b:f1:7e:8e:a5:42:80:83:41:67:94:aa:d8:25:
                    79:d3:c8:a0:44:7f:c8:db:3d:80:62:01:0a:57:11:
                    d5:a3:af:8d:f2:04:0b:dc:ff:f1:4f:56:7e:ba:b1:
                    b6:14:82:3d:df:f8:cc:c3:10:e7:aa:01:1b:2a:65:
                    4f:20:7a:df:01:3e:62:b5:48:7b:05:16:8c:7a:f3:
                    d1:3a:ed:94:23:a5:3a:d7:28:a0:52:be:82:98:79:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:66:B6:BE:10:06:A7:24:22:47:9A:6B:EB:05:AC:BD:42:66:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/465b693e-fe1e-3971-9841-86883f0a0b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:52:6b:fb:3c:b4:22:5b:d3:73:7c:1f:a7:85:ee:35:07:
         63:39:20:e6:ce:71:a3:bc:60:88:3b:c5:85:4d:38:5f:26:6d:
         eb:1e:ab:40:4f:8b:fd:a4:c6:92:94:44:a8:34:02:cd:2c:88:
         11:01:d3:5d:c4:ec:ee:89:dd:d1:f5:d6:e3:6f:00:66:9a:fa:
         0c:ed:75:9e:07:e8:b1:01:2a:ff:7f:56:66:26:d7:b9:f8:e1:
         a2:72:74:d8:97:a6:7e:93:e3:c5:6d:ec:8e:ba:a5:0a:39:db:
         53:36:0d:f9:87:e8:42:db:ac:32:95:eb:1f:44:07:11:4c:f3:
         91:48:79:c8:65:a1:b7:db:ee:94:9f:45:55:99:7a:e6:ba:a2:
         8e:c0:1e:b0:3c:f9:10:7e:7f:aa:46:76:7b:bc:76:0e:3d:1a:
         03:48:8e:a9:fc:f8:66:e7:ef:b4:73:e5:8a:05:e8:b5:3f:5b:
         b8:3f:30:b3:de:e8:82:d2:35:6f:8f:e3:4a:82:19:39:21:ec:
         b5:f4:30:17:cc:c5:f0:5d:37:f9:4d:10:37:26:fc:3c:02:e4:
         5d:be:6d:e0:04:cf:1d:db:ff:37:cd:17:6a:d3:e7:1b:1c:0b:
         3f:d8:de:0c:8a:30:b5:d8:50:1e:87:b0:ed:d0:88:7f:73:17:
         07:ab:37:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsPGETxfWhsz0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk4MGEwYTgtNzhiYy00Mjg5LTgyNWQtMWJiOWE1YTE5
MmM4MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NWEwOWI1NmEtYjAyMi00YzlkLWFlZmEtNjFkMWMzM2UwYWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oURl8ZttvGofq18VNQZ0nT2Dagf6ufvAzTv
abDvuHmWsc0MeIp+9Yd6I748smamX4rHrwAGinercR1D3fQcE2dvqCsWfmruM95b
pFABBuCIb929UV7Unu1/t51VgrzfnlBguY9HkLlvT1r1ejT6r0G6k5JFV8Bubi7S
YksMksBwVFVptQhgxr1JliFyS82ItQ89E4XnMpACQs/R128AZqRG/hiUS/F+jqVC
gINBZ5Sq2CV508igRH/I2z2AYgEKVxHVo6+N8gQL3P/xT1Z+urG2FII93/jMwxDn
qgEbKmVPIHrfAT5itUh7BRaMevPROu2UI6U61yigUr6CmHmzrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5yZra+EAanJCJHmmvrBay9QmbNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOTgw
YTBhOC03OGJjLTQyODktODI1ZC0xYmI5YTVhMTkyYzgvNDY1YjY5M2UtZmUxZS0z
OTcxLTk4NDEtODY4ODNmMGEwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDk4MGEwYTgtNzhiYy00Mjg5LTgy
NWQtMWJiOWE1YTE5MmM4L2Q5ODBhMGE4LTc4YmMtNDI4OS04MjVkLTFiYjlhNWEx
OTJjOC5jcmwwHwYDVR0jBBgwFoAUTApwWZgUj6L9PJhK4aYtiAFd+yMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kOTgwYTBhOC03OGJjLTQyODktODI1ZC0xYmI5
YTVhMTkyYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnsUmv7PLQiW9NzfB+nhe41B2M5IObOcaO8YIg7xYVNOF8mbeseq0BP
i/2kxpKURKg0As0siBEB013E7O6J3dH11uNvAGaa+gztdZ4H6LEBKv9/VmYm17n4
4aJydNiXpn6T48Vt7I66pQo521M2DfmH6ELbrDKV6x9EBxFM85FIechlobfb7pSf
RVWZeua6oo7AHrA8+RB+f6pGdnu8dg49GgNIjqn8+Gbn77Rz5YoF6LU/W7g/MLPe
6ILSNW+P40qCGTkh7LX0MBfMxfBdN/lNEDcm/DwC5F2+beAEzx3b/zfNF2rT5xsc
Cz/Y3gyKMLXYUB6HsO3QiH9zFwerN0o=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:49:14 2026 by rpki-client