Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/8b4f348b-886f-3a62-8140-acf5d886d7db.roa
File:                     8b4f348b-886f-3a62-8140-acf5d886d7db.roa (raw, json)
Hash identifier:          AZ6DzeIhJvDfdNKBdsZUz1VevzMw5KRHP1M9FqVEIMs=
Subject key identifier:   F1:91:C6:69:E5:65:63:8F:25:4A:E8:9C:5C:7E:68:FA:F1:18:69:4C
Certificate issuer:       /CN=6c75d476-dd42-4501-9696-faf234c05e36
Certificate serial:       010D0C9F4328584F3E480556A0B5CD71F98DBF30
Authority key identifier: 3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/8b4f348b-886f-3a62-8140-acf5d886d7db.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     6762
IP address blocks:        63.133.192.0/21 maxlen: 24
                          63.133.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:05:56:a0:b5:cd:71:f9:8d:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c75d476-dd42-4501-9696-faf234c05e36
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=7f22f501-559c-45a8-a11b-508ce5724404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:1f:88:dd:d2:d6:53:d5:e7:05:a7:19:7c:
                    f0:36:5c:df:a3:68:71:aa:f9:78:3f:62:e1:04:27:
                    56:74:55:0a:c3:8b:d0:7e:56:7b:2c:b7:ff:6a:36:
                    77:2b:ce:07:d2:e3:97:d4:5b:53:87:de:c5:c2:38:
                    84:86:a5:50:e2:2a:e0:7a:0f:bf:24:69:fc:6a:e2:
                    30:c0:6e:3c:f9:6c:ab:0d:a4:51:4f:56:ad:ad:24:
                    3f:98:fa:94:53:72:8b:a6:2d:e8:97:3c:c1:a0:a0:
                    d0:9c:1b:c3:69:f2:23:9b:80:7e:5b:4f:10:04:0c:
                    27:27:ef:8c:5a:fa:8e:14:89:a7:17:b9:84:59:44:
                    d5:59:b5:09:5c:22:81:93:18:20:02:1d:97:bb:46:
                    c7:d1:c2:11:19:3a:91:88:70:81:03:61:d2:c2:e1:
                    e1:25:12:17:f1:5f:9e:b9:de:86:0d:e9:76:cc:e1:
                    c2:da:0b:ab:47:0f:fd:c0:ee:0f:c3:b4:11:e8:ee:
                    54:92:bd:a8:07:38:60:f2:ad:6b:b0:b7:a4:0a:8b:
                    92:4b:d4:0f:42:34:26:5d:13:cd:6a:37:58:26:61:
                    42:64:29:61:7f:77:9a:64:39:42:69:4f:6e:fc:1a:
                    ea:fa:04:32:02:f8:89:4e:2f:0f:06:eb:1e:65:cb:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:C6:69:E5:65:63:8F:25:4A:E8:9C:5C:7E:68:FA:F1:18:69:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/8b4f348b-886f-3a62-8140-acf5d886d7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:38:5e:2e:61:33:2a:aa:ed:54:eb:65:76:7d:15:4b:12:
         44:14:cd:0a:0b:bf:bd:4d:5c:dc:c8:9d:d6:1a:f6:d8:48:d3:
         f0:18:73:5d:f8:56:b8:61:ea:c7:5c:8c:83:f1:2d:5b:69:8b:
         c9:e1:f5:08:95:89:83:70:13:5c:e8:43:a7:a9:c1:62:72:79:
         ca:d1:a8:53:f1:b4:1a:34:ca:fa:7a:ad:02:e1:8b:ae:2a:53:
         9e:03:72:a6:6f:48:be:ab:ef:1c:2c:95:7e:44:4a:a0:b2:00:
         73:ab:f2:69:78:e0:94:15:ef:39:bd:31:e7:5d:32:39:e0:33:
         1e:37:91:6f:70:09:0f:95:51:e5:80:16:bd:9a:29:fd:77:d7:
         12:d2:a5:aa:30:03:c3:60:b8:ef:20:fc:be:67:cd:9f:19:4a:
         91:a2:46:66:9d:aa:89:b2:8b:88:a5:5c:2d:b9:d0:92:94:73:
         5b:55:97:06:d6:6a:4d:c7:47:e1:2d:1f:51:87:eb:f7:72:86:
         4f:98:e3:36:df:99:14:81:c0:82:d4:86:a6:1c:0a:ab:d7:e6:
         b9:77:03:04:60:5e:79:4a:09:e9:95:66:d4:81:f6:84:28:e5:
         aa:ff:c9:76:87:fd:9c:9e:d8:03:07:86:25:1c:e3:8a:a8:36:
         88:7c:e3:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAVWoLXNcfmNvzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3NWQ0NzYtZGQ0Mi00NTAxLTk2OTYtZmFmMjM0YzA1
ZTM2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
N2YyMmY1MDEtNTU5Yy00NWE4LWExMWItNTA4Y2U1NzI0NDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKcfiN3S1lPV5wWnGXzwNlzfo2hxqvl4P2Lh
BCdWdFUKw4vQflZ7LLf/ajZ3K84H0uOX1FtTh97FwjiEhqVQ4irgeg+/JGn8auIw
wG48+WyrDaRRT1atrSQ/mPqUU3KLpi3olzzBoKDQnBvDafIjm4B+W08QBAwnJ++M
WvqOFImnF7mEWUTVWbUJXCKBkxggAh2Xu0bH0cIRGTqRiHCBA2HSwuHhJRIX8V+e
ud6GDel2zOHC2gurRw/9wO4Pw7QR6O5Ukr2oBzhg8q1rsLekCouSS9QPQjQmXRPN
ajdYJmFCZClhf3eaZDlCaU9u/Brq+gQyAviJTi8PBuseZcvQcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGRxmnlZWOPJUronFx+aPrxGGlMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82Yzc1
ZDQ3Ni1kZDQyLTQ1MDEtOTY5Ni1mYWYyMzRjMDVlMzYvOGI0ZjM0OGItODg2Zi0z
YTYyLTgxNDAtYWNmNWQ4ODZkN2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmM3NWQ0NzYtZGQ0Mi00NTAxLTk2
OTYtZmFmMjM0YzA1ZTM2LzZjNzVkNDc2LWRkNDItNDUwMS05Njk2LWZhZjIzNGMw
NWUzNi5jcmwwHwYDVR0jBBgwFoAUPt/1NmmykXn2OUWEsUO77OVlkr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82Yzc1ZDQ3Ni1kZDQyLTQ1MDEtOTY5Ni1mYWYy
MzRjMDVlMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP4XAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv2OF4uYTMqqu1U62V2fRVLEkQUzQoLv71NXNzIndYa9thI0/AYc134
Vrhh6sdcjIPxLVtpi8nh9QiViYNwE1zoQ6epwWJyecrRqFPxtBo0yvp6rQLhi64q
U54DcqZvSL6r7xwslX5ESqCyAHOr8ml44JQV7zm9MeddMjngMx43kW9wCQ+VUeWA
Fr2aKf131xLSpaowA8NguO8g/L5nzZ8ZSpGiRmadqomyi4ilXC250JKUc1tVlwbW
ak3HR+EtH1GH6/dyhk+Y4zbfmRSBwILUhqYcCqvX5rl3AwRgXnlKCemVZtSB9oQo
5ar/yXaH/Zye2AMHhiUc44qoNoh84zg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:04:49 2026 by rpki-client