Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7bafe77-a0f2-3773-af08-534f9f84d86f.roa
File:                     a7bafe77-a0f2-3773-af08-534f9f84d86f.roa (raw, json)
Hash identifier:          k+Nv/u0XZufrg1c7XhsTAHabHVQtd1Dn1obW2ZWA2L8=
Subject key identifier:   7A:AF:3D:DA:EC:E6:91:DC:9A:F4:A9:0A:F6:90:D0:3E:DD:9B:84:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3CE2A7CCD614230409200900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7bafe77-a0f2-3773-af08-534f9f84d86f.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     3855
IP address blocks:        63.115.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a7:cc:d6:14:23:04:09:20:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=565a87f2-b095-4657-9113-fe45034e5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:86:8f:40:06:7c:14:d1:aa:6a:24:5b:60:
                    79:4b:26:ac:59:8e:a1:ce:b1:49:03:e4:46:f0:1c:
                    1b:12:69:1c:b4:35:ee:75:61:09:5b:b0:36:9c:6d:
                    94:57:f4:d8:70:94:6c:ff:a1:ad:6a:d5:f4:f3:c4:
                    c1:05:97:63:59:1a:db:fd:4f:d9:4b:cd:59:b0:ca:
                    bb:2f:8b:fd:1c:e4:d2:87:d2:31:75:73:61:07:91:
                    4a:1e:0b:27:26:8b:9e:61:ee:b4:5f:e3:58:d2:df:
                    ef:3b:8b:57:b6:4d:5c:7d:3a:01:16:3f:5f:bd:ec:
                    dd:7a:c5:65:56:fc:37:bf:25:7b:02:e4:ea:fa:4a:
                    95:08:01:11:a0:8c:91:85:c0:bd:a1:82:37:ed:f7:
                    b3:94:81:3f:22:09:bc:e1:61:c4:90:2f:45:12:30:
                    54:dc:71:f5:a4:0e:b6:23:a1:3a:fa:5b:e2:5f:e9:
                    2c:c2:d3:8f:fb:1a:d3:95:42:e5:40:38:fd:d1:11:
                    d6:e4:b4:d5:06:9d:f7:bf:45:5c:2b:c4:b3:80:65:
                    b3:a5:96:51:91:5a:80:50:16:c7:22:81:22:e9:17:
                    52:2d:fb:dc:f9:63:2f:c6:5b:a1:db:5e:7a:43:95:
                    bb:95:27:92:92:69:f9:da:67:e9:d8:8a:af:eb:93:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:3D:DA:EC:E6:91:DC:9A:F4:A9:0A:F6:90:D0:3E:DD:9B:84:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7bafe77-a0f2-3773-af08-534f9f84d86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.115.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:66:d4:b8:8d:34:8e:00:e8:87:8b:43:ad:dd:27:f8:4a:68:
         43:67:99:6c:3e:c2:d9:fb:b7:41:8b:c0:2f:56:09:90:5b:30:
         02:25:55:f5:54:ca:5b:38:48:2e:35:f2:34:9c:65:f6:8f:ea:
         7e:6f:a6:33:86:70:5d:9f:32:d8:37:81:4d:bd:30:d2:6b:cf:
         f9:5a:b7:1b:92:be:c2:bd:12:49:7e:f3:67:25:0a:22:7a:da:
         4b:4f:a7:d7:fb:09:ee:f6:3a:d5:94:41:0e:59:50:2b:16:3a:
         50:27:9a:ee:ee:1a:57:ee:a2:c8:c6:58:7f:15:a6:c8:6c:40:
         14:c3:4b:c9:fe:c0:52:6a:34:4a:94:3e:ee:3e:11:7b:82:8d:
         84:c1:2a:e1:ee:3b:58:f6:0a:5b:68:e6:61:2f:37:a6:c2:ea:
         63:55:a1:31:7f:81:ac:a4:65:41:1c:f6:68:aa:56:56:7f:93:
         71:06:a4:78:06:0b:fe:eb:65:6a:c1:99:ef:30:a1:6c:4e:e7:
         d8:3d:06:45:0d:0f:31:43:d0:39:ce:cc:0d:33:62:fe:52:2e:
         53:f9:18:af:a4:a1:12:e7:6a:73:95:97:13:25:99:14:5e:7f:
         1a:2e:91:f2:bb:72:e4:de:11:85:70:7c:4a:f3:42:e8:b2:22:
         31:89:f3:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qfM1hQjBAkgCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
NTY1YTg3ZjItYjA5NS00NjU3LTkxMTMtZmU0NTAzNGU1ZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzaGj0AGfBTRqmokW2B5SyasWY6hzrFJA+RG
8BwbEmkctDXudWEJW7A2nG2UV/TYcJRs/6GtatX088TBBZdjWRrb/U/ZS81ZsMq7
L4v9HOTSh9IxdXNhB5FKHgsnJoueYe60X+NY0t/vO4tXtk1cfToBFj9fvezdesVl
Vvw3vyV7AuTq+kqVCAERoIyRhcC9oYI37fezlIE/Igm84WHEkC9FEjBU3HH1pA62
I6E6+lviX+kswtOP+xrTlULlQDj90RHW5LTVBp33v0VcK8SzgGWzpZZRkVqAUBbH
IoEi6RdSLfvc+WMvxluh2156Q5W7lSeSkmn52mfp2Iqv65OSMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqvPdrs5pHcmvSpCvaQ0D7dm4QdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTdiYWZlNzctYTBmMi0z
NzczLWFmMDgtNTM0ZjlmODRkODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP3MIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJm1LiNNI4A6IeLQ63dJ/hKaENnmWw+wtn7t0GLwC9WCZBbMAIlVfVU
yls4SC418jScZfaP6n5vpjOGcF2fMtg3gU29MNJrz/latxuSvsK9Ekl+82clCiJ6
2ktPp9f7Ce72OtWUQQ5ZUCsWOlAnmu7uGlfuosjGWH8VpshsQBTDS8n+wFJqNEqU
Pu4+EXuCjYTBKuHuO1j2Clto5mEvN6bC6mNVoTF/gaykZUEc9miqVlZ/k3EGpHgG
C/7rZWrBme8woWxO59g9BkUNDzFD0DnOzA0zYv5SLlP5GK+koRLnanOVlxMlmRRe
fxoukfK7cuTeEYVwfErzQuiyIjGJ85E=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:18:43 2026 by rpki-client