Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecdda755-4704-3b4f-bf89-75329dba6aa3.roa
File:                     ecdda755-4704-3b4f-bf89-75329dba6aa3.roa (raw, json)
Hash identifier:          BHYZ89uMLHf9T1j5o95nleDautmAXfGR79R6iNCapXY=
Subject key identifier:   FD:23:AE:61:77:87:D3:5C:EB:70:C9:A2:EF:E5:8A:8B:2F:ED:54:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5C2CF8E9C32EA76B3771E880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecdda755-4704-3b4f-bf89-75329dba6aa3.roa
Signing time:             Thu 01 Oct 2026 18:00:26 +0000
ROA not before:           Thu 01 Oct 2026 18:00:26 +0000
ROA not after:            Wed 30 Dec 2026 19:00:26 +0000
asID:                     401152
IP address blocks:        143.109.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:2c:f8:e9:c3:2e:a7:6b:37:71:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 18:00:26 2026 GMT
            Not After : Dec 30 19:00:26 2026 GMT
        Subject: CN=f11af367-1b85-425a-b161-51efc385ff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:e3:ed:9f:0c:3d:d6:c3:7e:ad:c2:8b:48:
                    af:6c:e5:4b:71:2c:03:18:7f:d4:b2:b7:38:78:1d:
                    d8:90:6f:eb:bb:62:d5:80:79:4e:c0:33:b0:70:56:
                    18:fe:53:1b:bf:32:b1:5b:b1:a4:4a:88:00:0f:dc:
                    d9:21:d5:a0:c9:cd:ec:42:3d:c4:88:54:d6:c1:c7:
                    20:65:1f:a1:e3:49:b9:12:64:e8:38:f6:35:18:1d:
                    da:5e:42:64:b7:4b:d9:08:19:91:60:79:bc:6e:6b:
                    b6:5e:a6:a4:53:f2:f5:1a:72:8b:18:e4:a6:35:9e:
                    56:18:ab:f5:6b:c5:f6:53:68:60:bd:3f:26:f7:0f:
                    6e:6d:73:f0:d1:5d:6a:1d:bd:16:fc:ef:fc:6d:ba:
                    db:f0:4d:55:29:50:5d:db:f2:5a:fb:93:e3:07:e6:
                    78:4c:56:4d:e7:8c:58:67:65:35:1c:e0:f8:54:72:
                    82:6d:02:c4:d6:10:48:c6:de:b3:6c:40:31:ef:7f:
                    82:af:85:d8:9f:20:4e:b9:26:8e:d3:f8:19:8e:99:
                    d4:f8:82:01:7e:7b:26:56:cf:78:76:8e:41:c9:b3:
                    99:68:fb:1f:ea:18:97:4e:bb:fc:cc:5d:b2:9b:a8:
                    96:aa:73:52:5b:a8:98:85:45:85:eb:57:1d:d6:26:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:23:AE:61:77:87:D3:5C:EB:70:C9:A2:EF:E5:8A:8B:2F:ED:54:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ecdda755-4704-3b4f-bf89-75329dba6aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:06:5f:a5:b1:a2:e4:9d:dd:d6:0b:ea:1c:06:45:27:ec:c6:
         90:7f:06:b9:48:b1:56:f4:fa:ff:39:5d:28:88:c3:82:01:fb:
         78:08:45:97:89:44:f6:db:03:d5:46:69:23:ea:56:2c:b9:06:
         5f:8d:fb:74:1b:74:0d:fa:40:2b:e9:32:ec:1b:5e:86:70:f6:
         b3:84:c8:24:06:be:19:6e:04:e2:88:81:5e:91:ad:9e:5b:7e:
         d8:1a:91:fd:b9:82:b3:36:f9:ab:2d:2f:18:fb:de:dc:f9:ea:
         e0:22:3f:4a:fd:c9:d5:f9:e1:e5:22:79:bb:7b:6f:36:43:53:
         b9:10:7b:d2:c2:85:e0:42:f9:25:76:bd:96:fd:39:14:c3:09:
         44:15:98:91:7b:d7:32:09:2a:f0:ff:37:81:4b:9a:4d:2b:d9:
         46:c0:eb:4d:23:03:8f:18:21:14:8d:1b:64:15:4a:89:15:57:
         96:45:40:78:91:18:a6:31:a7:0b:0a:b5:c1:14:5b:24:31:32:
         86:d8:f0:59:1d:8f:79:f4:f1:1b:c0:30:74:20:fb:9f:06:0c:
         4b:34:b5:87:ec:c4:90:45:ae:b3:38:41:d5:5b:93:d0:22:34:
         fb:8e:d8:c4:31:c5:bb:07:e1:03:9f:b3:f3:ec:3a:30:43:d2:
         fa:1a:cb:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9cLPjpwy6nazdx6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MTAwMTE4MDAyNloXDTI2MTIzMDE5MDAyNlowLzEtMCsGA1UEAxMk
ZjExYWYzNjctMWI4NS00MjVhLWIxNjEtNTFlZmMzODVmZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqXj7Z8MPdbDfq3Ci0ivbOVLcSwDGH/Usrc4
eB3YkG/ru2LVgHlOwDOwcFYY/lMbvzKxW7GkSogAD9zZIdWgyc3sQj3EiFTWwccg
ZR+h40m5EmToOPY1GB3aXkJkt0vZCBmRYHm8bmu2XqakU/L1GnKLGOSmNZ5WGKv1
a8X2U2hgvT8m9w9ubXPw0V1qHb0W/O/8bbrb8E1VKVBd2/Ja+5PjB+Z4TFZN54xY
Z2U1HOD4VHKCbQLE1hBIxt6zbEAx73+Cr4XYnyBOuSaO0/gZjpnU+IIBfnsmVs94
do5BybOZaPsf6hiXTrv8zF2ym6iWqnNSW6iYhUWF61cd1ibx6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0jrmF3h9Nc63DJou/liosv7VQKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWNkZGE3NTUtNDcwNC0z
YjRmLWJmODktNzUzMjlkYmE2YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj20/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcGX6WxouSd3dYL6hwGRSfsxpB/BrlIsVb0+v85XSiIw4IB+3gIRZeJ
RPbbA9VGaSPqViy5Bl+N+3QbdA36QCvpMuwbXoZw9rOEyCQGvhluBOKIgV6RrZ5b
ftgakf25grM2+astLxj73tz56uAiP0r9ydX54eUiebt7bzZDU7kQe9LCheBC+SV2
vZb9ORTDCUQVmJF71zIJKvD/N4FLmk0r2UbA600jA48YIRSNG2QVSokVV5ZFQHiR
GKYxpwsKtcEUWyQxMobY8Fkdj3n08RvAMHQg+58GDEs0tYfsxJBFrrM4QdVbk9Ai
NPuO2MQxxbsH4QOfs/PsOjBD0voay78=
-----END CERTIFICATE-----
Generated at Sun Oct 4 04:46:10 2026 by rpki-client