Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/ac4e082f-34bb-3d1e-931e-01cf0ed10cca.roa
File:                     ac4e082f-34bb-3d1e-931e-01cf0ed10cca.roa (raw, json)
Hash identifier:          aLZVyjkntFnNcx/mbrRxCNbYRgu9WyncNnPuxCeyM/k=
Subject key identifier:   FF:FE:2F:B0:98:61:4C:47:88:79:C6:3B:6A:E3:E9:4C:7A:61:D9:01
Certificate issuer:       /CN=6c75d476-dd42-4501-9696-faf234c05e36
Certificate serial:       010D0C9F4328584E9BE50F9CC478F167F3900140
Authority key identifier: 3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/ac4e082f-34bb-3d1e-931e-01cf0ed10cca.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        63.133.192.0/21 maxlen: 24
                          63.133.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0f:9c:c4:78:f1:67:f3:90:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c75d476-dd42-4501-9696-faf234c05e36
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=5a45237e-ddab-441f-b82a-1580801975a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:70:d4:e8:d1:4b:bd:c8:0c:b4:f3:fd:e0:
                    12:cb:25:fc:86:20:08:cb:aa:3c:17:10:f3:60:f9:
                    40:fc:73:76:20:21:88:56:d5:fa:f1:ca:8a:4e:ef:
                    79:d8:e0:e2:60:36:81:c0:f6:53:12:aa:f7:f0:e6:
                    54:14:ce:20:43:d4:6b:14:b0:4d:6d:35:2c:e5:ef:
                    9c:60:12:a0:30:38:31:cd:af:2f:a9:41:28:9d:1e:
                    63:32:8d:48:cf:32:7c:b7:ff:19:4f:ed:6e:88:b6:
                    9b:0d:58:d1:dc:0a:88:3a:91:4d:62:55:26:5f:7b:
                    d7:3a:b0:cb:7c:68:b0:28:67:12:9e:9d:65:37:92:
                    2a:2b:0a:71:3a:25:ad:01:4b:fa:c1:08:86:4b:bf:
                    28:c4:a0:33:5d:18:99:87:97:9e:00:5a:52:ca:19:
                    89:1d:3f:19:99:3d:0e:0e:8f:b1:e5:e8:14:4a:1c:
                    ec:06:ce:94:aa:d7:d5:c5:ba:b8:c6:b2:7d:de:e6:
                    b0:16:49:0d:b2:b4:ae:42:9d:f8:e0:fc:81:ae:eb:
                    46:25:ed:cd:8c:ad:26:06:4e:6e:38:0c:57:6e:d4:
                    42:d0:be:d2:bf:13:a7:15:e1:47:85:c0:b2:0a:3c:
                    c5:b9:59:ce:02:5b:c0:77:eb:fb:65:5f:c1:52:aa:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:2F:B0:98:61:4C:47:88:79:C6:3B:6A:E3:E9:4C:7A:61:D9:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/ac4e082f-34bb-3d1e-931e-01cf0ed10cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36/6c75d476-dd42-4501-9696-faf234c05e36.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DF:F5:36:69:B2:91:79:F6:39:45:84:B1:43:BB:EC:E5:65:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6c75d476-dd42-4501-9696-faf234c05e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:43:ab:e4:ba:2e:11:47:4d:40:2f:71:c3:d4:b0:cd:13:60:
         75:7f:32:33:a0:23:59:a5:35:5b:9e:1d:88:fc:21:2d:f8:d4:
         c9:1e:a9:4b:82:a2:f4:48:28:17:28:77:1c:e7:de:d9:f5:54:
         7f:3a:17:96:92:4c:d8:b5:29:c4:03:d6:e7:ff:9f:8f:da:e9:
         65:4b:db:bf:c6:cb:4d:42:5b:1c:25:c4:df:12:5e:a2:70:f8:
         28:e2:c6:0f:50:ce:cb:51:0a:a3:d3:60:6e:85:a2:7e:e3:fa:
         c8:19:cb:d5:e0:e5:7f:30:f5:06:0d:b3:a1:d4:59:0a:2c:ba:
         c9:74:fc:05:39:02:8a:18:0d:09:fc:32:a1:2b:1a:a5:6e:56:
         b4:24:15:de:43:c1:04:1c:8a:e2:1b:d9:c2:4c:36:ae:80:43:
         21:6e:2d:67:2d:00:aa:10:6d:fc:01:32:35:0b:fc:f5:a7:e2:
         41:5a:40:d7:27:f6:55:cd:be:ea:33:c9:01:b9:30:60:3d:d5:
         cb:2a:ae:1e:ab:87:a9:09:61:62:5a:87:d7:da:67:d7:4b:ce:
         7c:95:15:41:52:46:74:79:05:93:8d:94:fc:5d:dd:7c:63:e7:
         38:89:e3:84:f0:1a:cb:57:d5:ee:d2:6f:6e:cd:20:95:13:05:
         72:a8:0a:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Q+cxHjxZ/OQAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3NWQ0NzYtZGQ0Mi00NTAxLTk2OTYtZmFmMjM0YzA1
ZTM2MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NWE0NTIzN2UtZGRhYi00NDFmLWI4MmEtMTU4MDgwMTk3NWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwlw1OjRS73IDLTz/eASyyX8hiAIy6o8FxDz
YPlA/HN2ICGIVtX68cqKTu952ODiYDaBwPZTEqr38OZUFM4gQ9RrFLBNbTUs5e+c
YBKgMDgxza8vqUEonR5jMo1IzzJ8t/8ZT+1uiLabDVjR3AqIOpFNYlUmX3vXOrDL
fGiwKGcSnp1lN5IqKwpxOiWtAUv6wQiGS78oxKAzXRiZh5eeAFpSyhmJHT8ZmT0O
Do+x5egUShzsBs6UqtfVxbq4xrJ93uawFkkNsrSuQp344PyBrutGJe3NjK0mBk5u
OAxXbtRC0L7SvxOnFeFHhcCyCjzFuVnOAlvAd+v7ZV/BUqqaxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/+L7CYYUxHiHnGO2rj6Ux6YdkBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82Yzc1
ZDQ3Ni1kZDQyLTQ1MDEtOTY5Ni1mYWYyMzRjMDVlMzYvYWM0ZTA4MmYtMzRiYi0z
ZDFlLTkzMWUtMDFjZjBlZDEwY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmM3NWQ0NzYtZGQ0Mi00NTAxLTk2
OTYtZmFmMjM0YzA1ZTM2LzZjNzVkNDc2LWRkNDItNDUwMS05Njk2LWZhZjIzNGMw
NWUzNi5jcmwwHwYDVR0jBBgwFoAUPt/1NmmykXn2OUWEsUO77OVlkr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82Yzc1ZDQ3Ni1kZDQyLTQ1MDEtOTY5Ni1mYWYy
MzRjMDVlMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP4XAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVDq+S6LhFHTUAvccPUsM0TYHV/MjOgI1mlNVueHYj8IS341MkeqUuC
ovRIKBcodxzn3tn1VH86F5aSTNi1KcQD1uf/n4/a6WVL27/Gy01CWxwlxN8SXqJw
+Cjixg9QzstRCqPTYG6Fon7j+sgZy9Xg5X8w9QYNs6HUWQosusl0/AU5AooYDQn8
MqErGqVuVrQkFd5DwQQciuIb2cJMNq6AQyFuLWctAKoQbfwBMjUL/PWn4kFaQNcn
9lXNvuozyQG5MGA91csqrh6rh6kJYWJah9faZ9dLznyVFUFSRnR5BZONlPxd3Xxj
5ziJ44TwGstX1e7Sb27NIJUTBXKoCjM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:33 2026 by rpki-client