Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/8dddcf71-ed27-3a16-8662-6641a08d2af3.roa
File:                     8dddcf71-ed27-3a16-8662-6641a08d2af3.roa (raw, json)
Hash identifier:          YmoBhDdkmtao0f9SZnl429U1K8PxAA2Gsor/DgmT/Ng=
Subject key identifier:   08:4C:35:9B:8C:12:AB:76:D6:95:65:97:92:24:C2:A0:B2:8A:D9:63
Certificate issuer:       /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
Certificate serial:       010D0C9F4328584ED9C73B9F0D5EC0C5BD6CB980
Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/8dddcf71-ed27-3a16-8662-6641a08d2af3.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     174
IP address blocks:        63.141.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3b:9f:0d:5e:c0:c5:bd:6c:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=d1d27a1b-d04d-4fe7-8b7a-74ade87f52b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:13:59:30:0c:29:b2:1c:57:f7:99:81:65:
                    d1:69:dd:76:40:80:14:d1:c2:fa:aa:1a:0c:11:cc:
                    75:1e:72:95:33:f3:16:ff:e8:e5:92:1a:f7:8d:10:
                    74:43:6d:fa:24:d0:bd:d2:93:bd:9b:f9:dc:32:73:
                    f5:8a:03:7e:e3:c6:53:c7:41:5b:3f:df:e0:0a:bf:
                    97:3e:82:4e:46:b1:c6:43:b6:30:62:76:ae:4d:dd:
                    a1:98:72:81:6d:fa:7f:2e:71:1c:fa:4f:19:32:a4:
                    70:94:73:29:0f:c8:7f:5c:32:28:2b:9f:d5:bf:b8:
                    72:fc:e2:22:f3:63:18:f2:4f:3d:f1:4a:e5:94:31:
                    fb:1f:24:42:ba:cc:04:b0:0c:fd:7c:3e:34:69:80:
                    97:bc:b6:10:a3:fa:0d:c4:39:78:48:83:a5:9c:69:
                    9d:f0:4b:66:37:0d:53:4e:22:6b:02:56:61:a4:8e:
                    55:c9:7f:30:d6:8b:ac:9a:14:e7:84:6b:28:ca:2e:
                    79:2c:d1:8f:10:b4:bb:f3:c4:fb:fc:a3:fc:e1:9b:
                    24:b5:ea:de:03:3d:81:6f:ce:19:8b:ce:17:4a:02:
                    8c:12:f9:bc:88:0e:f4:f5:b9:61:6c:b3:a9:f0:70:
                    18:38:ad:df:7b:e7:64:be:94:25:44:97:67:44:70:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4C:35:9B:8C:12:AB:76:D6:95:65:97:92:24:C2:A0:B2:8A:D9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/8dddcf71-ed27-3a16-8662-6641a08d2af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl

            X509v3 Authority Key Identifier:
                keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:9a:c7:06:b1:a2:9d:25:19:04:8e:24:df:6a:56:05:f8:
         a9:83:f5:3c:20:0a:ba:78:63:be:c7:af:a9:da:ac:d9:98:db:
         aa:05:95:33:52:1c:3a:ed:7e:4f:e1:36:59:a0:05:44:4b:4c:
         9e:8d:e4:92:2d:c8:48:b6:7b:df:0e:90:5b:e2:a3:87:a5:9d:
         08:91:c5:9e:35:29:a0:61:6c:df:23:35:66:a1:57:cd:a3:69:
         e9:60:f9:c8:19:18:67:8d:25:97:aa:8d:09:9d:f1:55:6a:6b:
         a6:99:ae:df:ac:5c:3e:e5:e5:87:47:e2:4d:fb:37:bb:4b:cf:
         b4:ae:9f:b3:86:50:78:4d:32:3b:0a:a4:3d:ee:86:52:64:b7:
         b3:0b:5e:ff:b6:cd:73:6c:63:65:82:c2:c2:7c:fa:3e:fb:9f:
         cc:2e:a8:bb:96:27:44:24:48:77:eb:30:18:0e:8e:13:7c:22:
         7a:4e:24:c3:5b:4f:f9:74:34:d8:14:a0:ef:55:fe:ef:fc:93:
         b2:69:50:02:54:99:79:f7:ae:98:0a:87:b6:86:44:df:45:c4:
         c4:8f:e0:60:ce:f1:8a:ac:49:a1:f3:36:6f:27:c2:c2:b5:fc:
         de:ee:ae:c6:16:8c:57:95:67:e8:fd:b6:b7:74:ef:45:33:74:
         f6:aa:d8:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzufDV7Axb1suYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh
NGZjMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
ZDFkMjdhMWItZDA0ZC00ZmU3LThiN2EtNzRhZGU4N2Y1MmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SoTWTAMKbIcV/eZgWXRad12QIAU0cL6qhoM
Ecx1HnKVM/MW/+jlkhr3jRB0Q236JNC90pO9m/ncMnP1igN+48ZTx0FbP9/gCr+X
PoJORrHGQ7YwYnauTd2hmHKBbfp/LnEc+k8ZMqRwlHMpD8h/XDIoK5/Vv7hy/OIi
82MY8k898UrllDH7HyRCuswEsAz9fD40aYCXvLYQo/oNxDl4SIOlnGmd8EtmNw1T
TiJrAlZhpI5VyX8w1ousmhTnhGsoyi55LNGPELS788T7/KP84ZsktereAz2Bb84Z
i84XSgKMEvm8iA709blhbLOp8HAYOK3fe+dkvpQlRJdnRHB1mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhMNZuMEqt21pVll5IkwqCyitljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz
NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvOGRkZGNmNzEtZWQyNy0z
YTE2LTg2NjItNjY0MWEwOGQyYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm
M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2
YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl
NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP40hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoumscGsaKdJRkEjiTfalYF+KmD9TwgCrp4Y77Hr6narNmY26oFlTNS
HDrtfk/hNlmgBURLTJ6N5JItyEi2e98OkFvio4elnQiRxZ41KaBhbN8jNWahV82j
aelg+cgZGGeNJZeqjQmd8VVqa6aZrt+sXD7l5YdH4k37N7tLz7Sun7OGUHhNMjsK
pD3uhlJkt7MLXv+2zXNsY2WCwsJ8+j77n8wuqLuWJ0QkSHfrMBgOjhN8InpOJMNb
T/l0NNgUoO9V/u/8k7JpUAJUmXn3rpgKh7aGRN9FxMSP4GDO8YqsSaHzNm8nwsK1
/N7ursYWjFeVZ+j9trd070UzdPaq2Og=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:11 2026 by rpki-client