Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/8f19a2f7-b5e0-3290-ae4b-fc9a1d001775.roa
File:                     8f19a2f7-b5e0-3290-ae4b-fc9a1d001775.roa (raw, json)
Hash identifier:          k3s/o7Zr07yEZC5s06RWonPVGSVwVoZdzHJRNiPEmAI=
Subject key identifier:   36:A7:81:23:7D:C8:92:FE:C9:0A:5E:35:C1:9A:AE:1A:84:34:DF:AF
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B6EF56C791A6759B5E2030C00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/8f19a2f7-b5e0-3290-ae4b-fc9a1d001775.roa
Signing time:             Mon 06 Oct 2025 16:21:07 +0000
ROA not before:           Mon 06 Oct 2025 16:21:07 +0000
ROA not after:            Sun 04 Jan 2026 17:21:07 +0000
asID:                     271
IP address blocks:        142.231.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:f5:6c:79:1a:67:59:b5:e2:03:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct  6 16:21:07 2025 GMT
            Not After : Jan  4 17:21:07 2026 GMT
        Subject: CN=28699410-a1cd-4d71-bbad-c3b6ee7bcef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:cc:94:7c:d7:be:ee:ce:d8:03:84:53:a1:
                    31:0a:e4:77:18:74:da:32:7e:20:5a:35:63:f3:da:
                    a3:40:5e:46:45:3d:96:45:51:ca:19:f9:5a:60:8b:
                    4e:42:5b:3e:bb:7b:5b:4b:31:1e:5f:8d:72:e1:8d:
                    1a:cb:10:94:51:3a:4a:3d:13:c5:df:90:73:11:1e:
                    ad:8f:c3:c4:92:de:b0:ef:de:02:27:90:61:9d:37:
                    a6:69:d0:8e:73:72:19:7c:1f:df:2e:a1:b8:96:42:
                    a8:27:f4:b1:6e:de:09:00:da:7f:f0:41:0b:5d:4d:
                    99:5e:51:30:c7:45:15:a5:b6:67:fb:1c:d5:43:9d:
                    d6:12:ec:a1:ec:c2:2f:a4:9f:2f:6b:35:84:76:9c:
                    e9:e1:3d:c9:28:f5:16:b3:71:81:b4:4a:d2:a5:a6:
                    ef:fd:c3:98:13:c1:20:a3:89:1b:80:29:12:27:92:
                    d1:a4:f8:00:c7:35:5f:12:52:01:2e:93:d5:63:96:
                    32:f6:33:e9:64:20:8e:73:84:a2:db:f7:e7:da:b4:
                    8b:fe:8a:90:73:8e:f0:23:dd:08:55:3c:fe:45:3f:
                    71:ba:43:a0:68:86:9b:30:b4:6f:f0:ab:15:65:a6:
                    87:c9:1c:49:f6:d0:96:21:0e:d3:cf:ce:a7:5b:03:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:81:23:7D:C8:92:FE:C9:0A:5E:35:C1:9A:AE:1A:84:34:DF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/8f19a2f7-b5e0-3290-ae4b-fc9a1d001775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:32:d6:ee:73:64:86:99:ef:91:aa:79:ff:da:1d:f0:00:
         59:60:4c:af:85:5d:05:13:d1:df:ba:a9:2f:95:a9:ea:25:bb:
         72:e8:1c:f3:56:95:bf:06:5f:b7:00:37:ef:45:42:19:d6:18:
         46:a5:4f:32:c2:93:9f:86:85:12:c7:fe:bb:81:56:77:fd:48:
         b2:0b:ff:99:21:38:8a:5e:b4:cc:e0:52:fd:ff:fb:42:a6:ea:
         15:32:03:48:96:12:11:1a:72:e5:f5:2e:fc:63:f3:3e:46:c1:
         44:3c:87:81:31:df:3f:bf:75:81:be:e8:43:85:57:36:ab:1c:
         2e:62:ca:86:87:81:21:19:9e:49:41:13:59:42:76:f1:84:40:
         db:58:73:c5:54:d4:44:cc:c2:d2:d2:60:d2:bc:3e:74:60:4c:
         f3:19:fa:18:70:2a:85:81:50:89:ab:b8:05:5a:e0:cd:7b:b7:
         3c:00:8d:c7:fc:9d:c6:f5:10:58:49:f6:23:33:85:8e:cb:45:
         c3:a7:73:4e:19:1d:cd:bb:7f:27:4f:57:6d:0e:25:f6:a6:48:
         7f:ca:ac:b2:b8:e0:b1:4f:04:34:1f:9b:ec:c5:a5:47:b9:d0:
         00:08:53:28:d5:e5:3f:b2:7f:98:fc:db:d1:e4:e4:bd:c0:85:
         76:65:48:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu9Wx5GmdZteIDDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MTAwNjE2MjEwN1oXDTI2MDEwNDE3MjEwN1owLzEtMCsGA1UEAxMk
Mjg2OTk0MTAtYTFjZC00ZDcxLWJiYWQtYzNiNmVlN2JjZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPMlHzXvu7O2AOEU6ExCuR3GHTaMn4gWjVj
89qjQF5GRT2WRVHKGflaYItOQls+u3tbSzEeX41y4Y0ayxCUUTpKPRPF35BzER6t
j8PEkt6w794CJ5BhnTemadCOc3IZfB/fLqG4lkKoJ/Sxbt4JANp/8EELXU2ZXlEw
x0UVpbZn+xzVQ53WEuyh7MIvpJ8vazWEdpzp4T3JKPUWs3GBtErSpabv/cOYE8Eg
o4kbgCkSJ5LRpPgAxzVfElIBLpPVY5Yy9jPpZCCOc4Si2/fn2rSL/oqQc47wI90I
VTz+RT9xukOgaIabMLRv8KsVZaaHyRxJ9tCWIQ7Tz86nWwNuJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDangSN9yJL+yQpeNcGarhqENN+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOGYxOWEyZjctYjVlMC0z
MjkwLWFlNGItZmM5YTFkMDAxNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjuduMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/lMtbuc2SGme+Rqnn/2h3wAFlgTK+FXQUT0d+6qS+Vqeolu3LoHPNW
lb8GX7cAN+9FQhnWGEalTzLCk5+GhRLH/ruBVnf9SLIL/5khOIpetMzgUv3/+0Km
6hUyA0iWEhEacuX1Lvxj8z5GwUQ8h4Ex3z+/dYG+6EOFVzarHC5iyoaHgSEZnklB
E1lCdvGEQNtYc8VU1ETMwtLSYNK8PnRgTPMZ+hhwKoWBUImruAVa4M17tzwAjcf8
ncb1EFhJ9iMzhY7LRcOnc04ZHc27fydPV20OJfamSH/KrLK44LFPBDQfm+zFpUe5
0AAIUyjV5T+yf5j829Hk5L3AhXZlSOU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:45 2025 by rpki-client