Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cdb664bd-4017-307d-b6bb-e8bb50adb5aa.roa
File:                     cdb664bd-4017-307d-b6bb-e8bb50adb5aa.roa (raw, json)
Hash identifier:          OvMdhPy75OC2EC3XJrWfDSDXdFiHdALQz0zbjUV9FnM=
Subject key identifier:   2C:5F:01:4A:5E:5F:9C:23:12:93:65:89:64:EF:0D:1F:72:90:C7:B2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D14BA52D54598EF581D364000
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cdb664bd-4017-307d-b6bb-e8bb50adb5aa.roa
Signing time:             Fri 06 Mar 2026 18:13:10 +0000
ROA not before:           Fri 06 Mar 2026 18:13:10 +0000
ROA not after:            Thu 04 Jun 2026 17:13:10 +0000
asID:                     271
IP address blocks:        142.231.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:ba:52:d5:45:98:ef:58:1d:36:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar  6 18:13:10 2026 GMT
            Not After : Jun  4 17:13:10 2026 GMT
        Subject: CN=1182ee9a-da5b-4132-b3c7-80c7f7cd4bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:a5:a4:45:31:a0:55:e0:e9:d9:db:78:28:
                    6f:2d:1f:80:fd:63:0e:a7:06:ad:20:46:30:06:d1:
                    6b:4f:c4:c7:0d:49:ff:56:ca:1c:15:45:cb:fe:6d:
                    36:f0:ac:32:c0:16:33:2b:78:66:c8:2d:ab:80:f4:
                    ca:e4:a5:b6:2a:47:43:fc:68:75:b8:02:65:5d:19:
                    ed:5f:9d:a6:68:b0:fe:6f:53:da:0e:2e:6b:f1:0b:
                    34:ae:37:89:a1:d7:d2:aa:3b:b1:2c:d4:08:8e:3e:
                    fa:ba:ea:ef:6f:4f:45:30:18:cb:c8:2f:fb:2d:a8:
                    76:fd:14:17:37:77:34:bb:2d:c2:66:fd:1d:0b:3f:
                    85:d2:23:56:e6:60:62:8a:bf:9b:6b:f0:bc:94:0a:
                    64:0d:8f:06:4b:b0:4b:d8:0e:fd:14:6d:76:eb:f9:
                    ff:cd:33:b9:97:3e:c6:d6:38:4e:8c:ed:39:99:8d:
                    1c:23:d5:bb:d5:74:66:29:66:2d:8b:34:3f:43:d9:
                    55:c0:54:64:3e:38:74:b1:e0:73:19:ae:0f:f3:ae:
                    9c:ba:40:ed:66:85:33:76:8e:a0:a9:20:93:18:12:
                    24:aa:95:cc:fc:96:0c:5b:b5:ad:a6:51:0a:7f:51:
                    90:76:0b:74:cc:43:57:d8:09:ae:7b:27:33:e2:93:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5F:01:4A:5E:5F:9C:23:12:93:65:89:64:EF:0D:1F:72:90:C7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/cdb664bd-4017-307d-b6bb-e8bb50adb5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:71:21:3a:1a:02:4c:39:04:68:c5:fe:86:18:a8:c9:57:eb:
         2a:37:51:ae:2f:39:c7:17:bf:4b:ef:e3:37:88:16:38:c6:dc:
         61:d2:22:bb:f7:2c:3f:74:29:f9:ff:db:c0:fa:bb:8a:b1:c5:
         50:5a:78:30:1f:bb:e5:bc:6f:c3:c0:9e:1c:b4:ae:73:e8:0a:
         34:0e:dd:41:a6:d1:7f:09:e3:c8:26:8c:4c:db:ac:d6:03:00:
         a4:53:38:77:85:c5:74:ac:3e:48:23:ac:38:90:f4:97:10:78:
         5a:f2:59:a3:b0:0f:11:86:7e:44:fc:0c:06:97:56:d7:68:e9:
         89:24:14:34:2c:68:c1:a2:7a:e1:e5:36:0f:92:67:8a:2f:72:
         4b:d8:af:ad:cb:37:38:71:00:79:bb:93:8f:63:fd:41:77:aa:
         28:91:b2:47:d4:da:6b:49:c0:a8:0d:04:f0:b1:d0:09:b6:36:
         d0:8c:6c:bd:67:b2:9a:ab:96:51:26:17:ef:83:3f:e4:ac:c7:
         a4:6f:d5:0c:6a:f3:80:43:c5:67:30:7e:41:e7:69:a0:20:c2:
         dd:45:51:7b:56:d2:17:27:1b:9a:a9:c1:2c:09:d7:dc:bc:61:
         2e:94:f1:ba:45:d9:f6:1a:7f:7d:75:0f:c8:58:a2:4f:15:f8:
         e4:00:70:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UulLVRZjvWB02QAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI2MDMwNjE4MTMxMFoXDTI2MDYwNDE3MTMxMFowLzEtMCsGA1UEAxMk
MTE4MmVlOWEtZGE1Yi00MTMyLWIzYzctODBjN2Y3Y2Q0YmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR6lpEUxoFXg6dnbeChvLR+A/WMOpwatIEYw
BtFrT8THDUn/VsocFUXL/m028KwywBYzK3hmyC2rgPTK5KW2KkdD/Gh1uAJlXRnt
X52maLD+b1PaDi5r8Qs0rjeJodfSqjuxLNQIjj76uurvb09FMBjLyC/7Lah2/RQX
N3c0uy3CZv0dCz+F0iNW5mBiir+ba/C8lApkDY8GS7BL2A79FG126/n/zTO5lz7G
1jhOjO05mY0cI9W71XRmKWYtizQ/Q9lVwFRkPjh0seBzGa4P866cukDtZoUzdo6g
qSCTGBIkqpXM/JYMW7WtplEKf1GQdgt0zENX2Amueycz4pNvNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxfAUpeX5wjEpNliWTvDR9ykMeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvY2RiNjY0YmQtNDAxNy0z
MDdkLWI2YmItZThiYjUwYWRiNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjudzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlxIToaAkw5BGjF/oYYqMlX6yo3Ua4vOccXv0vv4zeIFjjG3GHSIrv3
LD90Kfn/28D6u4qxxVBaeDAfu+W8b8PAnhy0rnPoCjQO3UGm0X8J48gmjEzbrNYD
AKRTOHeFxXSsPkgjrDiQ9JcQeFryWaOwDxGGfkT8DAaXVtdo6YkkFDQsaMGieuHl
Ng+SZ4ovckvYr63LNzhxAHm7k49j/UF3qiiRskfU2mtJwKgNBPCx0Am2NtCMbL1n
spqrllEmF++DP+Ssx6Rv1Qxq84BDxWcwfkHnaaAgwt1FUXtW0hcnG5qpwSwJ19y8
YS6U8bpF2fYaf311D8hYok8V+OQAcCo=
-----END CERTIFICATE-----
Generated at Mon Mar 16 12:22:01 2026 by rpki-client