Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cba47c1b-479b-3d4e-a5bc-6a3eb37141dd.roa
File:                     cba47c1b-479b-3d4e-a5bc-6a3eb37141dd.roa (raw, json)
Hash identifier:          E9JUpiSANlVvCaq4kV2uKWR8yGkVVz9EWOqtsAuuH2E=
Subject key identifier:   27:1F:35:C2:1B:40:E8:34:47:C0:02:BC:09:19:7F:CB:29:2E:7C:09
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584E51E9E3D0E6FCA9F108AC06A0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cba47c1b-479b-3d4e-a5bc-6a3eb37141dd.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     203724
IP address blocks:        131.229.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e3:d0:e6:fc:a9:f1:08:ac:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=bea5d209-e8db-4711-b894-086694d3e748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:da:36:84:79:06:57:b7:12:62:96:91:b7:
                    5f:e4:6c:3d:e0:e6:45:ad:59:61:9e:9b:ba:06:53:
                    ef:19:2e:76:75:dc:69:7d:61:7b:39:83:0c:14:c6:
                    00:a1:07:ea:e0:7a:11:c7:8c:ce:54:98:e9:e8:69:
                    25:84:ef:0b:d8:ed:94:4e:7f:3c:8c:b9:5e:a2:8a:
                    81:7a:bf:0b:21:7f:fa:03:a6:45:96:b5:b4:e6:f6:
                    b0:5b:7d:05:ee:0a:7d:5b:4f:6e:73:9c:29:3d:0b:
                    17:fd:81:dc:aa:c1:8b:9f:fe:cf:df:0b:2d:74:37:
                    fa:fb:f8:f1:1d:e6:cc:26:9e:a8:3e:30:4b:b4:a7:
                    88:5b:2c:da:d2:a7:d3:d9:fe:47:da:b9:e9:8a:d6:
                    23:08:bd:12:0f:73:45:0f:1c:9b:cb:43:49:22:1b:
                    31:df:9f:77:2e:73:8c:b8:48:0f:e9:ae:de:92:50:
                    9d:cc:fd:33:1b:a8:7e:c0:2c:94:4a:85:c2:a7:23:
                    81:36:83:e7:cf:71:45:fb:d6:cb:ae:9e:cf:1e:4d:
                    06:4a:1d:9e:43:48:19:a5:2e:bd:8e:9d:94:4d:46:
                    f9:02:84:22:0a:56:ce:cc:ad:61:30:df:0c:b5:48:
                    90:b7:e6:22:11:53:5c:6b:ec:f3:c5:05:c2:24:47:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:35:C2:1B:40:E8:34:47:C0:02:BC:09:19:7F:CB:29:2E:7C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/cba47c1b-479b-3d4e-a5bc-6a3eb37141dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a8:40:59:d5:d5:0d:24:b5:a3:76:c6:cb:50:c0:1e:07:3e:
         8c:3f:a5:51:e9:ed:48:47:3f:7a:75:28:30:1b:39:14:75:2f:
         fb:aa:77:3f:cb:4e:2e:4e:3d:01:a1:96:10:74:41:13:c2:33:
         a8:2b:73:7e:28:f4:69:bd:26:14:44:26:0f:a7:e1:d8:bf:a2:
         c8:14:f2:07:75:4b:3d:76:b6:b3:61:9d:73:51:4d:0d:96:b2:
         2a:c7:49:c0:84:82:db:cb:47:e4:c3:1f:18:ee:ed:2f:47:de:
         8c:15:93:9f:8f:6e:ec:20:7c:90:1e:98:29:98:5a:65:9f:d2:
         f6:53:fe:f8:03:cc:9f:cc:7d:95:f0:d3:39:d3:43:e5:0f:f9:
         7b:ab:16:c5:f5:d7:28:d7:16:b2:8d:a4:66:ed:8c:74:2c:42:
         5f:dc:25:c4:69:0e:28:ec:84:36:16:e1:93:a7:dc:ff:67:76:
         d1:d2:a9:5d:08:36:4e:8d:80:c3:6c:c0:26:fe:11:30:cb:2d:
         aa:9d:fd:62:cb:80:2a:40:e2:02:1c:73:d4:e3:a4:68:95:ab:
         60:61:ad:f7:2e:c9:76:c1:0a:03:95:c7:4f:5e:9c:ca:ce:84:
         df:92:66:d7:d9:49:62:23:64:7b:4f:13:31:5e:4a:43:c0:b9:
         f8:91:5e:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6ePQ5vyp8QisBqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk
YmVhNWQyMDktZThkYi00NzExLWI4OTQtMDg2Njk0ZDNlNzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT3aNoR5Ble3EmKWkbdf5Gw94OZFrVlhnpu6
BlPvGS52ddxpfWF7OYMMFMYAoQfq4HoRx4zOVJjp6GklhO8L2O2UTn88jLleooqB
er8LIX/6A6ZFlrW05vawW30F7gp9W09uc5wpPQsX/YHcqsGLn/7P3wstdDf6+/jx
HebMJp6oPjBLtKeIWyza0qfT2f5H2rnpitYjCL0SD3NFDxyby0NJIhsx3593LnOM
uEgP6a7eklCdzP0zG6h+wCyUSoXCpyOBNoPnz3FF+9bLrp7PHk0GSh2eQ0gZpS69
jp2UTUb5AoQiClbOzK1hMN8MtUiQt+YiEVNca+zzxQXCJEdauQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcfNcIbQOg0R8ACvAkZf8spLnwJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvY2JhNDdjMWItNDc5Yi0z
ZDRlLWE1YmMtNmEzZWIzNzE0MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyoQFnV1Q0ktaN2xstQwB4HPow/pVHp7UhHP3p1KDAbORR1L/uqdz/L
Ti5OPQGhlhB0QRPCM6grc34o9Gm9JhREJg+n4di/osgU8gd1Sz12trNhnXNRTQ2W
sirHScCEgtvLR+TDHxju7S9H3owVk5+PbuwgfJAemCmYWmWf0vZT/vgDzJ/MfZXw
0znTQ+UP+XurFsX11yjXFrKNpGbtjHQsQl/cJcRpDijshDYW4ZOn3P9ndtHSqV0I
Nk6NgMNswCb+ETDLLaqd/WLLgCpA4gIcc9TjpGiVq2BhrfcuyXbBCgOVx09enMrO
hN+SZtfZSWIjZHtPEzFeSkPAufiRXng=
-----END CERTIFICATE-----
Generated at Mon Jul 20 01:28:13 2026 by rpki-client