Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
File:                     d294f045-3323-3f7a-bd57-473408d74726.roa (raw, json)
Hash identifier:          zu3nIXpQXP3dTtL9xnpn0NL0YK8lNi88qQNa9/WdBVQ=
Subject key identifier:   3C:A4:C8:8C:36:B4:61:2C:5F:E0:B4:47:BE:CB:77:02:77:5C:36:09
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584D300A3A11E8C0B3C844396680
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     2728
IP address blocks:        131.143.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:3a:11:e8:c0:b3:c8:44:39:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=feaca32b-952b-48d1-bb37-0a91266f5c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:3e:7a:ac:bf:56:54:6a:10:90:7f:f9:9a:
                    d9:70:a8:e2:ca:30:d2:ab:58:dd:44:4c:37:09:b5:
                    37:a8:27:10:29:8c:a0:34:97:49:23:0d:4e:86:dc:
                    2b:47:84:82:31:cf:ff:c1:35:b7:ca:cf:06:e0:1d:
                    2c:29:ea:d0:ab:13:0f:39:90:4f:dd:ca:e8:d5:2c:
                    3f:48:15:4d:d2:1b:f3:ec:54:2f:88:b8:f1:50:b5:
                    bf:ce:0c:a8:ff:ea:64:ee:56:76:f4:73:17:91:57:
                    3b:f3:5c:22:95:7d:a2:0e:78:91:55:50:4a:71:25:
                    87:b3:2a:7d:a3:d4:fe:2e:d4:30:cf:26:4b:ff:df:
                    05:70:d6:bf:6c:9c:ef:5c:50:66:01:6c:9c:73:ed:
                    20:c8:c7:8c:be:01:2d:82:cb:7f:5a:4f:b5:f8:45:
                    34:90:63:fe:e9:3e:88:0e:2c:5e:89:02:be:08:0b:
                    6a:df:40:e8:c3:8b:28:83:46:67:0f:ff:94:fa:b9:
                    ee:09:dd:47:7e:8b:cd:7d:4d:0e:87:07:8f:25:62:
                    8b:8f:ec:71:c3:c0:bf:f5:a6:a9:a6:8b:32:c5:d6:
                    64:d0:2c:ce:10:3f:5f:ce:bc:ab:bb:15:0b:1e:68:
                    32:e4:2e:5e:08:4f:a4:81:48:87:5c:82:7d:a2:f1:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:C8:8C:36:B4:61:2C:5F:E0:B4:47:BE:CB:77:02:77:5C:36:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/d294f045-3323-3f7a-bd57-473408d74726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:87:38:ad:96:85:f1:1e:43:32:53:86:f2:54:7e:b7:c0:
         2a:97:0b:6d:cb:01:bd:30:d0:c0:27:29:d3:77:38:17:d5:68:
         50:ce:5f:c6:6b:89:da:da:f8:53:af:f1:a7:04:5f:84:cf:4b:
         8f:9e:28:c6:7f:0e:07:41:64:e6:d9:27:db:91:52:68:6e:05:
         0d:36:8f:96:b5:1a:35:63:ed:ba:ae:1a:79:c5:c6:08:17:02:
         bf:6c:d0:6a:87:1d:66:db:f0:7d:d7:39:89:77:65:dc:d1:0c:
         06:9e:42:90:52:5c:a7:b2:46:93:75:97:dc:6f:7d:f9:96:16:
         eb:6a:05:62:ad:16:4c:69:11:2c:96:45:78:1c:e5:64:dc:80:
         0f:96:bf:15:01:d5:82:dc:c8:99:a2:8e:16:23:1c:e6:85:1e:
         f2:2f:0b:f0:2f:d6:f2:16:a9:c9:45:58:1f:fd:7f:4b:d8:ee:
         dd:70:04:dd:d4:a3:19:62:73:f2:0c:aa:69:df:2b:c8:79:49:
         d0:5a:70:f8:52:e9:5f:a8:04:03:25:23:c7:78:21:65:26:b2:
         19:d0:b9:2e:fe:85:10:6f:15:0d:fb:f6:7a:69:b5:d7:06:ea:
         65:d9:66:3f:a0:75:26:ae:20:5e:3c:94:73:8e:4e:2e:d4:30:
         2e:9b:34:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjoR6MCzyEQ5ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1
YjBhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZmVhY2EzMmItOTUyYi00OGQxLWJiMzctMGE5MTI2NmY1YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6k+eqy/VlRqEJB/+ZrZcKjiyjDSq1jdREw3
CbU3qCcQKYygNJdJIw1OhtwrR4SCMc//wTW3ys8G4B0sKerQqxMPOZBP3cro1Sw/
SBVN0hvz7FQviLjxULW/zgyo/+pk7lZ29HMXkVc781wilX2iDniRVVBKcSWHsyp9
o9T+LtQwzyZL/98FcNa/bJzvXFBmAWycc+0gyMeMvgEtgst/Wk+1+EU0kGP+6T6I
DixeiQK+CAtq30Dow4sog0ZnD/+U+rnuCd1HfovNfU0OhwePJWKLj+xxw8C/9aap
posyxdZk0CzOED9fzryruxULHmgy5C5eCE+kgUiHXIJ9ovHDDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDykyIw2tGEsX+C0R77LdwJ3XDYJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk
ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvZDI5NGYwNDUtMzMyMy0z
ZjdhLWJkNTctNDczNDA4ZDc0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz
NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3
NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0
Mzk3NzViMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg4/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzIhzitloXxHkMyU4byVH63wCqXC23LAb0w0MAnKdN3OBfVaFDOX8Zr
idra+FOv8acEX4TPS4+eKMZ/DgdBZObZJ9uRUmhuBQ02j5a1GjVj7bquGnnFxggX
Ar9s0GqHHWbb8H3XOYl3ZdzRDAaeQpBSXKeyRpN1l9xvffmWFutqBWKtFkxpESyW
RXgc5WTcgA+WvxUB1YLcyJmijhYjHOaFHvIvC/Av1vIWqclFWB/9f0vY7t1wBN3U
oxlic/IMqmnfK8h5SdBacPhS6V+oBAMlI8d4IWUmshnQuS7+hRBvFQ379npptdcG
6mXZZj+gdSauIF48lHOOTi7UMC6bNPs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:01 2026 by rpki-client