Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa
File:                     cba13dc5-cfa9-376d-9faf-347489e5b71a.roa (raw, json)
Hash identifier:          K9Rj2GE11+FBzYWs/nhaNSuOWq7kG06CXat0jdsLmmc=
Subject key identifier:   8E:D5:05:11:B5:8D:67:D1:54:48:D2:62:D4:3B:E4:DF:75:D4:65:62
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584D3E000EAA7D664B99FBFFE080
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     32135
IP address blocks:        140.235.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:0e:aa:7d:66:4b:99:fb:ff:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=5b702f04-258d-4d54-831d-46a6eedeee27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:1c:91:86:6a:19:46:7a:13:d8:d5:25:68:
                    58:97:9e:38:d2:96:92:b4:cd:40:74:56:e7:cd:4c:
                    9b:f7:f6:e6:60:52:fd:14:9d:bc:4b:c1:8f:16:48:
                    7c:c9:a9:c9:df:02:d0:23:0e:92:7b:14:47:9d:de:
                    c3:2d:d2:b6:ae:81:5b:ee:b7:c1:36:3a:18:51:ed:
                    c9:ae:fe:a5:1d:9e:3b:96:9e:90:58:59:5b:f3:c6:
                    f4:90:fc:04:cb:cd:54:23:c2:5a:9d:57:3c:ce:26:
                    99:f6:35:37:28:da:5d:e7:8a:e6:41:31:04:e0:f0:
                    99:45:7a:9e:c8:7c:aa:47:e6:ea:fd:48:5c:58:9a:
                    3b:e0:c9:21:22:66:71:1d:49:e8:63:10:b1:c3:f0:
                    fc:58:b4:dc:29:75:62:bd:c2:6a:ac:9c:6e:3d:60:
                    b9:48:02:2b:97:d3:b0:4f:32:da:2c:6d:53:9a:ce:
                    e7:f9:02:01:62:5f:22:56:af:92:79:3a:56:15:49:
                    ad:00:68:f4:fb:29:b1:aa:eb:17:ea:8f:23:54:74:
                    e8:20:3a:2b:fc:be:e6:c5:7d:7f:53:21:14:a1:b3:
                    12:9f:a6:6b:b6:2f:ae:f0:7e:2b:f3:65:c6:56:2f:
                    d8:80:c5:da:8e:28:29:8f:d4:2b:e3:b2:27:6a:37:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D5:05:11:B5:8D:67:D1:54:48:D2:62:D4:3B:E4:DF:75:D4:65:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/cba13dc5-cfa9-376d-9faf-347489e5b71a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:30:0b:b8:16:6f:1c:c5:d4:48:98:7a:de:59:f2:4b:e4:c4:
         e5:14:c6:83:83:fe:48:ec:c3:af:be:83:2b:33:07:93:35:d2:
         38:40:28:25:d4:e8:7f:a5:f0:74:09:cc:20:1f:9e:b4:7f:6a:
         fd:29:49:b7:ee:c6:c8:03:a7:29:04:23:10:ce:b1:ed:52:b2:
         e3:98:23:0d:9e:d3:85:6d:d0:b6:82:99:c4:0b:ae:a5:bd:a0:
         d2:28:d2:48:09:86:6d:d9:be:0b:8b:c8:13:a2:6f:7d:43:48:
         ab:bb:d0:18:1f:74:15:db:a7:84:c5:da:5f:c1:f4:f4:1a:db:
         a8:cd:8d:7e:91:1d:cf:95:41:3f:9d:e5:41:23:8e:21:42:5b:
         30:5f:45:0a:21:60:cf:af:3f:4a:5d:32:79:23:65:f2:2c:cc:
         23:05:c5:d6:54:ee:64:03:6b:1c:8d:a3:c5:5a:13:ce:3c:23:
         24:94:b4:48:d5:2d:51:52:56:26:a4:1e:a1:d0:0a:36:30:e7:
         d9:24:66:ec:b2:1f:37:15:c9:c3:a0:eb:78:81:87:44:68:db:
         8e:c6:25:67:27:59:fc:47:26:5e:bb:33:9c:1e:e7:69:05:20:
         27:04:1e:8e:5d:f7:f7:c3:ef:1f:38:9d:20:3a:5f:05:28:29:
         87:c2:3e:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA6qfWZLmfv/4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl
ZmIwMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NWI3MDJmMDQtMjU4ZC00ZDU0LTgzMWQtNDZhNmVlZGVlZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EYckYZqGUZ6E9jVJWhYl5440paStM1AdFbn
zUyb9/bmYFL9FJ28S8GPFkh8yanJ3wLQIw6SexRHnd7DLdK2roFb7rfBNjoYUe3J
rv6lHZ47lp6QWFlb88b0kPwEy81UI8JanVc8ziaZ9jU3KNpd54rmQTEE4PCZRXqe
yHyqR+bq/UhcWJo74MkhImZxHUnoYxCxw/D8WLTcKXVivcJqrJxuPWC5SAIrl9Ow
TzLaLG1Tms7n+QIBYl8iVq+SeTpWFUmtAGj0+ymxqusX6o8jVHToIDor/L7mxX1/
UyEUobMSn6Zrti+u8H4r82XGVi/YgMXajigpj9Qr47InajcksQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7VBRG1jWfRVEjSYtQ75N911GViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy
MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvY2JhMTNkYzUtY2ZhOS0z
NzZkLTlmYWYtMzQ3NDg5ZTViNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy
YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3
ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4
ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkwC7gWbxzF1EiYet5Z8kvkxOUUxoOD/kjsw6++gyszB5M10jhAKCXU
6H+l8HQJzCAfnrR/av0pSbfuxsgDpykEIxDOse1SsuOYIw2e04Vt0LaCmcQLrqW9
oNIo0kgJhm3ZvguLyBOib31DSKu70BgfdBXbp4TF2l/B9PQa26jNjX6RHc+VQT+d
5UEjjiFCWzBfRQohYM+vP0pdMnkjZfIszCMFxdZU7mQDaxyNo8VaE848IySUtEjV
LVFSViakHqHQCjYw59kkZuyyHzcVycOg63iBh0Ro247GJWcnWfxHJl67M5we52kF
ICcEHo5d9/fD7x84nSA6XwUoKYfCPiI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:45 2026 by rpki-client