Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa
File:                     d4a5841e-1125-300e-a883-2ae9d79385d3.roa (raw, json)
Hash identifier:          mE87D323bOluc3q09b4JHRnnnjbpXqliHkAQUIonqUc=
Subject key identifier:   BD:5A:22:BE:DE:54:E8:82:83:5D:77:4B:30:62:31:6C:F3:B7:7D:AF
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584EA17A94057B163FCDA960B480
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     32346
IP address blocks:        140.235.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:94:05:7b:16:3f:cd:a9:60:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=5cd51d3a-3820-4669-92af-cbea24b9e76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:cd:9a:7f:34:a3:38:80:64:e7:7e:82:c8:
                    d4:f8:3a:9b:7f:0b:98:95:47:f0:f7:96:af:b2:7f:
                    27:e4:50:b0:49:02:b4:14:0b:a2:68:5a:af:f3:b0:
                    84:f5:3a:b0:17:7f:39:c1:f4:f4:76:e8:f9:42:f6:
                    79:6d:65:d5:9a:2c:89:1f:fe:c7:96:e1:31:ed:d0:
                    7b:07:e2:0c:ce:c8:55:a6:04:05:63:3b:fd:5b:01:
                    58:b7:e2:58:0c:a6:81:03:ab:d1:e6:7a:f9:ff:40:
                    67:8f:2d:ed:80:48:95:69:a1:7f:b4:dd:e5:d3:5f:
                    33:ad:10:2d:45:0e:44:54:29:3d:34:5b:7d:aa:25:
                    f7:24:43:e1:df:55:80:65:ec:07:2b:5d:3b:00:2c:
                    30:f2:52:ce:d2:d7:9c:42:d3:c4:fd:8b:a1:05:61:
                    5b:60:9e:32:9f:c8:35:a0:bc:24:f8:55:a2:4b:e7:
                    65:45:91:95:f5:a6:fb:6b:11:c2:3a:b5:e3:1c:8e:
                    b9:42:40:ba:12:4e:3f:30:cf:0d:61:2f:23:29:ff:
                    6f:89:c7:82:e0:6c:5e:b4:72:46:56:b9:0a:c1:88:
                    23:ca:58:fb:cf:8e:7c:62:25:01:bb:33:f3:f0:b8:
                    c4:d7:a0:61:b3:9e:a0:1d:78:00:41:0e:d1:35:0f:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5A:22:BE:DE:54:E8:82:83:5D:77:4B:30:62:31:6C:F3:B7:7D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d4a5841e-1125-300e-a883-2ae9d79385d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:b0:c1:45:fd:8e:ee:15:39:78:a6:74:b7:4d:e3:81:14:
         07:9e:84:75:3c:a7:32:86:12:60:a8:09:1f:2c:ad:37:ed:10:
         12:b2:69:50:23:66:ae:1b:22:26:47:10:80:c7:88:4e:65:91:
         45:00:d8:5b:37:ea:58:3d:fe:a7:3b:7a:75:94:86:a7:82:9d:
         c1:88:40:03:51:eb:20:e6:dd:95:c9:1c:b6:42:1b:c8:4d:31:
         da:86:85:ed:c6:de:34:02:c2:e6:37:a1:dc:c6:b6:1f:88:d4:
         80:43:17:3e:85:04:aa:1d:6b:d4:3f:ac:61:18:e4:bf:42:07:
         f0:41:46:0f:4c:f8:36:05:23:df:5e:44:db:cf:e4:b9:40:21:
         aa:b5:e9:30:7b:fc:f2:ba:7a:98:12:79:2a:e6:80:dc:ec:12:
         e2:b2:99:9e:6b:7c:c2:4e:d2:96:cc:9c:02:8f:5b:e3:c9:84:
         9c:1b:82:b0:4b:5f:1f:cb:59:6f:52:44:39:a5:13:bb:2c:b0:
         4f:7c:9f:36:19:82:51:ee:0f:f7:ab:b5:f7:d8:7c:38:c9:e7:
         3b:1f:c8:6c:a0:40:5f:cc:ea:84:9b:8c:c9:43:12:99:c5:2b:
         f2:2e:2d:61:5a:38:3c:47:7b:87:31:ce:93:06:9a:5f:66:a3:
         14:5f:57:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hepQFexY/zalgtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl
ZmIwMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NWNkNTFkM2EtMzgyMC00NjY5LTkyYWYtY2JlYTI0YjllNzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfNmn80oziAZOd+gsjU+DqbfwuYlUfw95av
sn8n5FCwSQK0FAuiaFqv87CE9TqwF385wfT0duj5QvZ5bWXVmiyJH/7HluEx7dB7
B+IMzshVpgQFYzv9WwFYt+JYDKaBA6vR5nr5/0Bnjy3tgEiVaaF/tN3l018zrRAt
RQ5EVCk9NFt9qiX3JEPh31WAZewHK107ACww8lLO0tecQtPE/YuhBWFbYJ4yn8g1
oLwk+FWiS+dlRZGV9ab7axHCOrXjHI65QkC6Ek4/MM8NYS8jKf9viceC4GxetHJG
VrkKwYgjylj7z458YiUBuzPz8LjE16Bhs56gHXgAQQ7RNQ9UywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1aIr7eVOiCg113SzBiMWzzt32vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy
MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvZDRhNTg0MWUtMTEyNS0z
MDBlLWE4ODMtMmFlOWQ3OTM4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy
YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3
ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4
ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmdsMFF/Y7uFTl4pnS3TeOBFAeehHU8pzKGEmCoCR8srTftEBKyaVAj
Zq4bIiZHEIDHiE5lkUUA2Fs36lg9/qc7enWUhqeCncGIQANR6yDm3ZXJHLZCG8hN
MdqGhe3G3jQCwuY3odzGth+I1IBDFz6FBKoda9Q/rGEY5L9CB/BBRg9M+DYFI99e
RNvP5LlAIaq16TB7/PK6epgSeSrmgNzsEuKymZ5rfMJO0pbMnAKPW+PJhJwbgrBL
Xx/LWW9SRDmlE7sssE98nzYZglHuD/ertffYfDjJ5zsfyGygQF/M6oSbjMlDEpnF
K/IuLWFaODxHe4cxzpMGml9moxRfV4Y=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:10:08 2026 by rpki-client