Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          ha1wLnwNuIcB6EAyNTRI6hKFVVDbFvBN+8iWQHOGBno=
Subject key identifier:   A8:95:7E:F4:3B:2C:8F:77:7E:A8:5D:A8:AF:1F:F6:B1:3A:85:B3:F6
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584B28C6E20E5E6D6774F8ABAA80
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e2:0e:5e:6d:67:74:f8:ab:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=474b8000-7c4d-439d-bb50-ec61907fdcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:f4:8c:ae:2f:c2:03:09:6f:9b:b0:fa:24:
                    80:05:f3:d8:61:b7:0d:a7:7b:91:ec:b6:33:0c:74:
                    5f:ef:43:15:59:a2:73:cc:16:b3:c0:32:1a:7f:7f:
                    7f:fd:cc:3b:05:7d:b9:5c:99:07:bc:ef:74:56:58:
                    08:d3:d2:0a:9b:98:6b:94:96:da:3d:b8:10:80:26:
                    4e:96:e8:87:08:bf:41:96:fe:0b:53:1b:9b:da:f7:
                    4d:4f:25:87:02:19:e0:3b:c5:14:eb:64:87:d3:e1:
                    90:0d:37:b3:b8:3d:eb:81:f8:7a:d5:b0:53:3d:ae:
                    0e:2e:d1:a1:e2:23:be:0d:05:91:cb:ac:dc:23:e1:
                    06:67:4d:18:2a:57:57:44:e8:f3:d1:9a:33:44:56:
                    09:62:ca:34:f9:a0:35:9f:93:35:ab:9c:c7:ea:0e:
                    b5:86:d3:62:a1:cf:58:2f:39:f0:6d:09:6a:77:35:
                    33:22:ce:4a:d7:a4:9e:c2:74:04:2d:67:5e:6b:b8:
                    d1:1c:74:78:b0:df:6c:94:17:a7:af:03:cf:aa:58:
                    2d:04:b5:8b:f8:ba:dd:8b:8b:4f:77:3d:b6:5f:b3:
                    00:da:9c:ee:bf:74:e8:98:73:82:8c:b5:30:38:4b:
                    86:90:15:f0:b4:ef:ba:b1:57:41:55:4e:a8:12:32:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:95:7E:F4:3B:2C:8F:77:7E:A8:5D:A8:AF:1F:F6:B1:3A:85:B3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:17:a7:ab:fd:0e:49:08:d3:01:06:cb:9c:d3:3a:80:03:b5:
         3b:45:26:46:7d:ad:67:7b:3f:9e:14:79:3a:83:01:67:70:0d:
         eb:2a:ee:38:93:6c:37:c3:03:53:06:ab:0e:02:49:4f:8d:11:
         a1:98:f3:46:ff:36:a2:26:83:39:f4:63:bd:fb:f9:a3:ac:45:
         cf:af:26:62:2e:13:a5:d0:e3:e9:4f:13:a2:f5:0e:f0:b7:11:
         26:de:f4:5e:c4:ad:84:f5:08:ad:70:19:20:50:a0:e7:32:a6:
         ec:d5:00:f4:dc:d8:ef:80:fe:92:1e:ec:37:31:4e:ea:42:c0:
         23:9e:ab:47:a3:75:88:ff:8a:89:79:cf:dd:18:c7:15:75:27:
         28:fd:82:46:b2:ad:29:26:0d:17:36:e6:08:69:c7:e5:45:e1:
         95:3d:65:1f:55:1a:b9:8a:3a:4d:e8:bb:e1:50:e2:ad:96:7d:
         cd:ea:37:a2:13:b6:ec:67:b0:9a:e8:3a:2b:17:64:ba:d9:c1:
         15:2b:cb:14:54:d7:cd:03:74:06:98:4d:f4:68:86:ef:b8:6b:
         b3:69:b8:52:7b:c0:c3:b7:cb:8f:a7:df:40:ab:86:87:44:15:
         38:87:b2:b8:8c:57:0d:42:c7:34:04:d1:39:07:60:df:a0:5d:
         d5:bb:ec:ed
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsoxuIOXm1ndPirqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdkNjNkNGYtZDNlYi00NDg0LTljOGEtN2M4OTRhZmEw
NjlhMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
NDc0YjgwMDAtN2M0ZC00MzlkLWJiNTAtZWM2MTkwN2ZkY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF/0jK4vwgMJb5uw+iSABfPYYbcNp3uR7LYz
DHRf70MVWaJzzBazwDIaf39//cw7BX25XJkHvO90VlgI09IKm5hrlJbaPbgQgCZO
luiHCL9Blv4LUxub2vdNTyWHAhngO8UU62SH0+GQDTezuD3rgfh61bBTPa4OLtGh
4iO+DQWRy6zcI+EGZ00YKldXROjz0ZozRFYJYso0+aA1n5M1q5zH6g61htNioc9Y
LznwbQlqdzUzIs5K16SewnQELWdea7jRHHR4sN9slBenrwPPqlgtBLWL+Lrdi4tP
dz22X7MA2pzuv3TomHOCjLUwOEuGkBXwtO+6sVdBVU6oEjIoVwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKiVfvQ7LI93fqhdqK8f9rE6hbP2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2
M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5NGFmYTA2OWEvMWFiNDg5NjgtMzAzMi0z
MTZlLTg1YjAtZGQwOTllMmQ3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjdkNjNkNGYtZDNlYi00NDg0LTlj
OGEtN2M4OTRhZmEwNjlhL2Y3ZDYzZDRmLWQzZWItNDQ4NC05YzhhLTdjODk0YWZh
MDY5YS5jcmwwHwYDVR0jBBgwFoAUeKhb3ed+GgECIc7ratL5eBYpcrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5
NGFmYTA2OWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFjdIgAwQF
jdLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFgXp6v9DkkI0wEGy5zTOoADtTtFJkZ9rWd7P54UeTqDAWdw
Desq7jiTbDfDA1MGqw4CSU+NEaGY80b/NqImgzn0Y737+aOsRc+vJmIuE6XQ4+lP
E6L1DvC3ESbe9F7ErYT1CK1wGSBQoOcypuzVAPTc2O+A/pIe7DcxTupCwCOeq0ej
dYj/iol5z90YxxV1Jyj9gkayrSkmDRc25ghpx+VF4ZU9ZR9VGrmKOk3ou+FQ4q2W
fc3qN6ITtuxnsJroOisXZLrZwRUryxRU180DdAaYTfRohu+4a7NpuFJ7wMO3y4+n
30CrhodEFTiHsriMVw1CxzQE0TkHYN+gXdW77O0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:49 2025 by rpki-client