Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
File:                     4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa (raw, json)
Hash identifier:          9U3vjZJnaRIFSbkGDnL8BnFHiuw8a3YKjwpUvmwbl4U=
Subject key identifier:   45:FF:8D:5C:AE:89:46:9F:47:40:62:0A:A0:E4:E1:97:6B:55:A9:69
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584B4616FE1E4A7BB928A35B3D00
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     237
IP address blocks:        141.210.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fe:1e:4a:7b:b9:28:a3:5b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=ba792715-2820-4dc1-8f6f-e67524a85bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:2b:a2:97:b6:dd:81:42:9c:fa:7d:4b:a5:
                    5a:43:44:37:89:49:6a:f0:eb:40:1f:68:eb:2c:47:
                    6e:71:b4:5b:f8:bd:de:15:3e:40:0d:bc:d5:44:f1:
                    b3:d1:05:b8:d4:3a:c3:9a:29:f6:94:8a:aa:50:fd:
                    15:a6:15:67:a0:e2:1e:c6:40:1f:e2:95:c2:cb:f4:
                    b3:44:c1:83:a7:dc:5f:51:e9:98:5a:a8:db:3f:89:
                    d4:fa:8d:17:b2:75:78:91:ea:0d:1d:08:30:c2:64:
                    db:d7:08:bd:81:63:ed:65:b8:0f:11:f8:80:53:d3:
                    e2:d4:69:2e:ca:fb:d0:b8:e7:d0:aa:9e:7d:c1:de:
                    9b:6e:86:cf:88:95:ac:d3:f1:67:72:38:f1:5f:f6:
                    c7:e9:89:5c:34:8a:ce:9e:2a:13:2f:0b:4b:c0:85:
                    c2:dc:7e:e5:7e:46:c1:47:fa:3a:95:ba:e3:9e:5b:
                    dc:0f:31:a0:da:68:0d:df:d9:33:d5:0d:78:9c:6c:
                    f2:0d:a5:4e:0c:20:99:d6:7b:80:15:d6:d8:82:b2:
                    68:c3:9c:ad:07:dc:bf:ac:5b:fc:64:a2:27:09:df:
                    60:c5:02:af:31:66:d9:7b:f4:ed:ec:52:28:dc:b4:
                    c6:03:cf:c8:ba:d9:c4:b6:7a:5e:ed:a6:52:0e:79:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:8D:5C:AE:89:46:9F:47:40:62:0A:A0:E4:E1:97:6B:55:A9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:d1:6c:66:5f:f7:01:42:16:22:a6:c1:8d:7d:03:54:89:
         a7:06:01:9e:80:f2:23:d1:64:3e:7d:04:60:18:e9:a1:ca:23:
         8f:a4:c7:c5:57:9b:fb:74:cd:c6:83:a5:4a:8a:f4:f6:7f:68:
         05:21:fc:9e:62:ef:93:f2:82:f2:c7:32:c9:4c:9a:93:18:eb:
         d2:14:5c:91:3f:e0:c8:42:4e:0b:19:5d:3a:7d:3e:8f:b2:d4:
         19:3a:cf:95:11:88:80:89:a1:13:3c:db:b2:9e:d4:3a:b2:55:
         ba:be:19:c9:52:2c:f7:0d:b7:4d:21:32:3a:bc:9b:3d:90:91:
         48:c2:05:fc:d0:a3:96:a4:46:f1:e5:65:d2:82:a3:f2:bd:bb:
         d0:0c:7b:e8:02:7a:d1:9a:46:51:99:74:29:fb:d4:3a:f8:78:
         64:15:9c:67:95:df:14:a6:92:97:ae:04:aa:fc:4b:75:e2:32:
         6b:8a:27:99:61:df:5a:88:55:06:8c:11:f2:bf:97:c1:84:47:
         b9:58:b2:b1:1d:b4:1e:60:40:6f:e8:0d:9c:e6:e1:94:16:35:
         a1:ea:5c:27:2b:94:59:40:93:a7:e1:88:49:ee:3b:36:98:0b:
         92:08:a4:5f:f9:eb:7e:ff:8d:c9:93:17:ee:12:f7:5b:02:fc:
         c0:0b:41:78
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtGFv4eSnu5KKNbPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdkNjNkNGYtZDNlYi00NDg0LTljOGEtN2M4OTRhZmEw
NjlhMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk
YmE3OTI3MTUtMjgyMC00ZGMxLThmNmYtZTY3NTI0YTg1YmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYcrope23YFCnPp9S6VaQ0Q3iUlq8OtAH2jr
LEducbRb+L3eFT5ADbzVRPGz0QW41DrDmin2lIqqUP0VphVnoOIexkAf4pXCy/Sz
RMGDp9xfUemYWqjbP4nU+o0XsnV4keoNHQgwwmTb1wi9gWPtZbgPEfiAU9Pi1Gku
yvvQuOfQqp59wd6bbobPiJWs0/FncjjxX/bH6YlcNIrOnioTLwtLwIXC3H7lfkbB
R/o6lbrjnlvcDzGg2mgN39kz1Q14nGzyDaVODCCZ1nuAFdbYgrJow5ytB9y/rFv8
ZKInCd9gxQKvMWbZe/Tt7FIo3LTGA8/IutnEtnpe7aZSDnl4wQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEX/jVyuiUafR0BiCqDk4ZdrValpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2
M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5NGFmYTA2OWEvNGU5ODVmNjEtNjVhZC0z
NThlLWJjZDYtZGE4YmEzZjEwZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjdkNjNkNGYtZDNlYi00NDg0LTlj
OGEtN2M4OTRhZmEwNjlhL2Y3ZDYzZDRmLWQzZWItNDQ4NC05YzhhLTdjODk0YWZh
MDY5YS5jcmwwHwYDVR0jBBgwFoAUeKhb3ed+GgECIc7ratL5eBYpcrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5
NGFmYTA2OWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjdIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbpjRbGZf9wFCFiKmwY19A1SJpwYBnoDyI9FkPn0EYBjpocojj6THxVeb
+3TNxoOlSor09n9oBSH8nmLvk/KC8scyyUyakxjr0hRckT/gyEJOCxldOn0+j7LU
GTrPlRGIgImhEzzbsp7UOrJVur4ZyVIs9w23TSEyOrybPZCRSMIF/NCjlqRG8eVl
0oKj8r270Ax76AJ60ZpGUZl0KfvUOvh4ZBWcZ5XfFKaSl64EqvxLdeIya4onmWHf
WohVBowR8r+XwYRHuViysR20HmBAb+gNnObhlBY1oepcJyuUWUCTp+GISe47NpgL
kgikX/nrfv+NyZMX7hL3WwL8wAtBeA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:28 2025 by rpki-client