Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          DpP3lH4Z/NSpOxjcNwzGeWq89+s1R+YMYDZQ90x1Lsw=
Subject key identifier:   01:DE:20:F3:B1:22:32:DB:7C:6C:AC:84:76:D1:AC:82:11:F3:DC:D1
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584EA787187D359761D36EC27DC0
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:18:7d:35:97:61:d3:6e:c2:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9e1ebb7-43b7-48a8-a41c-60b6de8e9f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:71:b1:0e:96:74:b8:ab:70:6e:d1:a2:c8:
                    ff:62:a9:64:7d:83:4d:54:0d:2a:e6:ae:cb:57:c1:
                    01:80:bb:ce:1e:3d:fe:7c:f8:f1:85:3b:32:76:1d:
                    0c:af:af:b5:bd:51:ab:8b:54:ac:45:b6:34:60:e0:
                    01:3d:de:2f:14:7e:23:93:e2:f7:98:8e:d8:cb:45:
                    c6:c1:04:c7:0c:fc:26:2b:8b:e3:a6:fb:96:16:4e:
                    d4:8b:25:ee:b2:0a:6e:87:f7:0a:3c:8b:c0:8f:35:
                    ea:ae:59:df:12:6f:d1:b4:89:c1:0c:4c:51:34:7c:
                    20:09:db:d7:97:df:f3:06:9a:40:c8:2a:c0:c4:30:
                    dd:60:74:17:4f:df:fc:47:5f:ca:3e:29:bf:52:60:
                    82:f9:74:0b:46:8e:25:ff:2c:00:46:fb:ff:7b:d3:
                    e8:01:e5:08:32:e8:91:8b:87:7e:aa:c3:e1:29:78:
                    55:64:7c:fc:8b:a4:69:0c:47:96:26:09:3b:79:8b:
                    d2:86:80:07:a7:b3:d2:de:ed:3a:73:c8:76:82:bf:
                    4b:44:eb:51:2c:4c:c1:19:c1:47:b3:3c:14:4c:7e:
                    8c:92:f4:e5:68:c9:72:72:80:3c:d5:42:16:c1:92:
                    a9:1d:75:17:cd:6b:93:7f:8c:d8:72:15:10:58:ef:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:20:F3:B1:22:32:DB:7C:6C:AC:84:76:D1:AC:82:11:F3:DC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:dd:45:ed:df:ce:6a:65:ea:4b:f2:cc:7e:14:26:6f:b4:
         11:86:a1:08:75:32:ff:c1:b7:ca:ef:0d:58:26:1c:30:87:23:
         7a:4f:be:74:a0:c5:bb:09:16:b5:a9:6a:36:17:cf:7d:5d:cf:
         a9:10:6b:4f:a2:53:4a:90:36:01:92:e0:39:89:02:b0:ed:f8:
         f7:0b:9c:c2:f7:b3:5b:3a:30:86:1f:13:19:b0:7f:eb:26:c5:
         70:6c:a6:9a:f9:c0:ba:0e:31:bf:d2:8c:f4:a5:c3:cd:ee:e8:
         bc:58:83:22:7f:cb:93:a9:62:36:21:b6:23:19:a5:d9:b7:4d:
         05:cb:7d:6b:25:32:fa:d4:16:b8:62:d9:cf:9b:6d:8c:a0:eb:
         87:b0:ff:9b:94:a0:4d:a4:90:9f:ea:ab:d8:ab:2c:95:40:7a:
         43:5c:c1:c5:21:c1:fd:c9:61:44:34:e5:22:2a:21:13:e1:29:
         68:39:25:e2:28:31:ac:06:4d:94:d3:33:68:ff:67:07:b5:41:
         a0:94:5d:15:55:ce:7b:33:c5:81:ff:b7:bb:df:90:ff:94:e0:
         7f:ae:76:d4:63:b3:d8:3a:2a:f9:62:05:b7:31:0c:f1:6b:63:
         ca:21:e0:73:21:f5:aa:0d:4d:05:a3:df:f1:46:1d:28:6a:9a:
         da:1b:81:8b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nhxh9NZdh027CfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdkNjNkNGYtZDNlYi00NDg0LTljOGEtN2M4OTRhZmEw
NjlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzllMWViYjctNDNiNy00OGE4LWE0MWMtNjBiNmRlOGU5ZjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlJxsQ6WdLircG7Rosj/YqlkfYNNVA0q5q7L
V8EBgLvOHj3+fPjxhTsydh0Mr6+1vVGri1SsRbY0YOABPd4vFH4jk+L3mI7Yy0XG
wQTHDPwmK4vjpvuWFk7UiyXusgpuh/cKPIvAjzXqrlnfEm/RtInBDExRNHwgCdvX
l9/zBppAyCrAxDDdYHQXT9/8R1/KPim/UmCC+XQLRo4l/ywARvv/e9PoAeUIMuiR
i4d+qsPhKXhVZHz8i6RpDEeWJgk7eYvShoAHp7PS3u06c8h2gr9LROtRLEzBGcFH
szwUTH6MkvTlaMlycoA81UIWwZKpHXUXzWuTf4zYchUQWO9YTQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAHeIPOxIjLbfGyshHbRrIIR89zRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2
M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5NGFmYTA2OWEvMWFiNDg5NjgtMzAzMi0z
MTZlLTg1YjAtZGQwOTllMmQ3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjdkNjNkNGYtZDNlYi00NDg0LTlj
OGEtN2M4OTRhZmEwNjlhL2Y3ZDYzZDRmLWQzZWItNDQ4NC05YzhhLTdjODk0YWZh
MDY5YS5jcmwwHwYDVR0jBBgwFoAUeKhb3ed+GgECIc7ratL5eBYpcrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5
NGFmYTA2OWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFjdIgAwQF
jdLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEUP3UXt385qZepL8sx+FCZvtBGGoQh1Mv/Bt8rvDVgmHDCH
I3pPvnSgxbsJFrWpajYXz31dz6kQa0+iU0qQNgGS4DmJArDt+PcLnML3s1s6MIYf
Exmwf+smxXBsppr5wLoOMb/SjPSlw83u6LxYgyJ/y5OpYjYhtiMZpdm3TQXLfWsl
MvrUFrhi2c+bbYyg64ew/5uUoE2kkJ/qq9irLJVAekNcwcUhwf3JYUQ05SIqIRPh
KWg5JeIoMawGTZTTM2j/Zwe1QaCUXRVVznszxYH/t7vfkP+U4H+udtRjs9g6Kvli
BbcxDPFrY8oh4HMh9aoNTQWj3/FGHShqmtobgYs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:23 2026 by rpki-client