Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
File:                     4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa (raw, json)
Hash identifier:          NCslJIAou/1OqcfqweZxVPM/HhO5aJ5t3BZ69/fVv+Q=
Subject key identifier:   97:8F:A9:E6:1A:07:4E:C4:A4:87:E1:02:EE:05:06:CB:B9:43:0A:47
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584EA7918194B8E6374B803F6C00
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        141.210.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:81:94:b8:e6:37:4b:80:3f:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=267c059a-d318-478d-a0b8-04175adbfcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:e2:74:db:14:89:aa:c5:f1:15:07:5b:f4:
                    59:a7:36:02:4a:c0:ad:6e:d8:0a:e7:63:ef:87:a3:
                    18:c5:0d:3e:bd:da:bd:16:44:2a:21:56:7e:2d:a5:
                    55:95:85:5e:c6:52:c7:70:0e:9c:90:02:a3:d2:4a:
                    fe:6e:5b:bb:31:c6:77:dc:2f:2f:88:25:f5:24:12:
                    58:cc:6e:d7:0a:13:95:31:cb:f6:78:ad:af:95:b2:
                    36:bb:87:a5:e5:1a:21:b1:99:d3:9b:e5:d8:18:0c:
                    0e:af:82:c7:57:ef:9e:08:1b:0a:72:bf:06:7e:7c:
                    9d:fa:d4:34:90:03:53:3d:1c:60:dc:f7:7a:f8:21:
                    d7:1a:82:e4:3e:94:16:f5:b8:2f:26:25:60:97:b0:
                    19:b6:c9:83:cd:75:f1:4e:52:54:7d:51:1e:ec:14:
                    bb:f5:b7:b2:f6:55:c2:d5:2b:39:07:a4:99:bb:ab:
                    50:d6:2b:7e:b4:e4:23:c7:7e:1b:7f:76:d2:49:aa:
                    f5:b0:ba:4f:68:0f:ff:51:3b:76:74:0a:c1:b7:72:
                    fe:22:5a:91:80:c0:c9:fd:d3:0d:d2:ed:68:e4:b7:
                    02:16:9b:e9:e7:59:07:42:7e:54:ce:41:05:ab:d6:
                    8d:47:0f:58:87:46:79:90:67:11:51:f6:13:84:ce:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8F:A9:E6:1A:07:4E:C4:A4:87:E1:02:EE:05:06:CB:B9:43:0A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:4b:58:99:62:34:c4:51:2c:68:48:88:84:e7:5d:e4:b1:
         e5:82:0d:34:bd:aa:41:ac:1c:75:5b:98:f8:91:94:02:2c:71:
         fd:c0:1b:61:7f:33:76:98:bb:73:12:4f:a0:31:03:56:3b:a9:
         64:be:c7:1f:71:ce:b0:d8:1a:3b:c8:d7:ed:1c:a8:1a:07:fd:
         88:a8:6f:8b:7a:f6:50:85:77:dc:be:82:a9:53:5c:92:c4:38:
         3f:00:fb:c2:fa:51:88:43:5c:ce:a4:be:52:5a:7c:d2:b1:e5:
         5a:65:55:e5:e2:65:77:83:a5:95:be:78:ac:7c:e1:4d:c3:db:
         a1:1d:f0:d2:7d:e0:d6:62:70:32:1e:24:46:39:91:3b:d5:cb:
         98:e4:65:7e:d6:94:f6:a3:32:4d:61:08:13:8c:0c:b8:1b:fb:
         5a:13:64:dc:e3:ac:7c:aa:bb:5e:92:b8:f0:4e:82:0d:59:04:
         7d:e1:8e:fa:f7:10:b7:70:88:3a:99:d3:76:2f:2c:97:4c:e8:
         5a:38:12:9b:38:0e:c7:7a:b5:c7:1b:f3:88:48:0b:96:62:07:
         2c:53:ab:ef:1b:65:c5:a2:ba:10:db:6f:de:e1:8b:22:f7:2f:
         ba:46:ac:5d:07:ab:d6:54:62:f9:c5:67:e3:a2:a7:f7:4f:5d:
         86:6d:06:bd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nkYGUuOY3S4A/bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdkNjNkNGYtZDNlYi00NDg0LTljOGEtN2M4OTRhZmEw
NjlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjY3YzA1OWEtZDMxOC00NzhkLWEwYjgtMDQxNzVhZGJmY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneHidNsUiarF8RUHW/RZpzYCSsCtbtgK52Pv
h6MYxQ0+vdq9FkQqIVZ+LaVVlYVexlLHcA6ckAKj0kr+blu7McZ33C8viCX1JBJY
zG7XChOVMcv2eK2vlbI2u4el5RohsZnTm+XYGAwOr4LHV++eCBsKcr8Gfnyd+tQ0
kANTPRxg3Pd6+CHXGoLkPpQW9bgvJiVgl7AZtsmDzXXxTlJUfVEe7BS79bey9lXC
1Ss5B6SZu6tQ1it+tOQjx34bf3bSSar1sLpPaA//UTt2dArBt3L+IlqRgMDJ/dMN
0u1o5LcCFpvp51kHQn5UzkEFq9aNRw9Yh0Z5kGcRUfYThM76zwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJePqeYaB07EpIfhAu4FBsu5QwpHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2
M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5NGFmYTA2OWEvNGU5ODVmNjEtNjVhZC0z
NThlLWJjZDYtZGE4YmEzZjEwZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjdkNjNkNGYtZDNlYi00NDg0LTlj
OGEtN2M4OTRhZmEwNjlhL2Y3ZDYzZDRmLWQzZWItNDQ4NC05YzhhLTdjODk0YWZh
MDY5YS5jcmwwHwYDVR0jBBgwFoAUeKhb3ed+GgECIc7ratL5eBYpcrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5
NGFmYTA2OWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjdIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATZhLWJliNMRRLGhIiITnXeSx5YINNL2qQawcdVuY+JGUAixx/cAbYX8z
dpi7cxJPoDEDVjupZL7HH3HOsNgaO8jX7RyoGgf9iKhvi3r2UIV33L6CqVNcksQ4
PwD7wvpRiENczqS+Ulp80rHlWmVV5eJld4Ollb54rHzhTcPboR3w0n3g1mJwMh4k
RjmRO9XLmORlftaU9qMyTWEIE4wMuBv7WhNk3OOsfKq7XpK48E6CDVkEfeGO+vcQ
t3CIOpnTdi8sl0zoWjgSmzgOx3q1xxvziEgLlmIHLFOr7xtlxaK6ENtv3uGLIvcv
ukasXQer1lRi+cVn46Kn909dhm0GvQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:11 2026 by rpki-client