Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa
File:                     e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa (raw, json)
Hash identifier:          gbZa3m+T3eTjB1ycn/0mWhCZYDd1OpLF4obS0noMVTA=
Subject key identifier:   2B:38:12:02:1B:68:FF:66:A8:02:3B:40:5F:CE:38:9A:38:82:08:62
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B1806D83E8885062BEF0DD6C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     2914
IP address blocks:        140.228.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d8:3e:88:85:06:2b:ef:0d:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=43cf3a02-a481-418f-8946-543dc8011717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:e1:95:72:52:b4:42:a9:d4:f4:8f:97:b9:
                    af:2a:49:55:54:ec:40:8f:9c:db:9d:da:ed:5e:2c:
                    05:a7:a7:0a:26:b4:b7:2c:c9:83:ba:c9:ed:02:64:
                    8f:6a:cc:fa:24:64:0e:08:6b:b3:c7:e6:c8:7d:a1:
                    e9:51:d5:53:0b:27:6b:a3:b7:f1:f4:3c:01:0b:d3:
                    f4:ec:17:9a:14:70:b3:4b:3c:5d:c6:1c:74:fb:7a:
                    e8:bd:83:1b:62:2c:f8:1d:e7:db:83:78:5e:ee:e6:
                    d6:ca:c1:af:23:6f:85:2f:ec:f9:c8:c6:e2:f9:70:
                    18:e1:51:00:03:74:7b:b9:12:fb:2a:8f:50:45:54:
                    05:8f:cc:11:01:63:66:f6:ec:5a:5b:0e:93:93:2f:
                    b9:e3:23:58:50:44:dc:04:1d:ed:27:ba:d8:a6:72:
                    a0:31:f1:88:f5:e1:bc:ff:65:c5:3b:eb:38:ca:0e:
                    d0:88:c9:02:7b:1f:17:8a:55:42:3c:c4:47:b7:9b:
                    0e:7e:18:c8:2c:6c:fa:f4:51:1d:7b:5d:a6:72:de:
                    8d:15:fd:48:6e:bc:dd:40:e8:ff:3d:f9:bd:ee:2a:
                    2b:cc:a3:c6:13:75:3b:63:7f:c5:6b:e6:d8:4a:5f:
                    b3:05:f7:83:fa:a8:df:fc:30:2d:c5:a1:78:a5:34:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:12:02:1B:68:FF:66:A8:02:3B:40:5F:CE:38:9A:38:82:08:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:14:f4:58:89:56:55:5d:f0:70:a2:08:85:1a:83:0b:07:77:
         2e:c8:91:4e:ca:55:05:b5:a6:48:3d:6e:68:65:b0:de:51:44:
         95:34:6a:f2:2b:18:b4:2d:8b:09:6e:31:2e:7d:8b:01:3d:ea:
         64:fe:59:36:1a:12:a5:8a:e6:a3:b6:c4:df:2a:6f:e3:74:12:
         53:cc:ed:08:e6:01:20:17:a0:71:0f:e2:f3:14:d1:85:81:7b:
         65:4f:78:e0:3e:99:e4:08:27:b6:4e:c0:42:f9:ed:f2:84:9f:
         35:a6:84:a2:a7:2e:a0:d4:bf:8c:ba:70:2b:71:65:d3:e5:82:
         60:1f:dd:72:19:c2:6d:27:93:c2:75:53:65:59:8c:89:78:e0:
         8b:03:18:42:4b:12:77:ff:4a:0f:39:f7:b1:7e:df:be:11:f5:
         52:ea:99:c0:c7:91:c4:e6:4d:2d:82:27:06:e4:f4:d2:e3:34:
         2b:7d:f2:cc:5c:4e:b5:fd:68:16:fc:98:24:fd:f8:92:d4:76:
         1b:05:d2:43:ba:b3:2d:f9:29:bc:50:e5:34:98:dd:e9:7d:b5:
         6d:6b:a7:d5:b7:71:0a:b5:56:b9:26:b6:ee:72:3e:da:55:c9:
         bc:78:66:e3:29:e9:47:b6:ad:80:54:07:7f:05:2c:ad:97:03:
         fe:6e:48:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtg+iIUGK+8N1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDNjZjNhMDItYTQ4MS00MThmLTg5NDYtNTQzZGM4MDExNzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA/hlXJStEKp1PSPl7mvKklVVOxAj5zbndrt
XiwFp6cKJrS3LMmDusntAmSPasz6JGQOCGuzx+bIfaHpUdVTCydro7fx9DwBC9P0
7BeaFHCzSzxdxhx0+3rovYMbYiz4Hefbg3he7ubWysGvI2+FL+z5yMbi+XAY4VEA
A3R7uRL7Ko9QRVQFj8wRAWNm9uxaWw6Tky+54yNYUETcBB3tJ7rYpnKgMfGI9eG8
/2XFO+s4yg7QiMkCex8XilVCPMRHt5sOfhjILGz69FEde12mct6NFf1IbrzdQOj/
Pfm97iorzKPGE3U7Y3/Fa+bYSl+zBfeD+qjf/DAtxaF4pTSenwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCs4EgIbaP9mqAI7QF/OOJo4gghiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZTY4YmZhYTUtYTk4Mi0z
ZjEwLTk0ZWMtYmQxMjQyZTE1NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgU9FiJVlVd8HCiCIUagwsHdy7IkU7KVQW1pkg9bmhlsN5RRJU0avIr
GLQtiwluMS59iwE96mT+WTYaEqWK5qO2xN8qb+N0ElPM7QjmASAXoHEP4vMU0YWB
e2VPeOA+meQIJ7ZOwEL57fKEnzWmhKKnLqDUv4y6cCtxZdPlgmAf3XIZwm0nk8J1
U2VZjIl44IsDGEJLEnf/Sg8597F+374R9VLqmcDHkcTmTS2CJwbk9NLjNCt98sxc
TrX9aBb8mCT9+JLUdhsF0kO6sy35KbxQ5TSY3el9tW1rp9W3cQq1Vrkmtu5yPtpV
ybx4ZuMp6Ue2rYBUB38FLK2XA/5uSB8=
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:44:26 2025 by rpki-client