Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa
File:                     aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa (raw, json)
Hash identifier:          GvITvqKRGqZ5wvP+Jm8USdjEdqihlb8v9rPAqEFNo88=
Subject key identifier:   43:FB:9D:ED:15:24:37:B4:65:17:A4:B9:1C:9A:8C:61:B0:3D:C9:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F885E5FE17AEDB95865A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22394
IP address blocks:        141.207.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:88:5e:5f:e1:7a:ed:b9:58:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=f44fab79-04ec-444e-9fd1-ccd5f0473d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:dd:3e:dc:ea:e6:5c:73:54:fb:70:ea:63:
                    d3:f6:7d:12:29:04:a1:fd:0c:df:0e:a2:a6:78:9c:
                    1b:51:52:9b:3f:7f:53:b9:b0:0c:af:21:37:f7:1b:
                    4a:af:e9:4f:32:3a:01:bf:da:fb:74:ab:b7:df:c2:
                    1f:99:01:a6:87:41:14:68:20:d8:9d:27:ec:fe:2d:
                    18:f4:b6:d7:02:0b:ad:52:dc:9c:11:d1:43:52:c6:
                    27:30:50:01:51:a4:db:48:fe:31:08:86:c0:0c:61:
                    c4:e2:ff:23:47:c0:6d:16:44:27:95:fb:39:a6:f9:
                    91:b6:1a:0d:6c:bf:c1:33:25:cd:b8:2b:be:9f:81:
                    29:19:19:28:99:db:8e:be:b9:d9:7e:00:08:4f:06:
                    12:b2:11:a7:b7:0e:73:ea:27:2f:61:a9:66:3d:8c:
                    35:f2:dc:0c:f2:50:8f:35:ad:ee:44:b1:3c:4b:b2:
                    53:09:a7:5f:72:d1:e8:b8:e2:3b:f3:86:b9:42:9a:
                    cb:5a:b5:ed:a1:89:12:eb:27:5b:c2:d9:92:3d:f2:
                    23:ac:53:98:f2:30:96:46:23:5a:c3:7a:af:1f:c4:
                    ab:d5:a4:ee:ed:cd:c2:87:1a:14:ca:2e:2c:ad:55:
                    8d:71:a2:a6:12:c7:ef:7f:ef:a7:8c:42:05:91:2c:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FB:9D:ED:15:24:37:B4:65:17:A4:B9:1C:9A:8C:61:B0:3D:C9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aea599f6-8c5c-3406-bc1c-c1e4fd114d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:6a:d0:71:4d:e9:dd:aa:35:ed:58:a4:f2:dc:01:e7:dd:
         91:8a:ee:10:57:51:16:e4:2d:01:c8:f5:ae:40:ef:4d:df:6a:
         28:c9:08:76:b6:a0:04:5f:7e:c9:62:b8:c2:6b:28:5c:05:1c:
         74:c8:0b:ba:c1:bb:8f:6f:95:0a:1d:ae:83:5a:ba:45:e2:3e:
         45:49:54:e4:81:1d:7c:6d:12:66:ac:08:a6:10:5e:fb:bc:c2:
         26:f1:8a:14:2f:bd:89:40:8d:5b:ab:b3:4c:43:5d:bf:e0:de:
         4b:6b:58:1e:e1:79:ce:2b:44:5a:12:e2:7f:99:55:54:fe:88:
         d2:bb:d4:4e:f6:d9:d3:11:0a:28:fb:21:75:f7:b6:54:18:81:
         0e:d2:f2:56:9a:40:c4:ff:6f:a4:66:85:6b:17:14:c7:b4:ef:
         91:78:e8:ad:5a:25:a3:90:ad:d3:75:b1:41:67:08:b5:6d:3a:
         40:a4:b9:99:33:3d:90:aa:af:89:29:7b:42:8b:22:40:57:db:
         32:79:b3:b1:f9:2b:ff:70:5b:5f:ff:7a:cb:87:22:d7:76:54:
         fd:77:56:17:26:ac:1c:65:2b:65:49:a7:1a:8b:cf:b5:82:86:
         fc:78:4a:f6:85:a3:04:10:00:02:a9:f5:54:85:c4:17:fc:a6:
         1f:70:92:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD4heX+F67blYZaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZjQ0ZmFiNzktMDRlYy00NDRlLTlmZDEtY2NkNWYwNDczZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCvdPtzq5lxzVPtw6mPT9n0SKQSh/QzfDqKm
eJwbUVKbP39TubAMryE39xtKr+lPMjoBv9r7dKu338IfmQGmh0EUaCDYnSfs/i0Y
9LbXAgutUtycEdFDUsYnMFABUaTbSP4xCIbADGHE4v8jR8BtFkQnlfs5pvmRthoN
bL/BMyXNuCu+n4EpGRkomduOvrnZfgAITwYSshGntw5z6icvYalmPYw18twM8lCP
Na3uRLE8S7JTCadfctHouOI784a5QprLWrXtoYkS6ydbwtmSPfIjrFOY8jCWRiNa
w3qvH8Sr1aTu7c3ChxoUyi4srVWNcaKmEsfvf++njEIFkSx4KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEP7ne0VJDe0ZRekuRyajGGwPckoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWVhNTk5ZjYtOGM1Yy0z
NDA2LWJjMWMtYzFlNGZkMTE0ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6JatBxTendqjXtWKTy3AHn3ZGK7hBXURbkLQHI9a5A703faijJCHa2
oARffsliuMJrKFwFHHTIC7rBu49vlQodroNaukXiPkVJVOSBHXxtEmasCKYQXvu8
wibxihQvvYlAjVurs0xDXb/g3ktrWB7hec4rRFoS4n+ZVVT+iNK71E722dMRCij7
IXX3tlQYgQ7S8laaQMT/b6RmhWsXFMe075F46K1aJaOQrdN1sUFnCLVtOkCkuZkz
PZCqr4kpe0KLIkBX2zJ5s7H5K/9wW1//esuHItd2VP13VhcmrBxlK2VJpxqLz7WC
hvx4SvaFowQQAAKp9VSFxBf8ph9wkjQ=
-----END CERTIFICATE-----
Generated at Tue Jul 7 03:47:31 2026 by rpki-client