Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1e375a71-17df-3729-8731-fb6f369e66a0.roa
File:                     1e375a71-17df-3729-8731-fb6f369e66a0.roa (raw, json)
Hash identifier:          IpulNDSuJD4684K0BIkATCrZ89E33+2Ny4TluyrHDQc=
Subject key identifier:   EB:68:7A:DC:2F:53:1F:00:A8:68:81:8C:27:DA:E7:62:24:66:7D:29
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584AE461119FADF76E0277BA2D40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1e375a71-17df-3729-8731-fb6f369e66a0.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14061
IP address blocks:        192.241.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:11:9f:ad:f7:6e:02:77:ba:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=14c7eae3-495a-4b55-b386-771906467049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:ab:52:3b:10:bb:11:47:3c:43:1c:7d:de:
                    b1:1c:41:e5:19:d0:6f:07:c1:a8:de:23:69:18:ac:
                    cb:43:93:95:f4:d0:b3:f6:24:f0:9d:4a:92:be:ea:
                    6e:c9:65:e8:8e:6d:ac:c9:5d:98:78:d6:29:64:ad:
                    d2:f7:1f:9d:dd:5e:e4:6a:3a:f0:a4:68:ee:f6:9a:
                    b9:fa:47:55:8a:57:48:6d:58:e2:9a:25:a7:f8:07:
                    20:fa:76:25:47:b5:26:63:d4:53:ea:30:1a:b5:3b:
                    bf:30:74:aa:09:21:25:59:c2:81:7e:83:b0:64:34:
                    0a:59:00:0b:48:4a:67:f6:e7:95:bb:32:35:af:6f:
                    63:52:be:04:2c:67:5b:eb:03:38:2f:43:ff:b3:ce:
                    2c:91:32:a9:0e:d7:8a:ec:f3:1a:fd:6b:2b:83:ce:
                    db:50:7c:bf:18:a3:c2:0f:7c:83:60:b4:6d:e2:f7:
                    fc:b1:35:7e:d2:5c:69:64:69:dd:2f:bc:c9:1f:3e:
                    45:be:b3:90:ed:6b:4e:d4:9d:3a:27:dd:9f:b4:08:
                    b1:85:a4:40:6e:e6:26:ac:49:0f:ef:17:36:ae:d1:
                    53:df:40:90:7c:f7:cd:90:13:40:51:01:cf:d3:14:
                    07:18:e4:e7:d0:ad:ca:b2:98:ef:99:e1:19:5b:be:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:7A:DC:2F:53:1F:00:A8:68:81:8C:27:DA:E7:62:24:66:7D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1e375a71-17df-3729-8731-fb6f369e66a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.241.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:d6:f0:a0:d4:a8:4a:75:29:9f:6c:bf:03:4a:34:2b:e8:
         a0:55:18:88:87:7f:3a:22:1d:00:50:9f:c7:3d:93:77:6f:29:
         1a:ea:34:b1:59:e6:b9:4f:95:3a:06:d7:7a:72:14:46:70:58:
         85:1e:76:19:b5:aa:9d:05:6b:a2:87:2d:e8:2f:c0:c5:5b:b2:
         55:98:57:95:52:c9:0b:57:17:3a:8f:98:e5:95:63:26:ca:42:
         87:2d:2e:ae:2d:9a:ec:25:2d:6e:d1:e0:40:74:b9:2b:c3:aa:
         c3:2b:db:ad:26:f4:97:b1:91:72:ea:45:f6:cc:bc:af:17:61:
         92:c7:4c:32:62:39:71:63:95:89:93:0a:14:63:59:ac:11:4d:
         fa:5c:a7:1f:b1:51:bf:e0:9a:17:84:cc:55:f5:05:f2:e8:57:
         e3:c4:0f:74:d5:5b:e0:bd:69:4e:04:f9:fb:5e:17:c3:ef:d4:
         13:e8:4a:07:28:3d:65:32:cb:dc:ee:22:cd:67:5e:fb:2c:ba:
         f8:bd:b3:eb:0e:9c:aa:3f:e2:c7:95:df:70:79:2f:2d:6c:9e:
         b7:f2:40:f7:fd:f1:af:d5:bf:65:2a:ca:43:21:2c:c4:8d:60:
         49:ac:ac:4a:5c:ef:0d:b8:bb:a8:f7:c4:69:f3:54:33:b6:4c:
         82:b3:c0:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRGfrfduAne6LUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
MTRjN2VhZTMtNDk1YS00YjU1LWIzODYtNzcxOTA2NDY3MDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6mrUjsQuxFHPEMcfd6xHEHlGdBvB8Go3iNp
GKzLQ5OV9NCz9iTwnUqSvupuyWXojm2syV2YeNYpZK3S9x+d3V7kajrwpGju9pq5
+kdVildIbVjimiWn+Acg+nYlR7UmY9RT6jAatTu/MHSqCSElWcKBfoOwZDQKWQAL
SEpn9ueVuzI1r29jUr4ELGdb6wM4L0P/s84skTKpDteK7PMa/Wsrg87bUHy/GKPC
D3yDYLRt4vf8sTV+0lxpZGndL7zJHz5FvrOQ7WtO1J06J92ftAixhaRAbuYmrEkP
7xc2rtFT30CQfPfNkBNAUQHP0xQHGOTn0K3KspjvmeEZW74etwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtoetwvUx8AqGiBjCfa52IkZn0pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMWUzNzVhNzEtMTdkZi0z
NzI5LTg3MzEtZmI2ZjM2OWU2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHwPGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqm1vCg1KhKdSmfbL8DSjQr6KBVGIiHfzoiHQBQn8c9k3dvKRrqNLFZ
5rlPlToG13pyFEZwWIUedhm1qp0Fa6KHLegvwMVbslWYV5VSyQtXFzqPmOWVYybK
QoctLq4tmuwlLW7R4EB0uSvDqsMr260m9JexkXLqRfbMvK8XYZLHTDJiOXFjlYmT
ChRjWawRTfpcpx+xUb/gmheEzFX1BfLoV+PED3TVW+C9aU4E+fteF8Pv1BPoSgco
PWUyy9zuIs1nXvssuvi9s+sOnKo/4seV33B5Ly1snrfyQPf98a/Vv2UqykMhLMSN
YEmsrEpc7w24u6j3xGnzVDO2TIKzwJA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:16:33 2025 by rpki-client