Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          oJrV3bgghah6UwCg7FDuz0gfKHBbY6RQmQQUSxlGmFA=
Subject key identifier:   EC:63:3F:C3:52:A7:14:46:1A:5B:CD:6E:67:90:FC:6B:08:21:BD:64
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584A480AE6596CD64C63FFFFE0C0
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e6:59:6c:d6:4c:63:ff:ff:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=508c55ae-5727-48f7-b28d-f0207c688b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:20:e3:79:f5:a1:33:e4:44:67:49:cc:4e:
                    05:1a:ff:5d:f9:79:c1:bc:c5:d9:a9:2f:e9:4d:99:
                    80:f6:f4:45:7b:db:1a:00:8b:05:4e:2e:db:e1:89:
                    73:8b:12:33:5f:79:50:b4:b3:a8:05:07:b9:ec:b7:
                    d3:72:d9:a1:1b:a1:57:4c:2d:a3:dd:37:d1:d9:15:
                    23:dc:b3:77:f4:0e:80:fd:ba:b3:f1:68:b7:09:1e:
                    42:16:e1:55:9f:ff:8b:76:7f:4f:ef:3e:4b:16:22:
                    44:8f:6e:48:04:bb:a7:f8:70:0a:c1:a0:f4:c0:d7:
                    63:c6:63:a6:23:e4:48:fb:7e:6b:7e:70:a8:d7:45:
                    9f:5c:5f:ed:8f:c8:84:32:70:fe:07:64:e3:e3:c4:
                    fa:d0:2c:f8:a0:f2:0e:11:c3:2e:d0:a9:b1:5f:4d:
                    75:98:dd:26:77:17:a6:ca:fa:2b:3e:af:bd:f1:12:
                    23:5e:5f:ff:66:45:93:35:f1:f4:04:70:84:cb:2c:
                    43:99:cd:0a:9f:87:80:ce:f9:45:7c:9e:11:a7:fe:
                    95:bb:68:f8:cf:a0:78:b5:ae:ae:4d:68:8b:79:1c:
                    dd:61:f7:b6:c9:6f:19:fc:e0:a8:4d:26:66:2d:28:
                    4d:fb:72:0c:15:79:70:92:52:a7:c0:1f:ce:2a:97:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:3F:C3:52:A7:14:46:1A:5B:CD:6E:67:90:FC:6B:08:21:BD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:56:ae:57:19:a9:4e:66:11:18:16:91:db:bc:d1:28:1e:
         b3:2f:77:c7:cc:f3:fc:0f:38:44:d8:eb:c8:10:2c:b7:a6:c9:
         ee:02:24:d2:77:4d:ee:a5:88:a2:f8:b9:93:a1:b5:35:a4:6a:
         98:40:35:fb:76:44:e1:66:5f:f4:b5:66:63:ae:d6:ff:ef:4f:
         64:67:86:bc:4e:e5:a6:99:f2:be:f0:71:ff:ea:1d:25:ba:1f:
         a1:7e:90:da:95:6d:7a:cf:2f:3b:af:ee:6d:5d:49:27:62:ac:
         3e:5a:55:e1:d0:a4:93:f2:d2:3a:2c:61:8f:ee:23:78:77:f4:
         76:7c:f6:36:e9:d2:f6:17:1e:c2:a6:42:f3:6d:00:eb:3f:71:
         06:18:c4:3c:e2:8c:9e:b4:44:30:4c:88:79:0b:83:41:40:06:
         0b:0e:f7:4e:08:53:a2:95:6a:fa:2f:49:cf:90:07:4b:92:22:
         77:90:01:f2:b2:4a:46:e1:d4:69:58:0f:fa:c1:31:45:81:70:
         83:70:c6:4c:0c:df:de:0e:35:0a:4a:2b:2c:98:c2:bd:0f:e2:
         ab:a8:90:76:b2:24:b3:22:d7:27:33:a3:3f:89:29:50:e6:05:
         c3:9e:e4:86:b7:87:78:4f:e8:90:b8:a1:94:c1:d7:11:06:92:
         c8:f8:ee:97
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpICuZZbNZMY///4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdkNjNkNGYtZDNlYi00NDg0LTljOGEtN2M4OTRhZmEw
NjlhMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NTA4YzU1YWUtNTcyNy00OGY3LWIyOGQtZjAyMDdjNjg4Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFcg43n1oTPkRGdJzE4FGv9d+XnBvMXZqS/p
TZmA9vRFe9saAIsFTi7b4YlzixIzX3lQtLOoBQe57LfTctmhG6FXTC2j3TfR2RUj
3LN39A6A/bqz8Wi3CR5CFuFVn/+Ldn9P7z5LFiJEj25IBLun+HAKwaD0wNdjxmOm
I+RI+35rfnCo10WfXF/tj8iEMnD+B2Tj48T60Cz4oPIOEcMu0KmxX011mN0mdxem
yvorPq+98RIjXl//ZkWTNfH0BHCEyyxDmc0Kn4eAzvlFfJ4Rp/6Vu2j4z6B4ta6u
TWiLeRzdYfe2yW8Z/OCoTSZmLShN+3IMFXlwklKnwB/OKpexYQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOxjP8NSpxRGGlvNbmeQ/GsIIb1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2
M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5NGFmYTA2OWEvMWFiNDg5NjgtMzAzMi0z
MTZlLTg1YjAtZGQwOTllMmQ3ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjdkNjNkNGYtZDNlYi00NDg0LTlj
OGEtN2M4OTRhZmEwNjlhL2Y3ZDYzZDRmLWQzZWItNDQ4NC05YzhhLTdjODk0YWZh
MDY5YS5jcmwwHwYDVR0jBBgwFoAUeKhb3ed+GgECIc7ratL5eBYpcrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mN2Q2M2Q0Zi1kM2ViLTQ0ODQtOWM4YS03Yzg5
NGFmYTA2OWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFjdIgAwQF
jdLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGezVq5XGalOZhEYFpHbvNEoHrMvd8fM8/wPOETY68gQLLem
ye4CJNJ3Te6liKL4uZOhtTWkaphANft2ROFmX/S1ZmOu1v/vT2RnhrxO5aaZ8r7w
cf/qHSW6H6F+kNqVbXrPLzuv7m1dSSdirD5aVeHQpJPy0josYY/uI3h39HZ89jbp
0vYXHsKmQvNtAOs/cQYYxDzijJ60RDBMiHkLg0FABgsO904IU6KVavovSc+QB0uS
IneQAfKySkbh1GlYD/rBMUWBcINwxkwM394ONQpKKyyYwr0P4quokHayJLMi1ycz
oz+JKVDmBcOe5Ia3h3hP6JC4oZTB1xEGksj47pc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:44:48 2025 by rpki-client