Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          xh8pOJDBoWXtT89ooezNaOVa6RPRoYMQ6L+AtA0LX5M=
Subject key identifier:   99:60:96:55:DD:B1:A9:97:4B:62:E8:41:F8:03:20:99:A8:C0:60:DD
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584F4975B292DAF423BAE8DD5EC0
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b2:92:da:f4:23:ba:e8:dd:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5346cdc3-0a36-42b8-9ea5-acba8796fd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:a2:a7:85:63:23:60:9b:ed:f4:a6:fb:33:
                    98:17:1c:ac:b0:81:f3:c0:66:e8:53:5e:df:61:f9:
                    0f:14:1e:56:7a:25:b6:d9:ca:90:51:9b:4f:26:8c:
                    df:54:0d:ac:25:9f:24:ea:db:15:f0:5f:e5:47:bf:
                    01:82:b9:f0:b7:47:a3:4e:c2:04:20:27:9a:c2:eb:
                    00:f8:53:65:66:e5:32:04:1e:1f:86:b0:39:ff:b6:
                    e8:84:ea:a6:cb:28:2b:d2:1d:50:fd:c5:4b:5b:04:
                    cf:45:0b:86:17:34:4e:f2:dd:4e:1a:96:04:7f:57:
                    7d:a4:be:c1:96:5f:a4:61:70:33:4e:2e:2e:e7:5e:
                    6d:d0:dd:4f:30:38:54:ea:8d:99:41:4b:98:89:3e:
                    3c:c2:9d:37:23:fc:75:e2:f8:23:0f:72:fe:61:d7:
                    fb:91:ec:a4:24:25:14:c6:33:dd:36:64:f5:c1:9f:
                    85:05:15:81:aa:93:a9:1a:3d:d1:d1:d0:9c:e5:53:
                    f7:0d:94:e5:df:2f:d5:d8:93:eb:36:59:74:91:7b:
                    a8:8d:63:6c:a6:38:b4:91:a7:55:f7:bb:41:50:c3:
                    7f:2c:91:a3:25:35:10:6d:56:90:b2:60:d4:3a:5d:
                    5b:2e:bd:03:14:fe:38:55:8b:47:52:ba:c4:35:de:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:96:55:DD:B1:A9:97:4B:62:E8:41:F8:03:20:99:A8:C0:60:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:e9:5d:80:a4:b2:0c:81:55:cd:2c:70:36:73:ee:1b:c8:
         6a:5a:33:b4:00:2d:e6:89:39:fc:cc:7d:a7:52:a7:ad:6f:c3:
         f3:96:f8:9a:50:4f:21:49:96:56:74:35:d5:b0:80:c6:85:92:
         9b:be:23:e7:5f:60:ac:8f:e4:47:ef:1d:99:0f:be:ab:aa:c8:
         f5:b9:8d:87:67:92:13:8c:4c:2a:91:06:37:0d:8c:63:d4:96:
         c7:25:0f:73:96:d4:01:50:a6:83:cb:fb:94:44:31:64:bf:3f:
         3a:be:41:92:e7:7e:b0:8f:c7:e8:03:b0:8b:28:f4:8e:02:c0:
         2c:28:6f:d9:b2:b8:fb:fb:a0:5a:6c:a4:2b:cf:f7:69:c9:09:
         1a:4f:91:8b:3c:41:b9:f3:45:b1:e6:bd:69:24:f8:cd:6d:34:
         5d:ea:88:ce:8e:fc:9c:12:8b:cb:c7:7f:2e:62:9f:c0:10:48:
         1a:3e:b9:e0:7c:09:9b:ed:54:11:65:28:9f:ad:8d:28:b7:b9:
         06:9a:60:f0:7e:fd:2b:fe:d9:e5:67:39:c2:57:53:84:1c:e0:
         b6:27:c8:b7:8d:90:f0:63:2e:b4:fd:82:71:51:19:4b:d6:ec:
         59:a5:8a:0f:b8:0f:a5:7c:fd:6c:c2:7b:65:ad:bc:8c:94:1d:
         68:1f:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:49:38 2026 by rpki-client