Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          Gk9B//79kwWqurQae4UjxZ81+C0LPrJ1J2GMC1lxc2s=
Subject key identifier:   28:D9:A3:74:43:EA:5E:17:96:FB:E4:7D:E1:05:3E:8A:C0:F5:F6:66
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584DC995B18302E65F5BDB1B24C0
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:b1:83:02:e6:5f:5b:db:1b:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=64b49c41-ca8a-4171-ac80-3e03027e5743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:c2:7e:8b:16:d1:75:6b:c3:9d:d5:07:ef:
                    c8:d6:6b:e7:24:8c:61:b1:47:6b:02:13:f4:17:75:
                    b3:d0:e7:5c:a3:7f:5d:b0:99:01:a4:cf:a7:97:d7:
                    8c:e3:f2:99:85:bb:7e:6a:3a:9a:48:a3:8e:bd:0d:
                    0d:e3:00:02:98:72:1c:eb:38:d3:6f:b6:f0:8a:8e:
                    f4:a5:86:56:16:ab:36:35:6e:ac:2a:11:29:b6:95:
                    d4:89:c1:5b:9a:16:97:24:ef:81:b3:56:e3:a7:c4:
                    92:b1:19:a4:a1:5b:6f:c5:a4:0c:2d:19:e7:04:62:
                    78:b7:57:ad:3d:39:4e:e0:b5:6f:e3:bb:c1:fa:36:
                    84:e9:20:48:10:2a:1c:d6:0a:2a:63:60:a5:49:cb:
                    1d:cf:e0:41:59:31:39:72:36:47:d2:f8:eb:a7:74:
                    27:55:46:0c:db:31:31:73:9f:51:c9:3a:ea:39:0f:
                    4d:33:bb:cb:b9:f5:e6:de:2d:6e:01:d8:c2:13:d9:
                    2a:1a:dd:5f:74:d1:2a:12:37:4b:ba:40:de:2f:cf:
                    77:38:04:ac:10:9c:d5:cc:3e:77:75:d8:49:77:c1:
                    85:72:0b:ea:81:f3:40:b3:fd:c0:e5:11:ec:85:d8:
                    b1:9f:38:ac:6e:fe:f4:41:db:05:0b:63:f6:f5:f0:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:A3:74:43:EA:5E:17:96:FB:E4:7D:E1:05:3E:8A:C0:F5:F6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:e8:c0:00:1e:f9:99:63:a2:7c:db:af:af:2a:c0:71:f3:
         35:6c:b6:2a:02:30:98:ea:5d:03:b3:5a:6d:da:95:1f:ba:c4:
         74:92:2a:a0:20:7c:83:8c:6e:76:a5:25:bb:b1:eb:e2:19:07:
         00:f6:97:d1:bb:f2:be:38:35:92:26:97:9e:b9:c0:e7:b6:22:
         f2:60:c6:d8:65:92:7c:54:29:0e:db:6b:17:51:4f:4d:0b:43:
         09:8d:4a:c4:41:6e:13:39:f4:f1:f3:5f:f0:21:c9:4b:af:e4:
         46:58:28:17:fb:be:cc:14:90:ed:30:f8:c4:da:e6:7b:15:46:
         bd:c9:0d:33:aa:5d:c0:c2:e6:5e:b7:5b:86:f6:7b:37:b7:78:
         55:c8:fe:db:76:80:c0:12:a2:a7:be:4d:e5:c8:fd:2d:d4:c0:
         c7:65:f1:f1:62:70:a1:55:30:3b:84:da:e4:b2:ee:9d:9e:b6:
         a4:9a:8f:9c:e5:b9:87:32:07:25:24:3d:18:e8:70:56:52:5b:
         cd:f6:03:56:79:a0:2b:16:8e:a5:ed:68:19:46:e8:19:e6:c2:
         60:38:07:6a:ea:6e:6e:de:77:74:10:af:66:76:f2:b1:bf:95:
         63:3e:23:8e:be:a1:ce:1e:c6:e5:d1:d3:60:22:df:fe:cf:1c:
         f2:67:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:26 2026 by rpki-client