Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa
File:                     ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa (raw, json)
Hash identifier:          Fb7FeBjCRXa5XJKa5B/w8sDW8ZmPVlVQhFH55mePj2o=
Subject key identifier:   25:D2:C4:4D:88:4C:4C:B5:3D:74:92:A3:6F:52:3E:38:D1:A3:CE:05
Certificate issuer:       /CN=141d1fb1-9841-4771-b75f-7e85f1329175
Certificate serial:       010D0C9F4328584B8BE2270364BDD385A1B46980
Authority key identifier: 32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     15830
IP address blocks:        142.215.4.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:27:03:64:bd:d3:85:a1:b4:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141d1fb1-9841-4771-b75f-7e85f1329175
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=f48d280e-ff3e-4c79-ab5e-7782a7a6a816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:49:d5:d2:bd:d2:19:ca:93:48:5b:c6:e1:
                    c8:9a:e2:b3:d5:8e:dd:b6:77:64:cf:f6:16:dd:47:
                    49:9d:e0:eb:c9:14:83:39:c2:53:9d:3f:68:9c:6c:
                    e9:90:7f:2e:33:a1:90:1d:ad:3e:4f:81:04:a9:74:
                    59:df:83:89:d4:f7:e1:13:3f:70:4b:8a:3c:92:93:
                    29:08:b2:1c:bd:3f:09:79:88:df:5a:60:c6:af:c7:
                    93:ad:d6:02:c7:9c:0c:c1:8a:7c:04:f1:03:25:4f:
                    da:35:0c:b0:92:e5:55:78:bb:95:7b:e2:f2:6c:72:
                    b7:10:ce:5b:9b:2a:63:0b:78:2d:4f:1b:3d:c8:b3:
                    64:2d:ef:bd:1c:3e:d9:4a:40:61:ab:7c:27:27:1f:
                    e7:f6:a1:2c:6c:e0:47:5f:e1:3e:7b:21:01:8e:bf:
                    1a:dd:2a:d2:cc:3a:b3:ae:9d:60:4f:22:b0:6c:44:
                    87:ec:10:09:29:6d:fc:1a:e9:56:ef:8c:08:53:b4:
                    1a:8f:fa:e7:15:19:3d:7f:ec:2f:d7:95:24:f0:00:
                    c9:d4:18:d9:80:23:36:67:5d:5f:2f:aa:96:9a:8e:
                    be:55:1e:60:b2:c9:3c:91:f1:fd:e0:ae:e1:c0:9e:
                    44:18:73:d8:ec:ce:15:04:ce:8c:61:bf:b3:ed:2b:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D2:C4:4D:88:4C:4C:B5:3D:74:92:A3:6F:52:3E:38:D1:A3:CE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl

            X509v3 Authority Key Identifier:
                keyid:32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.215.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:d0:4e:6f:18:39:35:48:e5:d8:23:62:95:65:d6:55:f8:
         30:b9:f7:32:df:86:a7:2c:b9:38:3e:70:67:a9:0b:d9:b3:86:
         a1:a9:f0:43:9c:c6:cd:c5:b7:6b:c1:d1:d3:0b:2c:55:3e:8c:
         9b:7f:14:cd:ec:18:65:03:2d:e8:9f:2b:83:de:a7:c3:7e:05:
         1a:f9:c7:16:d1:b9:0d:79:db:24:13:ce:07:5e:08:5f:a3:54:
         6b:30:d0:f7:60:c5:af:7f:d2:4c:08:2f:ba:e1:b8:67:ad:e9:
         20:c1:bf:15:ff:ce:2c:22:08:dc:2e:78:bc:ad:4e:4d:32:00:
         b0:19:50:a1:ad:e9:31:2d:b5:21:b7:fe:86:b2:68:b5:bb:73:
         59:32:48:a0:53:28:03:d9:d4:9c:3b:4e:8e:99:6a:5d:f9:e7:
         dc:eb:38:4e:ad:90:86:11:e9:fb:45:83:80:b9:9d:e2:82:dd:
         23:d3:8d:a9:4e:27:bd:f2:68:ee:b5:a7:1e:2f:31:de:78:bc:
         a8:01:9b:01:0e:05:a1:0f:9b:39:69:6e:29:3a:5a:38:56:a6:
         3e:cc:06:ef:c2:7c:c5:8e:b0:9e:53:e4:42:5a:bd:66:18:e7:
         69:19:28:9a:45:97:70:18:d0:95:2e:bc:2e:e3:91:5c:18:a8:
         44:14:1f:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4icDZL3ThaG0aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQxZDFmYjEtOTg0MS00NzcxLWI3NWYtN2U4NWYxMzI5
MTc1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZjQ4ZDI4MGUtZmYzZS00Yzc5LWFiNWUtNzc4MmE3YTZhODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2RJ1dK90hnKk0hbxuHImuKz1Y7dtndkz/YW
3UdJneDryRSDOcJTnT9onGzpkH8uM6GQHa0+T4EEqXRZ34OJ1PfhEz9wS4o8kpMp
CLIcvT8JeYjfWmDGr8eTrdYCx5wMwYp8BPEDJU/aNQywkuVVeLuVe+LybHK3EM5b
mypjC3gtTxs9yLNkLe+9HD7ZSkBhq3wnJx/n9qEsbOBHX+E+eyEBjr8a3SrSzDqz
rp1gTyKwbESH7BAJKW38GulW74wIU7Qaj/rnFRk9f+wv15Uk8ADJ1BjZgCM2Z11f
L6qWmo6+VR5gssk8kfH94K7hwJ5EGHPY7M4VBM6MYb+z7StOLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXSxE2ITEy1PXSSo29SPjjRo84FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFk
MWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1ZjEzMjkxNzUvYWM2ZDlkYWYtNWJmNy0z
ZjRjLTkxMjUtOWRjNmI2NjNjNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQxZDFmYjEtOTg0MS00NzcxLWI3
NWYtN2U4NWYxMzI5MTc1LzE0MWQxZmIxLTk4NDEtNDc3MS1iNzVmLTdlODVmMTMy
OTE3NS5jcmwwHwYDVR0jBBgwFoAUMvdb+tQdtC9nSjmGQJchCKT7hggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFkMWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1
ZjEzMjkxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADp50E5vGDk1SOXYI2KVZdZV+DC59zLfhqcsuTg+cGepC9mzhqGp8EOc
xs3Ft2vB0dMLLFU+jJt/FM3sGGUDLeifK4Pep8N+BRr5xxbRuQ152yQTzgdeCF+j
VGsw0Pdgxa9/0kwIL7rhuGet6SDBvxX/ziwiCNwueLytTk0yALAZUKGt6TEttSG3
/oayaLW7c1kySKBTKAPZ1Jw7To6Zal3559zrOE6tkIYR6ftFg4C5neKC3SPTjalO
J73yaO61px4vMd54vKgBmwEOBaEPmzlpbik6WjhWpj7MBu/CfMWOsJ5T5EJavWYY
52kZKJpFl3AY0JUuvC7jkVwYqEQUH8s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:52 2025 by rpki-client