Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7a422a55-b629-3283-b4bf-790b575b5424.roa
File:                     7a422a55-b629-3283-b4bf-790b575b5424.roa (raw, json)
Hash identifier:          XxtmFoy042t68GfAwc68QSbTgDSAVl9bCAPTZ3qcxXQ=
Subject key identifier:   FB:9E:B2:9C:36:86:89:D8:56:17:72:2A:DD:81:4B:1E:24:E8:D3:7C
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584B4A252FCC7D68B3A862F61A80
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7a422a55-b629-3283-b4bf-790b575b5424.roa
Signing time:             Tue 23 Sep 2025 11:52:27 +0000
ROA not before:           Tue 23 Sep 2025 11:52:27 +0000
ROA not after:            Mon 22 Dec 2025 12:52:27 +0000
asID:                     401838
IP address blocks:        141.195.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:25:2f:cc:7d:68:b3:a8:62:f6:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Sep 23 11:52:27 2025 GMT
            Not After : Dec 22 12:52:27 2025 GMT
        Subject: CN=e785ea70-dff7-4813-b7da-6ace0a8524ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:1b:30:27:22:1d:f3:99:50:26:a1:b5:46:
                    33:40:b2:b9:9a:b5:bb:f9:6e:2d:f2:58:66:f4:2e:
                    5c:cf:09:dd:bc:51:a1:33:9a:76:8b:f2:39:b5:48:
                    2e:ac:1a:92:3a:ba:dd:7f:0b:5d:25:00:c4:5d:d1:
                    26:e3:09:65:42:5c:9c:04:02:53:de:56:1f:fc:cf:
                    82:31:29:e8:b6:c6:83:04:e4:0f:11:f0:fe:c3:66:
                    45:06:e6:72:e6:20:57:bf:86:36:bf:1b:46:f3:25:
                    f2:a4:5d:d2:a4:c7:09:8b:52:5b:18:30:55:d9:0d:
                    ff:4a:49:b3:ad:5b:57:06:48:44:9e:28:e3:f3:9e:
                    ba:3f:37:1c:cb:39:5a:73:49:b1:0b:3c:f1:4e:7f:
                    c5:77:60:63:b9:7a:e2:0e:49:f9:d0:a7:36:85:20:
                    a9:82:b0:23:d0:08:af:70:15:2b:ed:50:24:7c:fe:
                    8b:d6:5b:0c:db:f3:c7:27:e5:a0:2e:4a:07:c5:8b:
                    63:03:70:24:aa:dd:55:ad:6a:90:77:77:1d:9a:c3:
                    b8:ab:2e:c1:43:12:60:47:e6:a3:98:8b:30:b5:ef:
                    ed:9f:27:b1:e0:18:e6:f3:7a:89:91:ed:49:b3:d4:
                    07:ed:37:fc:7d:72:59:61:79:1d:a8:37:d5:e8:37:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:B2:9C:36:86:89:D8:56:17:72:2A:DD:81:4B:1E:24:E8:D3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7a422a55-b629-3283-b4bf-790b575b5424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:75:78:13:2e:6c:13:2e:2f:77:ab:3a:3a:f7:d5:44:c6:
         6e:0b:4e:01:95:55:92:9d:4b:de:86:d7:ab:1f:26:ab:81:b6:
         ea:c1:eb:79:8d:dd:a1:ad:23:80:7f:68:e7:e7:24:3e:98:5a:
         77:20:cd:3f:14:7e:f3:55:57:22:4e:6d:76:9e:6f:15:c9:49:
         83:ea:3c:dd:ec:7c:68:0b:0e:22:13:d8:e8:b5:86:f6:ab:d4:
         01:f4:33:56:d6:85:a8:ad:f7:1d:d2:be:54:e4:2a:11:7c:9a:
         b6:f6:38:94:0d:e2:82:6a:ea:d5:a1:77:d4:3e:39:59:fd:da:
         32:d6:ff:5f:9f:ba:78:d7:5c:53:1f:d0:64:47:17:df:75:d5:
         96:21:78:4f:e2:3e:3d:3f:cb:48:b5:28:90:b3:e4:9f:2b:8b:
         ff:ec:a3:90:9c:a1:36:b5:41:7a:4f:d5:75:e1:98:36:e7:63:
         51:10:7e:fa:a7:14:52:03:53:e1:6d:37:5d:62:11:10:f6:d0:
         2d:04:26:78:de:19:f0:5f:79:db:65:6f:16:20:d6:d4:ed:db:
         60:4a:89:59:34:63:f6:7f:81:ac:db:76:9d:ab:a4:0b:a3:7a:
         a0:11:f7:bc:ae:45:8f:f5:9a:d1:83:c0:a9:d3:24:d7:b0:61:
         7b:3f:8f:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKJS/MfWizqGL2GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI1MDkyMzExNTIyN1oXDTI1MTIyMjEyNTIyN1owLzEtMCsGA1UEAxMk
ZTc4NWVhNzAtZGZmNy00ODEzLWI3ZGEtNmFjZTBhODUyNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4sbMCciHfOZUCahtUYzQLK5mrW7+W4t8lhm
9C5czwndvFGhM5p2i/I5tUgurBqSOrrdfwtdJQDEXdEm4wllQlycBAJT3lYf/M+C
MSnotsaDBOQPEfD+w2ZFBuZy5iBXv4Y2vxtG8yXypF3SpMcJi1JbGDBV2Q3/Skmz
rVtXBkhEnijj8566Pzccyzlac0mxCzzxTn/Fd2BjuXriDkn50Kc2hSCpgrAj0Aiv
cBUr7VAkfP6L1lsM2/PHJ+WgLkoHxYtjA3Akqt1VrWqQd3cdmsO4qy7BQxJgR+aj
mIswte/tnyex4Bjm83qJke1Js9QH7Tf8fXJZYXkdqDfV6DeQowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuespw2honYVhdyKt2BSx4k6NN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvN2E0MjJhNTUtYjYyOS0z
MjgzLWI0YmYtNzkwYjU3NWI1NDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtndXgTLmwTLi93qzo699VExm4LTgGVVZKdS96G16sfJquBturB63mN
3aGtI4B/aOfnJD6YWncgzT8UfvNVVyJObXaebxXJSYPqPN3sfGgLDiIT2Oi1hvar
1AH0M1bWhait9x3SvlTkKhF8mrb2OJQN4oJq6tWhd9Q+OVn92jLW/1+funjXXFMf
0GRHF9911ZYheE/iPj0/y0i1KJCz5J8ri//so5CcoTa1QXpP1XXhmDbnY1EQfvqn
FFIDU+FtN11iERD20C0EJnjeGfBfedtlbxYg1tTt22BKiVk0Y/Z/gazbdp2rpAuj
eqAR97yuRY/1mtGDwKnTJNewYXs/j+w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:45 2025 by rpki-client