Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa
File:                     73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa (raw, json)
Hash identifier:          T5VCXGTmgrwDPllKUKI1ROqeapGsQ2AjVHR/1Rd3i9I=
Subject key identifier:   EA:61:6D:95:0E:B8:57:8E:F0:22:82:E4:9E:48:8E:68:83:C0:68:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725845CEF3BBCFEFCF9E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        141.207.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:58:45:ce:f3:bb:cf:ef:cf:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c879f897-689e-4006-925d-247ec93185f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:50:5d:3e:a2:e4:52:d7:52:c2:46:7e:92:
                    00:fc:ee:03:ee:a4:45:e0:ba:93:90:a4:41:30:22:
                    cc:05:ac:ec:80:cd:be:eb:8e:91:71:14:f3:97:00:
                    99:7b:c2:31:6f:77:b8:b0:be:16:d6:ac:c8:aa:68:
                    06:6e:de:05:3b:40:e7:06:c2:d7:19:10:40:3f:e8:
                    66:73:04:19:9d:28:1a:86:6f:90:19:c3:17:cc:eb:
                    ba:9c:2b:0d:bb:5e:14:d1:4f:88:89:a8:7e:ce:d5:
                    51:bd:f3:09:ee:b0:0f:7e:d6:c3:00:56:fa:df:da:
                    35:13:b7:c9:f9:13:5d:14:3c:9b:7b:95:f2:fb:7f:
                    af:9d:1a:c0:67:68:f3:96:a9:10:9d:90:59:71:58:
                    9b:50:e5:4e:e3:a1:0b:d8:2c:dc:7d:89:c9:5c:24:
                    8c:ec:1c:ef:d8:57:bd:93:5a:fc:2c:e0:93:e0:ef:
                    e4:3b:9c:4d:5f:42:b1:ed:9b:c9:45:63:95:14:2a:
                    8b:2b:eb:dc:b8:38:45:e3:fc:f1:98:19:e8:5a:48:
                    dc:b2:b3:ea:32:db:8b:0c:6c:1e:43:b9:46:64:83:
                    af:0a:67:6f:7e:4e:eb:07:52:e3:db:af:c1:c0:5f:
                    60:5f:52:81:19:3c:93:58:a9:a1:8e:70:58:51:e6:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:6D:95:0E:B8:57:8E:F0:22:82:E4:9E:48:8E:68:83:C0:68:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:03:56:87:4f:80:62:dc:65:ad:15:56:2e:44:dd:09:01:53:
         04:2c:80:3c:0f:38:24:f1:d2:2c:32:f4:3f:66:0e:b6:88:1e:
         9d:ab:8a:42:0f:f1:64:e4:c2:af:56:02:69:a9:0f:e1:26:31:
         7c:14:fc:d7:fe:b6:7e:ea:fa:3f:24:87:fd:08:71:70:dd:fd:
         f3:f2:a6:54:b9:51:98:35:01:74:fb:30:d9:40:58:b0:d5:a5:
         d6:c9:2a:a3:b5:95:34:3b:d6:25:d2:04:90:95:dd:91:9f:8f:
         d9:1a:50:30:36:ea:5b:b3:f2:6b:ae:85:af:66:73:0f:c9:37:
         5c:bf:0e:05:95:0b:3d:24:57:72:8b:d0:a1:0b:15:55:a8:e5:
         c5:fc:2e:ff:cd:5d:18:61:ef:e1:78:c5:0f:7e:3c:72:a6:55:
         03:54:91:11:55:88:56:6c:1d:29:19:9e:10:83:dd:26:d4:a1:
         9f:b9:7d:a1:9a:41:f3:12:6a:f8:ea:98:f6:d1:6f:fb:ef:c2:
         46:ae:fb:cc:ce:c7:76:72:de:de:b4:48:c8:fd:08:07:5d:c5:
         7c:27:e5:d8:a1:51:52:6b:65:cc:dc:d8:ce:ce:a0:ba:0b:46:
         0a:1b:39:16:8c:8e:4b:14:ef:fc:5a:c1:6a:02:68:6f:94:c5:
         31:b7:98:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GclhFzvO7z+/PngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Yzg3OWY4OTctNjg5ZS00MDA2LTkyNWQtMjQ3ZWM5MzE4NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZdQXT6i5FLXUsJGfpIA/O4D7qRF4LqTkKRB
MCLMBazsgM2+646RcRTzlwCZe8Ixb3e4sL4W1qzIqmgGbt4FO0DnBsLXGRBAP+hm
cwQZnSgahm+QGcMXzOu6nCsNu14U0U+Iiah+ztVRvfMJ7rAPftbDAFb639o1E7fJ
+RNdFDybe5Xy+3+vnRrAZ2jzlqkQnZBZcVibUOVO46EL2CzcfYnJXCSM7Bzv2Fe9
k1r8LOCT4O/kO5xNX0Kx7ZvJRWOVFCqLK+vcuDhF4/zxmBnoWkjcsrPqMtuLDGwe
Q7lGZIOvCmdvfk7rB1Lj26/BwF9gX1KBGTyTWKmhjnBYUeYV8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOphbZUOuFeO8CKC5J5IjmiDwGhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzNlMGZiMTQtMWE1Zi0z
Zjc3LWEzYzEtYzg4M2E3ZWY2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcDVodPgGLcZa0VVi5E3QkBUwQsgDwPOCTx0iwy9D9mDraIHp2rikIP
8WTkwq9WAmmpD+EmMXwU/Nf+tn7q+j8kh/0IcXDd/fPyplS5UZg1AXT7MNlAWLDV
pdbJKqO1lTQ71iXSBJCV3ZGfj9kaUDA26luz8muuha9mcw/JN1y/DgWVCz0kV3KL
0KELFVWo5cX8Lv/NXRhh7+F4xQ9+PHKmVQNUkRFViFZsHSkZnhCD3SbUoZ+5faGa
QfMSavjqmPbRb/vvwkau+8zOx3Zy3t60SMj9CAddxXwn5dihUVJrZczc2M7OoLoL
RgobORaMjksU7/xawWoCaG+UxTG3mLs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:05:26 2026 by rpki-client