Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa
File:                     2e7cd925-5574-3280-adf0-5dadc1a600b6.roa (raw, json)
Hash identifier:          U36HTQL4ShBh8aldw/btRnt+L+HJWaCJrrxe6GejFnk=
Subject key identifier:   34:F8:D3:0B:84:7C:AF:54:40:54:49:9A:5E:08:90:23:DC:1D:24:73
Certificate issuer:       /CN=67881dcf-e50e-4f7b-a534-a0d6ea187a62
Certificate serial:       010D0C9F4328584D7A05333508FCACBDE24CFEA0
Authority key identifier: D9:64:6A:AC:8B:24:5D:0F:C4:15:8B:7A:D9:34:F6:5F:8E:5B:95:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     62618
IP address blocks:        141.219.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:33:35:08:fc:ac:bd:e2:4c:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67881dcf-e50e-4f7b-a534-a0d6ea187a62
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=f8a9d5aa-f029-460d-ba7a-fb8990beed85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:4c:0d:33:83:42:7d:e3:73:05:bc:57:2c:
                    70:f7:ac:6c:f9:80:00:8d:00:90:f7:91:8e:04:6e:
                    ef:3d:4e:90:38:9d:51:1c:4a:c6:24:56:0d:63:0d:
                    64:c4:ad:20:f0:59:8c:b8:04:5f:c7:24:64:a1:9f:
                    97:be:65:02:aa:3f:85:c4:96:fc:6d:d2:9d:cd:00:
                    76:7c:0e:88:26:ae:8e:8e:a5:3f:6f:58:b1:26:ee:
                    02:bc:26:41:22:41:89:24:c7:4d:00:58:df:02:11:
                    cb:b5:a4:ba:0a:b4:85:7e:30:54:3c:78:7f:ee:5c:
                    d0:ff:ad:5d:31:8c:f6:2b:07:a3:b9:dc:87:7b:5f:
                    74:1b:ee:7f:83:48:ec:02:21:97:99:d8:7f:11:e7:
                    64:3d:9e:66:27:5e:59:d6:a8:b7:d6:d4:69:80:06:
                    2e:0e:a0:fc:42:29:6f:12:c6:c3:80:00:c3:15:ec:
                    72:01:b2:3b:08:fb:29:77:0a:b2:92:32:22:ad:62:
                    35:b3:eb:80:09:77:ea:19:7f:22:26:5f:3a:6d:19:
                    bf:05:95:83:78:d8:79:e2:90:8b:d1:e0:fb:4e:de:
                    e1:f4:0c:16:4c:65:70:b2:bc:6c:ae:c2:3a:48:6b:
                    39:ef:55:37:f8:8a:91:5c:41:a3:3e:b7:36:e8:81:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F8:D3:0B:84:7C:AF:54:40:54:49:9A:5E:08:90:23:DC:1D:24:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.crl

            X509v3 Authority Key Identifier:
                keyid:D9:64:6A:AC:8B:24:5D:0F:C4:15:8B:7A:D9:34:F6:5F:8E:5B:95:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:77:9b:b2:24:24:0f:66:20:a1:ba:6e:25:42:92:88:71:
         3c:b1:83:a3:fb:a3:ba:b5:f6:c1:e3:e4:3a:99:48:17:0d:51:
         26:9f:3a:95:27:95:5d:8f:57:1c:a1:13:83:0d:89:f1:a8:54:
         78:8b:d0:ae:7a:8e:de:15:40:c2:f0:e7:e3:04:e5:7e:77:2e:
         19:29:a7:71:56:7d:53:fa:e0:62:3e:dc:c4:4c:8a:ee:6a:3c:
         0d:fd:05:22:fd:78:c5:0b:11:73:9b:03:62:40:fe:1b:5d:b5:
         53:2f:68:94:e9:8c:a8:37:e3:5c:4a:f2:23:1d:01:53:28:90:
         6a:2f:2b:16:96:77:a0:d8:c0:6f:ad:c9:db:27:9b:c2:b5:98:
         c2:44:40:79:eb:55:31:ee:e9:49:bd:70:00:1f:8d:2a:25:ca:
         6b:63:e9:ac:f5:53:be:51:4d:24:1e:6c:2f:82:15:e5:96:37:
         c3:f0:75:0d:1d:e8:48:8c:e7:e5:8d:24:fa:63:77:93:94:98:
         04:46:81:96:98:36:9f:c5:70:53:73:9e:8c:7d:18:19:7e:ba:
         4b:3f:fa:2b:2c:39:1b:f9:bb:e6:4d:f5:84:d9:00:8f:5e:da:
         ba:d3:00:9b:b5:ec:9f:00:ed:1f:d8:e7:97:a3:a2:d0:1f:53:
         9a:a7:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:15 2026 by rpki-client