Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
File:                     1ab48968-3032-316e-85b0-dd099e2d7d07.roa (raw, json)
Hash identifier:          KjeOCniEpK5QLZW4LT9czOVD2Afo7wcwNQrMPB4nNjk=
Subject key identifier:   6F:9D:10:E8:2E:07:06:FC:2B:42:30:E2:96:C8:BF:94:A2:B0:AD:51
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F4328584CE8F76BDE60EE5D83FB42D000
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     237
IP address blocks:        141.210.32.0/19 maxlen: 19
                          141.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6b:de:60:ee:5d:83:fb:42:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=4ff9c5df-36bc-4206-b02a-84ee6dfde423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:f9:7f:d9:3e:b9:d6:08:5b:df:4d:8f:76:
                    d2:70:6a:3c:f0:04:63:78:23:99:42:6f:37:fd:9a:
                    db:3e:f7:91:46:95:a6:cc:33:d5:1d:a3:37:48:e0:
                    12:d5:2d:6a:11:51:ce:5c:59:17:93:32:82:48:ea:
                    ad:5d:69:92:18:e3:30:4d:88:1b:71:56:5a:14:79:
                    78:58:2f:7f:9c:89:b1:d9:d2:83:a6:49:76:43:2c:
                    cb:22:2c:94:90:0f:b7:51:16:48:a1:9f:08:8b:ab:
                    80:3e:bb:ca:4f:83:6c:20:20:06:39:85:16:4d:c4:
                    d5:3f:16:12:60:a2:5d:14:87:37:4c:60:a4:3e:a1:
                    9e:6f:f9:86:dc:f7:2d:92:62:7d:10:72:aa:4b:4c:
                    5a:e5:4a:6d:e8:84:d7:0a:62:08:43:f5:8c:89:a3:
                    86:e6:78:e4:35:9c:e2:1a:88:19:a7:d2:4f:4a:44:
                    4f:63:58:6f:05:33:35:1c:58:24:aa:34:14:bb:67:
                    29:ec:04:0c:e9:1d:da:fb:d6:f5:cb:bf:d4:43:20:
                    56:cd:c6:b3:e2:23:57:25:12:94:ad:21:4e:91:2b:
                    ae:89:40:c3:b6:f4:14:bd:73:bc:47:6c:01:85:0b:
                    08:b8:d4:98:a4:45:ed:14:ea:3d:42:60:43:8e:c3:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9D:10:E8:2E:07:06:FC:2B:42:30:E2:96:C8:BF:94:A2:B0:AD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/1ab48968-3032-316e-85b0-dd099e2d7d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.32.0/19
                  141.210.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:e5:ef:69:ac:97:c4:58:79:b0:7e:b8:47:73:30:54:1e:
         bc:74:d1:98:8a:97:6d:9a:74:d6:d7:0f:23:1b:81:2a:24:61:
         83:3a:31:f7:45:54:52:33:ce:90:5f:f3:8b:59:9c:18:99:43:
         b7:53:d8:0c:d6:2c:b6:8f:2f:a8:50:f2:a3:81:80:59:f0:b9:
         6d:09:4b:f1:cf:24:72:4c:18:df:c7:39:47:4c:70:16:d3:21:
         9d:d8:8a:b3:7a:f6:4d:6b:f6:9f:65:d5:b2:05:e8:03:d0:14:
         d8:87:66:07:ed:d0:33:10:46:88:93:ff:f3:a4:19:26:c9:f6:
         e5:ba:19:61:af:45:1e:91:c8:80:49:e3:6d:91:da:5c:0c:a9:
         b5:aa:ec:7a:6c:8a:94:0a:63:d6:1e:54:da:df:1e:64:f8:85:
         1c:01:bf:18:82:d9:2e:3a:e9:e7:71:61:1b:3e:bc:86:d2:73:
         20:13:15:b6:ba:08:f9:4d:16:54:c1:da:cf:15:3a:e3:3c:b5:
         7f:b3:6f:0a:ba:71:75:9e:9c:51:54:32:9b:ca:d0:8b:15:0d:
         f1:e5:f8:e0:6f:70:00:5d:12:c7:f0:0d:87:ae:7d:02:c4:b1:
         04:fd:65:46:ad:57:bc:48:d5:c4:67:40:30:c4:ac:5e:59:98:
         83:bc:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:14 2026 by rpki-client