Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa
File:                     14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa (raw, json)
Hash identifier:          LodnwPM0UBK0206kfymb7zMft2lGUeaVgnBW35XfXwQ=
Subject key identifier:   4A:53:10:A8:C1:BD:56:DA:49:6A:36:99:A6:44:D4:51:7F:9D:F9:0C
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A8146444F6586593101917000
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     46261
IP address blocks:        141.193.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:44:4f:65:86:59:31:01:91:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=d5f80fa6-e622-4123-b610-31bb2426a98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:dc:cc:34:40:a5:45:be:6d:d1:7e:68:fa:
                    a6:35:d3:e4:99:6d:84:c7:fb:19:02:f6:8a:79:af:
                    ef:de:22:50:0f:0f:19:b8:5e:16:38:ad:da:5e:34:
                    ef:ed:b7:81:8e:17:35:e0:5e:b9:21:c7:bd:c1:10:
                    58:36:33:c6:bd:77:19:c5:2f:47:98:47:2b:ad:4d:
                    0f:bd:02:28:81:ef:50:62:8f:a2:6f:57:02:3a:52:
                    c5:c0:57:9f:57:34:e4:63:0e:19:42:e6:b6:85:f2:
                    78:f1:dd:4d:a2:b6:b3:4f:81:61:2a:bb:ba:8c:d0:
                    68:8f:40:7a:3e:92:53:1e:55:4f:f7:a2:fd:6a:96:
                    19:32:93:f2:a8:7b:0b:b1:56:c1:2d:11:43:ed:b8:
                    73:d8:be:3d:81:19:71:ba:60:4b:c0:e1:4a:1f:b3:
                    61:11:dd:de:24:6e:7e:64:62:29:e5:bb:86:22:fb:
                    55:c5:6e:e0:00:ea:14:a3:f9:80:02:c4:5f:76:7b:
                    9a:88:b2:27:8f:d9:69:0e:fc:d6:17:66:4d:64:c3:
                    f0:99:c2:70:96:b4:3d:1f:7d:a2:7f:fd:04:cf:2f:
                    35:49:60:1e:5b:f2:42:f8:56:f8:50:da:15:f8:83:
                    8d:8f:f1:7c:63:58:da:e8:3e:4d:16:c4:a3:f1:1a:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:10:A8:C1:BD:56:DA:49:6A:36:99:A6:44:D4:51:7F:9D:F9:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:28:14:6e:eb:8e:ff:24:5a:77:45:54:f6:06:db:2b:00:
         12:ae:1b:e5:6e:71:87:0d:1a:b6:0d:38:7b:ce:15:89:93:06:
         d3:4b:54:9e:b3:f8:28:50:37:04:32:9d:0f:b3:3b:fc:ac:a5:
         1b:a2:d5:32:6c:bd:47:c7:8e:53:77:3d:dc:44:d0:18:7e:9e:
         07:1d:af:3a:0c:b7:d4:84:ba:cf:0b:f2:bd:36:65:62:e2:66:
         b5:4b:98:ee:a4:eb:dc:e6:7d:f0:ab:2e:07:0f:40:c3:a0:cf:
         2e:94:70:5a:01:af:cb:3e:99:43:96:f5:de:ad:c0:51:2e:00:
         0f:d4:59:45:e8:09:3b:12:37:3c:fa:0d:7e:de:0b:fb:01:59:
         11:42:47:d7:39:76:e5:17:90:41:1a:8a:c3:7a:58:42:08:5d:
         51:f2:59:9c:0b:c1:70:86:a2:24:d5:f9:cc:99:7c:de:9f:d8:
         7d:52:f7:5a:6f:92:5b:76:eb:ed:1a:35:c9:8d:dd:34:ed:c6:
         06:6a:88:eb:2c:eb:9a:7a:7a:f2:22:1f:a9:7b:90:d2:15:dd:
         eb:0a:64:51:d2:33:30:73:fa:11:77:63:f1:81:fb:7d:0f:b5:
         ca:78:f2:24:c1:c9:a3:e1:95:32:df:b7:0a:c8:45:8e:7e:f1:
         ee:07:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:55 2025 by rpki-client