Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa
File:                     9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa (raw, json)
Hash identifier:          IZrPwopG8F8IFlHnP6uL9rWsS3dS2AkrQ9dOAXvZEs0=
Subject key identifier:   2B:D0:C3:07:4F:0D:6B:BD:C6:6D:17:39:DD:03:3E:A9:0C:B7:04:18
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584A0C05635C9C7490361050DF80
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        141.202.0.0/20 maxlen: 20
                          141.202.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:63:5c:9c:74:90:36:10:50:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=d9ae2010-b8d4-4712-a120-d60d371a6c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:3d:f4:8c:f3:6d:6c:a7:51:1c:15:a2:11:
                    ad:e0:b2:3d:d6:b6:86:fb:95:9c:f6:ab:fc:9d:1f:
                    7b:b9:1d:10:45:31:c5:0d:d3:11:0d:53:e4:64:c4:
                    90:0d:71:b7:e7:6d:b4:d9:ce:70:f4:63:3c:d1:2f:
                    60:1b:54:92:8e:61:49:f3:dd:62:1a:72:5b:44:f0:
                    b9:8f:7a:bb:3c:4a:89:e1:9e:7f:31:3b:3c:d0:58:
                    99:90:b3:3e:66:c8:c1:7c:0b:52:70:54:e6:4f:c5:
                    f5:82:11:8a:74:c0:88:39:f0:86:7f:c7:16:d5:77:
                    b9:28:ab:9b:e0:1e:8c:00:6a:84:c8:9c:95:ea:bb:
                    a4:1f:f3:27:89:00:30:de:72:94:e5:ed:18:82:1f:
                    13:ff:ed:59:7c:31:3a:41:b9:16:a3:8b:af:8d:e3:
                    15:82:66:01:58:06:ab:eb:2e:ae:d7:f8:24:ce:96:
                    bd:b1:47:60:0e:36:87:a6:a2:38:9d:ed:22:da:e7:
                    1a:51:46:63:13:7f:90:e1:d8:78:9c:a9:cd:7c:12:
                    29:0a:88:ea:69:b4:65:1f:c5:2e:3c:34:8a:aa:79:
                    50:f7:8e:53:20:14:1a:52:ce:12:cd:38:1c:b6:83:
                    2a:a9:2e:33:5d:de:88:4f:15:a6:8e:1a:9a:c6:d1:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D0:C3:07:4F:0D:6B:BD:C6:6D:17:39:DD:03:3E:A9:0C:B7:04:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9c4b11f6-d69e-3633-a36b-b78ee3aa3aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.202.0.0/20
                  141.202.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:2b:09:fc:37:2a:b5:22:96:33:4f:2f:0e:f5:99:cd:4b:
         3e:8f:9d:fa:08:39:71:11:03:05:89:ff:6d:63:d6:d1:7f:60:
         8d:b8:3e:55:d7:cf:86:95:9a:bf:7f:79:8b:1a:38:3a:79:94:
         2e:3c:3e:89:bd:68:2d:7f:43:f4:9c:f2:45:7f:49:5b:f0:60:
         b0:fe:d8:46:0a:c3:25:72:27:51:79:04:27:6e:39:34:cb:cd:
         10:93:13:39:c9:a1:1b:9b:b5:36:b2:c1:c8:58:37:61:db:bd:
         88:60:86:3b:32:1a:ba:dd:8c:53:5c:c6:11:81:22:38:6f:25:
         88:b6:9f:ad:d5:30:b9:a7:24:0b:bd:11:e4:7b:06:e7:04:c9:
         85:a1:37:c1:f7:f1:74:0c:a5:bb:e1:9c:39:09:21:5f:f5:60:
         11:35:fa:66:04:96:45:d0:a2:17:5a:4b:8a:6f:43:bc:38:3f:
         4c:31:cc:86:05:8b:76:0b:f8:0f:c6:27:52:98:32:78:d3:a2:
         f8:89:79:15:e0:c8:08:93:e6:70:9b:16:f2:54:f9:a4:65:fd:
         05:f3:d9:26:7e:7d:07:d7:1e:65:13:88:9d:db:5d:a5:af:14:
         03:94:bf:8d:0e:14:0c:73:06:8a:76:75:7d:37:3f:63:f1:96:
         a1:59:c3:aa
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoMBWNcnHSQNhBQ34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZDlhZTIwMTAtYjhkNC00NzEyLWExMjAtZDYwZDM3MWE2YzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIU99IzzbWynURwVohGt4LI91raG+5Wc9qv8
nR97uR0QRTHFDdMRDVPkZMSQDXG352202c5w9GM80S9gG1SSjmFJ891iGnJbRPC5
j3q7PEqJ4Z5/MTs80FiZkLM+ZsjBfAtScFTmT8X1ghGKdMCIOfCGf8cW1Xe5KKub
4B6MAGqEyJyV6rukH/MniQAw3nKU5e0Ygh8T/+1ZfDE6QbkWo4uvjeMVgmYBWAar
6y6u1/gkzpa9sUdgDjaHpqI4ne0i2ucaUUZjE3+Q4dh4nKnNfBIpCojqabRlH8Uu
PDSKqnlQ945TIBQaUs4SzTgctoMqqS4zXd6ITxWmjhqaxtF9EQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCvQwwdPDWu9xm0XOd0DPqkMtwQYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvOWM0YjExZjYtZDY5ZS0z
NjMzLWEzNmItYjc4ZWUzYWEzYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEjcoAAwQA
jcr+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAErJKwn8Nyq1IpYzTy8O9ZnNSz6PnfoIOXERAwWJ/21j1tF/
YI24PlXXz4aVmr9/eYsaODp5lC48Pom9aC1/Q/Sc8kV/SVvwYLD+2EYKwyVyJ1F5
BCduOTTLzRCTEznJoRubtTaywchYN2HbvYhghjsyGrrdjFNcxhGBIjhvJYi2n63V
MLmnJAu9EeR7BucEyYWhN8H38XQMpbvhnDkJIV/1YBE1+mYElkXQohdaS4pvQ7w4
P0wxzIYFi3YL+A/GJ1KYMnjToviJeRXgyAiT5nCbFvJU+aRl/QXz2SZ+fQfXHmUT
iJ3bXaWvFAOUv40OFAxzBop2dX03P2PxlqFZw6o=
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:23:27 2025 by rpki-client