Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f548ce7-5db3-3b0f-b214-81f596c41a63.roa
File:                     0f548ce7-5db3-3b0f-b214-81f596c41a63.roa (raw, json)
Hash identifier:          N0OlgGgIlTZDj3e2pIOHLsXmPdG4evfRyvEfpn9KF68=
Subject key identifier:   F7:A7:1E:71:F2:23:DE:15:12:21:44:7A:96:71:3A:48:0D:D2:D0:87
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75D67FB67F1FA3298EF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f548ce7-5db3-3b0f-b214-81f596c41a63.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        142.111.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5d:67:fb:67:f1:fa:32:98:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=5aafddbe-6af7-4c9a-90b7-b43345238df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:f2:ad:7f:7b:b7:cc:45:47:b2:9b:55:a1:
                    f4:03:75:1e:b1:d8:af:b0:72:0e:1e:ca:0c:db:6c:
                    5f:62:ab:9f:96:09:92:ba:0f:58:61:a0:a5:79:19:
                    77:8b:50:2a:98:b3:32:cf:a4:24:7e:4e:70:48:68:
                    f9:55:24:20:9f:81:75:20:d7:5e:09:4f:50:c6:eb:
                    bb:13:30:3e:7f:5b:1c:3b:fc:da:0e:82:58:69:08:
                    89:16:2e:b9:44:14:d9:39:f1:fa:e7:cc:b4:75:e6:
                    be:d2:49:d7:5d:b8:b2:77:14:95:74:94:bd:e9:f5:
                    34:ba:14:c7:5d:fb:5b:ae:fe:86:b2:14:d9:0e:7e:
                    6c:8f:01:87:b0:86:b0:5a:f5:ea:d8:7f:2e:ea:94:
                    0a:cf:bb:44:55:c4:4d:c2:e3:7d:d2:d7:22:c1:05:
                    87:19:77:62:bf:f3:76:71:a1:22:75:64:38:24:29:
                    79:f5:c5:b1:14:70:7e:4b:ec:21:7f:90:43:10:22:
                    43:e6:68:5b:1a:09:ff:cd:5b:31:97:62:60:6f:b0:
                    f9:a8:d8:6c:13:31:95:af:72:25:df:52:7c:b7:cb:
                    b7:8f:92:e8:c4:a0:76:19:1e:8a:36:31:03:1f:43:
                    2c:54:a9:be:0f:da:03:93:b6:6b:ae:0f:f8:98:27:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:1E:71:F2:23:DE:15:12:21:44:7A:96:71:3A:48:0D:D2:D0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f548ce7-5db3-3b0f-b214-81f596c41a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:02:e3:2c:8b:c9:4c:c7:d3:04:d2:6b:64:48:c5:fe:c8:00:
         f9:69:2a:fe:ea:b6:fe:c7:af:50:a3:a8:94:96:91:22:b7:bf:
         ba:b8:53:4e:83:28:34:b1:4d:2d:5e:25:3e:57:b1:39:f8:e5:
         0a:56:e9:01:93:15:d6:04:12:f8:65:87:62:57:4d:18:b1:c3:
         82:db:fb:20:32:ca:f2:48:66:20:f5:a4:65:a6:79:16:fb:80:
         9d:bd:00:4d:63:d3:41:c0:69:f1:b8:02:b6:64:e7:fe:36:c6:
         97:a7:72:0c:79:87:01:9b:d2:7b:02:9a:52:3b:b3:44:bc:25:
         7f:ce:ed:29:49:e1:2c:d8:d1:1a:31:3f:75:e1:b8:43:19:0f:
         2a:31:0a:d9:a4:c4:05:b7:d7:a1:fa:03:97:ba:58:b2:bb:c8:
         82:be:ec:02:c0:a6:cd:38:25:ba:f0:a0:7c:8c:57:bc:8a:54:
         8f:bb:a6:41:3d:5c:2e:d1:e8:6c:12:17:bc:cf:be:4a:32:10:
         06:81:58:63:d8:4f:e2:73:53:13:b3:d2:fd:e9:31:b0:90:30:
         7b:90:a7:13:c1:fc:88:10:75:35:45:fd:e5:d9:f6:8e:40:29:
         11:5e:ba:b2:fb:b4:6a:e2:a6:cc:89:eb:a6:9f:a7:1a:f8:a1:
         bb:4d:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:45 2025 by rpki-client