Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18f45731-2e63-381e-8441-d496c9b4f77b.roa
File:                     18f45731-2e63-381e-8441-d496c9b4f77b.roa (raw, json)
Hash identifier:          e4HMoyyRCOl54HnYjWCiUndL6HkiuxlKp93qrgaxG/Q=
Subject key identifier:   8D:3C:02:52:60:B5:94:11:D6:FC:8B:F4:13:6C:F7:EF:B4:30:32:C4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75D5AFD4DB0298AEAD980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18f45731-2e63-381e-8441-d496c9b4f77b.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        142.111.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5d:5a:fd:4d:b0:29:8a:ea:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=50e9dee5-e771-4e14-85c6-61f1322d7259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:23:01:6c:a1:75:52:b4:b9:92:a7:93:59:
                    77:a9:ce:f9:2f:ba:0a:a5:cf:6d:0d:37:c5:4e:c5:
                    37:b4:94:5b:3f:54:15:39:af:a9:9a:7b:b5:2f:bc:
                    2e:7f:06:ab:dc:2f:84:4e:ce:5b:0c:f5:af:16:35:
                    d3:7a:dd:de:a0:df:dd:d6:ac:64:1c:38:2e:f5:82:
                    1a:8b:36:b3:03:fc:ad:f4:c0:9b:64:ae:6d:27:d4:
                    ca:bd:6c:83:7d:ee:4a:63:0f:0b:aa:9e:d6:f7:72:
                    6f:8b:7c:94:6a:ce:96:9e:15:5a:c1:19:8f:11:5d:
                    4f:99:a6:a1:10:e5:84:82:e9:23:5e:3b:db:81:60:
                    93:93:6e:a2:97:4f:15:7a:2c:cb:2c:9b:7d:68:e5:
                    e1:5a:2a:52:6a:18:34:bb:5b:54:31:82:ae:0f:9e:
                    15:a9:b8:f9:b5:62:01:cd:6c:28:14:f5:3d:00:cb:
                    28:0e:2c:d3:84:ff:ca:28:f8:36:df:9f:1e:ef:2e:
                    73:0a:fa:3b:26:64:54:dc:81:23:da:39:08:19:a5:
                    ca:c0:5d:90:47:b0:f4:6d:3b:ed:8e:fa:b7:4a:c9:
                    6d:31:f9:52:9e:a8:26:6c:59:96:93:d8:1c:85:79:
                    ae:e0:db:6c:4f:85:db:ae:08:22:e9:fe:31:5e:8a:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:02:52:60:B5:94:11:D6:FC:8B:F4:13:6C:F7:EF:B4:30:32:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/18f45731-2e63-381e-8441-d496c9b4f77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:26:86:e7:11:3d:01:36:6f:0b:fd:ad:75:74:2a:46:da:
         23:61:2b:42:f4:94:b5:39:39:8b:54:58:87:c1:1e:59:f5:0d:
         6e:36:71:bf:c7:b9:55:89:e7:ac:fa:f5:28:74:65:c6:b8:7b:
         ec:e1:5e:30:a0:34:0a:97:29:87:61:cf:a2:18:03:ce:a3:eb:
         4d:aa:04:ca:2b:e8:bd:df:4d:e6:f2:70:4e:13:fa:b3:29:ec:
         0a:ff:94:0b:e3:92:d6:56:1a:af:88:72:59:0a:df:1b:5e:17:
         5d:56:87:1a:54:ee:30:56:29:76:c6:43:b8:30:6e:73:3a:8c:
         d7:3e:4f:63:35:61:4e:f7:e4:69:cf:77:e8:da:f7:1d:e9:b5:
         d6:48:ad:48:6a:71:58:e1:eb:ba:c9:5b:59:0f:46:54:35:9f:
         a7:f7:fe:a1:3e:bb:9b:a3:ae:26:4d:c2:66:2c:b4:a3:61:d4:
         d6:83:cb:ae:a6:6b:d6:5e:14:8f:41:a6:86:54:b0:3c:ce:5e:
         a4:ed:26:d0:55:c4:c4:36:99:03:53:75:57:19:4c:3d:10:cd:
         d6:d3:d1:12:a6:a7:1d:48:dd:d8:4e:69:f7:ca:91:1b:77:d5:
         de:87:91:c8:fc:1a:49:9f:0b:1b:2e:6a:6c:fb:a1:69:fe:38:
         4a:e5:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:20 2025 by rpki-client