Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33f7d86c-61ee-37a0-a430-c3c5a9657334.roa
File:                     33f7d86c-61ee-37a0-a430-c3c5a9657334.roa (raw, json)
Hash identifier:          R5e44qlmEGlNYvgIpqv4dnAHC/Nx/3pcgnBwkk8fzJg=
Subject key identifier:   66:1D:28:AA:61:E1:6B:0E:3E:16:B3:14:D7:BE:5A:84:D7:9E:CB:25
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CACE727A4C936F5EBFD00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33f7d86c-61ee-37a0-a430-c3c5a9657334.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        142.111.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ac:e7:27:a4:c9:36:f5:eb:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=8f133d31-657d-4b36-a5e4-6f07f1bd3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:64:52:6d:5b:e7:82:5a:6b:5b:9f:10:e5:
                    28:b2:8e:7d:97:23:e3:17:ea:55:c5:38:d1:70:ba:
                    f9:46:a2:29:a1:00:d0:7c:0a:6f:84:42:28:8c:f7:
                    e4:30:20:3c:76:90:9c:fe:57:00:79:4b:6c:85:b8:
                    bf:03:bc:cd:b9:7c:39:5e:58:af:09:57:5b:5b:0f:
                    82:b9:e8:a8:d0:fc:75:e9:b3:03:22:fe:16:ee:eb:
                    90:a0:b2:cc:0b:9b:ee:41:f7:73:bd:8d:0b:63:9b:
                    8e:4d:c4:bd:1c:df:f5:60:e5:72:e3:d4:16:ab:e2:
                    bf:72:d1:a9:86:d7:63:74:16:b9:d6:5b:d7:e9:1b:
                    94:b7:3f:38:1a:52:cc:cd:ba:ed:3c:da:ef:27:96:
                    2e:dc:ec:af:0b:25:6f:65:6e:ed:7f:da:92:5c:eb:
                    11:1e:71:37:7b:7d:7e:f4:36:1a:67:2d:0f:9e:22:
                    00:ad:96:42:f5:0f:ca:2b:f4:ba:37:96:12:fa:86:
                    b9:11:0f:12:be:37:29:0c:5b:4e:9e:37:48:88:81:
                    17:e5:0c:d6:79:61:07:ae:5c:05:77:e1:ff:ca:0c:
                    54:89:54:38:3a:18:c3:65:f8:e2:c8:a0:15:52:98:
                    e6:e1:4d:91:d2:7a:23:e4:c0:07:3b:fa:f2:a7:7b:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:28:AA:61:E1:6B:0E:3E:16:B3:14:D7:BE:5A:84:D7:9E:CB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33f7d86c-61ee-37a0-a430-c3c5a9657334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:63:61:41:60:c3:f0:73:3c:04:75:56:36:bf:32:09:2a:44:
         b3:51:b6:e3:6b:15:81:25:37:88:51:59:d1:72:c0:b7:35:1c:
         50:20:04:b9:b8:2f:36:97:09:42:51:b3:7a:00:ce:4e:28:5d:
         4e:46:d7:de:9f:a3:6d:e6:9a:b6:fa:ff:42:86:de:73:df:93:
         e5:d4:33:6b:5e:7b:3a:20:da:01:a7:89:3e:9f:07:58:d2:4b:
         db:49:cd:bc:2a:e8:a3:0a:c5:ac:17:8f:cc:d1:9d:52:ff:e8:
         c2:f0:1b:3c:a2:a8:dc:e8:d7:c1:99:06:60:de:9e:b3:89:0e:
         22:27:dd:f2:d7:b9:65:3c:14:8d:51:08:b7:5b:3c:4b:dc:e1:
         e7:a0:16:54:90:d9:e5:ca:b5:9d:9a:97:34:3f:15:22:8f:7a:
         70:d9:60:d8:c5:e7:51:f8:2e:0e:20:b4:af:10:7f:e2:e5:83:
         95:6b:b0:a5:ac:41:d2:25:8c:39:aa:81:19:e1:cc:a9:ff:73:
         21:a3:af:19:73:7a:1d:d5:61:a7:0c:92:b4:c7:bd:7c:c4:6f:
         4f:eb:b8:ef:f7:53:79:e5:ea:0a:70:cf:98:d5:dc:5f:e1:c0:
         8f:ef:36:dc:38:6e:aa:05:b5:6e:4d:34:09:cd:4e:c5:ca:a4:
         8a:f6:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:19 2025 by rpki-client