Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/411ce88c-f9ad-3805-9b1c-4922488b2147.roa
File:                     411ce88c-f9ad-3805-9b1c-4922488b2147.roa (raw, json)
Hash identifier:          r9KbdQrSKA/DvLJFtd5ccbMTizjTWVYYOhuaT6CzbpM=
Subject key identifier:   29:AF:46:67:B7:3F:6E:D3:62:F1:81:33:2E:91:E3:F5:AA:36:85:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75E31A57C17CE50425000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/411ce88c-f9ad-3805-9b1c-4922488b2147.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        142.111.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5e:31:a5:7c:17:ce:50:42:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=3c80c39e-c601-48f8-b28a-285d8c300f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:7b:a3:f4:a3:72:3f:a2:ee:71:2e:34:46:
                    59:91:ac:35:c4:1b:4f:5c:ad:78:af:ca:ef:39:ea:
                    75:88:db:80:53:c2:b4:d3:cb:2e:46:bc:32:e9:02:
                    a2:0c:b2:d3:b7:8c:09:45:cb:77:20:a4:39:7e:3f:
                    57:3a:bb:ae:ec:91:cb:48:71:2b:c7:69:b5:cc:7b:
                    8b:11:9f:a1:ab:43:52:fe:81:7b:5f:1b:a3:dd:5a:
                    bf:26:a0:64:9a:b0:cc:88:a5:82:ad:d0:27:08:5b:
                    16:11:fa:31:b3:39:09:20:59:8d:c6:c4:b2:c5:14:
                    b6:26:d5:87:da:8a:28:37:fe:b3:37:85:27:c6:b8:
                    6d:7d:19:f8:39:ba:67:4d:65:09:ca:b2:c1:5b:60:
                    39:cb:9f:8a:4b:84:51:c9:db:36:01:55:53:b8:3e:
                    fd:67:0e:6a:94:56:b0:29:46:7a:27:e7:8b:df:a2:
                    1d:38:24:08:57:b9:03:d5:84:57:1f:88:11:74:c3:
                    08:5c:48:41:c0:ba:e0:26:59:5c:fb:71:ff:6f:97:
                    13:39:cc:c0:a3:62:29:87:71:78:65:f5:24:00:8a:
                    d3:a5:22:e6:9b:67:dd:db:90:72:d9:ac:d2:b3:3f:
                    63:92:10:a7:b0:0e:fb:c0:11:1d:b0:fc:04:69:c9:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:46:67:B7:3F:6E:D3:62:F1:81:33:2E:91:E3:F5:AA:36:85:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/411ce88c-f9ad-3805-9b1c-4922488b2147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:05:67:51:a2:f7:aa:6c:04:39:42:98:3b:df:a4:ae:b3:
         f2:5f:93:07:13:36:c8:e3:dd:33:f0:d0:fd:c0:d1:4c:d4:94:
         e4:25:f7:bd:27:6f:ec:d1:8e:1a:7a:6e:eb:f4:a4:2c:f7:37:
         61:6b:52:8e:6f:7d:d0:ab:2c:a7:19:15:f8:9e:97:5b:df:66:
         d0:61:e1:ae:98:15:f2:df:81:89:49:bf:28:4a:f2:c3:97:8f:
         ce:69:b3:6e:38:47:1d:96:57:0d:4f:b8:58:21:7f:58:09:df:
         bd:28:61:cc:a0:3b:9d:22:fc:68:85:7c:15:53:89:c0:6a:46:
         43:ca:b7:34:de:f4:f4:43:bd:63:7c:8e:5e:cf:18:f7:34:a0:
         cd:8b:cf:5a:e1:e7:8b:80:13:68:33:d5:9b:6b:d3:bf:73:37:
         3b:2b:e4:02:b1:6a:52:fe:54:b2:dd:ea:93:0c:b3:e8:03:16:
         7e:39:54:5a:1a:7e:22:02:06:f7:5a:a0:83:7f:4b:54:79:38:
         c8:a9:fd:63:fe:02:a0:8d:d8:6c:d1:5c:71:19:19:28:fe:3f:
         8c:28:ea:1f:a6:43:2d:33:63:d8:79:d4:02:8a:3f:95:dc:77:
         5a:bc:6b:c0:ee:d2:1c:92:1f:d9:ee:91:44:97:ca:6e:9b:1a:
         68:17:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:49:40 2025 by rpki-client