Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4422722a-c500-31f4-8bc6-c8cecaf96808.roa
File:                     4422722a-c500-31f4-8bc6-c8cecaf96808.roa (raw, json)
Hash identifier:          MMEWflbMNK0CorM8Hs+6OyW7pYtYvRG7Pu+aTy9z49w=
Subject key identifier:   90:07:47:96:40:EC:86:F9:F1:6A:DB:7A:77:98:59:5F:70:DC:5E:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772F20CEB73B61623057E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4422722a-c500-31f4-8bc6-c8cecaf96808.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        142.111.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2f:20:ce:b7:3b:61:62:30:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=04a7131c-9018-45a9-a1d6-ad1b3e58c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:34:3e:d3:1d:85:e5:6b:3f:5a:c7:d5:2e:
                    34:06:dd:f0:7a:fc:47:4a:5b:ca:a1:4a:d3:c1:71:
                    60:7d:1c:7f:8f:54:c1:cd:c3:88:9d:fd:d9:b4:00:
                    3b:89:fd:d8:bf:a9:ab:9d:c4:f6:3a:e1:02:c9:26:
                    01:2a:b3:0e:93:ab:ca:98:cc:d1:3c:f4:03:43:8b:
                    8f:12:6a:85:72:a9:2c:9b:7a:27:df:7d:c1:96:3e:
                    dc:30:20:e6:02:65:ad:91:89:36:7a:50:98:01:81:
                    b2:50:34:23:86:fb:6d:57:53:fe:50:e4:7c:81:c1:
                    9a:5e:46:63:a9:bd:49:e2:9f:ff:e7:21:9a:36:62:
                    e2:55:bc:75:b5:a7:70:dc:e6:86:6f:d9:c3:8b:6a:
                    c5:ca:76:55:17:18:12:ac:bb:a3:61:e9:72:dc:40:
                    5b:4d:35:f3:22:b8:c8:74:e2:60:42:c7:a6:70:ed:
                    b2:ca:37:bd:74:cb:77:3b:fe:dc:5a:64:91:d4:b2:
                    63:4f:90:e0:d3:40:4c:d4:47:87:1d:87:30:f5:65:
                    af:51:3e:8e:21:ee:1d:c1:73:ed:dc:e1:ed:86:cb:
                    21:c1:21:77:1d:10:39:d0:55:4b:ce:ae:e7:36:af:
                    9a:fa:de:98:04:df:bf:5e:f0:a8:c4:d5:8f:06:c6:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:07:47:96:40:EC:86:F9:F1:6A:DB:7A:77:98:59:5F:70:DC:5E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4422722a-c500-31f4-8bc6-c8cecaf96808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:24:0c:2d:2d:35:9f:3f:41:69:c2:52:5e:9e:0b:91:fd:da:
         58:26:07:30:e1:4f:32:b2:f7:57:2e:d6:31:01:38:0a:4f:ba:
         17:81:eb:9d:75:8e:1b:cc:ae:a0:14:b7:56:f2:ed:f7:ee:ee:
         dc:db:53:12:87:62:2c:83:36:a3:27:d5:5b:1c:67:f6:bc:ad:
         cc:8b:fa:d7:9a:ce:bd:32:8b:91:a6:2e:4a:d3:0e:da:14:2c:
         68:92:ef:ae:95:f6:fe:68:dd:c4:20:fb:f6:1f:f5:fa:43:a5:
         cf:ff:d7:ed:da:e6:c6:30:25:5e:2a:27:0a:2e:64:9a:85:94:
         f2:e2:87:ab:f3:16:2d:82:93:e5:97:16:94:cc:dc:31:4c:a8:
         49:f8:f6:e5:b9:91:2a:74:09:dc:e7:b7:2e:4b:16:89:75:7e:
         cb:5d:22:7f:8f:d0:58:bc:e0:46:0f:cc:54:b4:a2:7c:ca:45:
         a0:ff:7e:54:36:b3:b3:bd:93:3b:6a:7b:15:30:83:be:83:65:
         47:3e:34:e0:80:d6:f8:63:c0:f6:f8:f8:9d:5c:8d:0d:2f:9a:
         16:84:d3:9b:50:78:b9:01:53:6d:8a:32:e8:63:5a:01:a5:d5:
         de:76:b8:e2:99:f2:e6:8f:17:0f:ed:99:e0:b7:17:63:31:ee:
         e3:8c:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:02 2025 by rpki-client