Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54a73366-cf5a-3570-bff7-50465d8e026c.roa
File:                     54a73366-cf5a-3570-bff7-50465d8e026c.roa (raw, json)
Hash identifier:          1vVJGkaCcPv4xTIIEUFpqNSt2ZUk52wGIwsIwKQH4vU=
Subject key identifier:   A2:F6:4A:D4:10:99:30:3A:A7:A6:C9:A7:2C:D3:3F:02:E5:1F:D6:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B715CD92BBDADB2BEDEA20B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54a73366-cf5a-3570-bff7-50465d8e026c.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     212238
IP address blocks:        142.111.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:d9:2b:bd:ad:b2:be:de:a2:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=ea65de16-21da-4b75-8d07-e27a04d1b07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:82:25:a6:cb:a1:33:fd:72:d6:60:c2:35:
                    4a:13:0d:8b:32:c0:a7:ba:b4:77:2b:8a:e4:77:81:
                    0c:71:b2:43:02:d5:bc:e4:1f:56:1f:c8:8e:82:87:
                    5c:68:7a:f6:b4:c4:85:70:86:92:7d:4f:9c:8f:9b:
                    f0:b4:a0:b3:70:5c:a7:b5:be:c3:a1:39:53:f2:09:
                    ea:39:58:07:67:ad:ac:f8:b4:19:bb:5e:ff:7b:29:
                    bc:04:c6:6a:4c:6c:9c:e9:c0:e6:02:f6:0d:cb:9e:
                    b1:c8:a7:32:4e:f3:95:b6:92:22:e5:59:60:7c:30:
                    e9:f8:32:f4:db:a1:56:bf:ec:18:1d:10:b6:ea:94:
                    d4:45:f1:c3:b5:38:5f:d5:66:08:f8:43:a0:5a:63:
                    d4:cc:2b:48:74:f3:22:77:f6:d1:d0:a2:22:63:57:
                    3d:e9:a7:ab:5e:47:06:6e:22:93:4a:68:55:e8:99:
                    d4:c5:c5:89:1c:19:9e:74:54:be:5b:0a:dc:47:05:
                    50:b1:e9:50:de:3b:74:f9:31:21:36:4b:eb:75:8b:
                    c6:71:b3:b3:38:c6:e7:65:0d:b4:aa:21:6a:50:cb:
                    41:1e:88:39:3e:56:07:d2:4e:31:81:c3:b6:b4:12:
                    05:06:ff:a0:b6:e8:90:0f:f1:fe:23:f0:e5:a8:cd:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:4A:D4:10:99:30:3A:A7:A6:C9:A7:2C:D3:3F:02:E5:1F:D6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/54a73366-cf5a-3570-bff7-50465d8e026c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:29:d1:1b:67:04:44:5d:35:66:ae:b6:09:25:e5:05:dc:
         0f:19:34:d0:74:d6:e9:9a:b0:3b:80:50:1a:0a:9b:26:20:2c:
         39:5c:f8:07:9d:61:da:84:e2:ec:97:bc:6b:95:84:71:13:66:
         ad:82:50:35:d4:75:a6:6d:a9:f1:29:4d:26:60:07:95:f7:2a:
         3e:87:24:ea:48:40:35:5c:a9:28:03:34:9f:db:dc:ca:25:b1:
         c7:9c:be:34:a5:c4:1c:6a:89:7a:18:6e:f9:6e:70:7b:ec:24:
         8f:50:7c:05:03:b8:49:9b:1d:0e:0f:12:7b:9f:07:10:79:54:
         32:94:3a:ff:92:64:b4:90:fe:95:3f:56:3f:10:f0:70:9b:8f:
         39:c0:e2:d6:4d:12:7a:98:b2:b0:04:52:08:a0:85:a2:2e:3c:
         e6:2a:6a:3e:5c:07:f7:2f:7b:ec:98:c6:05:b1:cd:85:46:4c:
         b8:af:08:f4:e5:07:0b:54:bc:15:63:19:a0:05:93:9e:6a:61:
         fb:19:0d:c5:a5:41:49:8e:5e:28:f5:4f:1f:eb:00:4f:97:9e:
         ac:84:06:d7:bd:2b:02:7d:e7:b9:08:14:2c:ef:57:c0:a3:7b:
         df:2e:88:26:ff:47:74:40:50:f6:b7:fa:71:4f:1d:22:9f:88:
         b1:af:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:52 2025 by rpki-client