Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/56e24333-9979-3f57-8367-5f2983d3f469.roa
File:                     56e24333-9979-3f57-8367-5f2983d3f469.roa (raw, json)
Hash identifier:          7qJxFr6r2/uTVOhSsBnbq4jkeEyxfrAc5zA4epIMnso=
Subject key identifier:   6B:80:BA:85:12:9F:6F:76:D2:D7:2A:28:07:E6:47:1D:5F:8C:F7:B3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAB1E2F7B9106F001F9C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/56e24333-9979-3f57-8367-5f2983d3f469.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        142.111.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ab:1e:2f:7b:91:06:f0:01:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=e96b3b32-7331-49d4-902e-35db7d841306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:59:bd:a4:f8:a9:87:05:ef:98:95:6a:f4:
                    e1:13:74:6b:15:9d:20:11:02:5a:92:5c:39:d7:b7:
                    b8:a7:36:f4:18:ab:7c:2f:2d:bc:ac:a6:2a:d2:2b:
                    e2:f5:86:54:8e:e1:dd:5e:0b:6c:35:58:a8:ba:f9:
                    e0:3c:df:9f:22:52:11:e6:e6:72:36:22:07:43:60:
                    bc:25:6b:d0:1f:ca:69:c9:9a:bb:35:ec:93:5c:fb:
                    b5:9b:48:a6:29:64:f4:26:5e:aa:d6:e3:27:12:a5:
                    49:c1:ea:14:cb:03:5a:78:d1:d4:29:96:e4:00:a3:
                    d0:96:5f:fd:00:2b:7c:8c:c0:4d:25:da:64:0a:09:
                    d7:3e:d4:bb:49:23:5b:01:15:1b:c2:e0:40:c9:9b:
                    83:f4:a5:67:5e:4b:04:02:56:0e:43:73:ab:07:db:
                    30:1a:9a:16:9d:7b:24:03:45:96:00:de:22:40:27:
                    82:77:42:f8:0d:2d:9d:4a:44:01:19:a5:d3:f0:91:
                    e7:53:f4:d6:f9:63:9f:4a:85:6c:29:9d:a0:ed:5d:
                    5d:c5:90:00:4d:30:64:07:37:6f:d4:e8:9c:e8:ee:
                    85:73:30:4a:00:e3:e7:bc:e1:1d:6a:79:6a:3a:75:
                    a0:51:cc:9a:3e:b8:78:11:76:9a:65:f7:33:97:0d:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:BA:85:12:9F:6F:76:D2:D7:2A:28:07:E6:47:1D:5F:8C:F7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/56e24333-9979-3f57-8367-5f2983d3f469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:73:c7:44:25:e5:c0:e2:c2:6f:05:98:e1:12:95:c3:aa:d8:
         d0:c3:74:ce:ac:13:60:85:e3:e9:cc:3c:c5:19:1d:c1:11:ee:
         e4:e0:aa:47:fa:1e:e2:09:f0:29:1b:3c:b2:96:d6:51:34:18:
         d4:11:8c:07:27:cb:fe:7b:a8:98:b5:98:31:88:c7:0b:ca:1c:
         b3:bb:6c:52:37:b1:6f:0c:19:17:04:38:b7:8e:d9:9e:11:5e:
         32:6d:1c:dc:a3:fd:e3:04:04:6e:74:2d:1c:f4:f3:fa:f5:27:
         8a:37:d2:86:84:b9:d8:1f:ef:0d:b2:f5:6e:6c:ce:27:d4:01:
         4d:46:20:6f:2e:c2:f0:3f:f9:90:08:67:fb:cf:0c:cc:61:ad:
         a3:37:eb:06:21:66:0d:c3:59:16:73:68:ac:c0:51:06:b4:36:
         84:d6:38:ad:db:8b:4b:11:87:a8:c3:88:ab:e4:3f:c8:f1:57:
         13:6e:7f:d2:81:9c:b3:94:85:b3:9a:bd:1c:fc:0f:92:90:85:
         a0:da:45:c4:e9:0c:74:19:da:14:ab:b7:f6:ef:6d:d0:64:c8:
         da:a9:8a:1c:ea:4b:21:31:c1:05:32:8e:1a:61:8d:23:f1:67:
         f0:e8:43:73:70:66:b5:d2:24:81:23:50:db:11:f2:c1:8b:99:
         d3:b2:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:49:29 2025 by rpki-client