Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58a1167b-5fae-3672-8e90-134b48611b97.roa
File:                     58a1167b-5fae-3672-8e90-134b48611b97.roa (raw, json)
Hash identifier:          l+UnSTt5KbaDMltGudSC1xbDdSJUtHC8XEO/KhaFLU8=
Subject key identifier:   90:07:C6:F0:B1:10:83:22:FF:92:6E:68:71:51:94:79:DF:4D:EA:AF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48A9D1FAB895977AF5AF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58a1167b-5fae-3672-8e90-134b48611b97.roa
Signing time:             Tue 30 Sep 2025 17:00:06 +0000
ROA not before:           Tue 30 Sep 2025 17:00:06 +0000
ROA not after:            Mon 29 Dec 2025 18:00:06 +0000
asID:                     7029
IP address blocks:        142.111.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:a9:d1:fa:b8:95:97:7a:f5:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:06 2025 GMT
            Not After : Dec 29 18:00:06 2025 GMT
        Subject: CN=a41c6a80-bf8b-4abd-a609-5da863c853be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:c2:f7:ce:9b:e9:f5:c3:ab:df:7b:5d:56:
                    f4:86:5e:e9:95:dc:f6:51:eb:30:50:0b:0b:54:3b:
                    fc:0b:36:d9:6d:b7:fc:a1:77:66:5c:ee:07:a7:dc:
                    1f:c8:fc:d8:04:75:6f:29:48:9f:e9:ad:20:a7:d5:
                    40:30:40:8d:03:80:5a:5c:d4:f5:2a:e4:a7:f6:8d:
                    96:21:69:73:3c:da:bb:4e:83:97:67:e4:59:4c:93:
                    a9:56:92:f7:78:58:7f:48:55:64:bc:dd:1e:30:db:
                    b7:f9:0f:ad:6f:94:29:a5:89:0f:7a:a0:a4:38:5b:
                    c1:ff:ba:4d:14:ba:04:a5:b6:28:60:9f:47:cf:d5:
                    e2:b7:eb:fd:66:32:27:01:2c:98:e1:4c:cc:f9:19:
                    61:48:b8:31:57:f8:3b:08:26:73:a3:8f:f3:7f:ce:
                    9e:45:7f:20:ef:8c:61:8c:25:78:56:6b:09:26:95:
                    d5:93:a5:fa:f4:3e:e6:f4:79:e9:4f:f9:bc:bc:2a:
                    c4:e8:06:f1:cb:a8:ca:f5:23:9a:da:dc:42:d4:4b:
                    9d:23:75:fc:e0:8d:d6:4f:63:26:99:77:87:ae:a6:
                    f0:a9:a6:e7:85:b3:67:8c:13:c5:53:01:bb:83:33:
                    9d:a5:dd:18:78:08:88:25:7e:fc:99:c5:a7:f1:b8:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:07:C6:F0:B1:10:83:22:FF:92:6E:68:71:51:94:79:DF:4D:EA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/58a1167b-5fae-3672-8e90-134b48611b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:91:7e:2f:7b:08:bb:16:10:a1:75:77:98:8b:14:c4:a8:
         66:2d:b4:3b:0d:a5:bb:87:34:78:9b:90:87:af:ee:ea:e9:3f:
         8b:e9:99:6e:80:f2:bf:27:39:ba:b9:b1:00:f4:50:b0:2d:05:
         42:34:fc:9a:3f:5b:81:70:93:bb:63:a9:bb:46:fe:67:36:0a:
         fb:18:8b:36:5e:e3:58:52:b2:4f:b2:d7:3d:49:44:d9:f1:e6:
         63:31:51:0e:c8:97:c9:f5:3e:48:6f:05:81:a2:ec:7a:48:73:
         6f:46:84:2b:89:cc:f5:32:77:7f:43:e5:5f:7e:7b:7b:00:29:
         d3:c2:ef:d5:2a:0f:ee:64:d7:89:c2:0b:c7:3d:a8:ce:59:56:
         cc:3a:ab:58:b5:62:41:3f:f8:8d:91:68:a6:45:e3:94:ff:8a:
         fd:db:4a:96:27:71:b1:13:d1:92:0a:b8:6e:98:ee:99:fe:3a:
         49:85:a4:bc:67:23:d0:7b:4d:35:05:b3:3f:da:0e:64:8c:ee:
         51:a5:a3:ca:81:c0:1c:fd:e8:74:7a:d9:2e:76:cb:29:fa:be:
         84:66:64:d9:0f:5a:d9:82:3e:81:46:da:bf:ae:68:ba:b1:a9:
         16:d2:06:1c:77:84:db:cb:0b:ed:f2:33:fe:ea:80:a3:36:c2:
         f4:05:37:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:40:59 2025 by rpki-client