Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6813c21a-2976-3224-a1ec-eb570bbe5673.roa
File:                     6813c21a-2976-3224-a1ec-eb570bbe5673.roa (raw, json)
Hash identifier:          j93nLTt+a+Jsbl5NdpNrPJr9M4fFemguewUtQ+vwVvI=
Subject key identifier:   C7:EF:CB:74:89:F4:06:CD:03:6E:DE:B2:FE:93:21:D7:43:17:4D:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D739B437CF4BFA74C02D40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6813c21a-2976-3224-a1ec-eb570bbe5673.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     3257
IP address blocks:        142.111.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:39:b4:37:cf:4b:fa:74:c0:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=10f04c13-3e7e-4c91-8120-13629f766153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:50:3b:b5:48:7b:f2:d9:15:17:ac:79:1c:
                    27:72:52:a6:d2:9d:da:48:5d:28:e0:8f:70:85:93:
                    bd:75:37:24:62:8d:73:7b:b9:40:a8:46:d4:d5:48:
                    c2:da:78:99:c0:81:5a:4f:04:7a:c2:2a:17:3a:1d:
                    4b:84:fa:de:4d:39:06:cf:7f:b8:25:f9:e2:17:9b:
                    fb:08:a7:64:91:b3:31:12:9d:83:1f:c5:ae:9b:80:
                    ea:ce:91:5f:ec:00:13:0a:5f:09:48:7e:ca:8f:e7:
                    76:f3:21:63:87:65:ae:3f:13:59:46:15:13:28:be:
                    fd:6b:59:63:85:cf:4a:f7:6d:8c:7f:01:70:51:16:
                    71:80:f6:14:b5:77:c1:b8:55:b7:d6:d4:00:1c:1d:
                    9d:91:32:fc:57:cb:1b:4c:ae:ca:71:7f:9a:fd:fa:
                    ae:13:f5:2b:45:8f:8a:dc:90:b2:52:da:59:80:12:
                    28:9b:ee:7b:72:dd:e7:64:91:46:8b:32:d2:89:52:
                    a1:95:12:bf:17:ca:82:e8:87:91:64:67:af:e7:7a:
                    55:c3:8c:7c:64:37:5e:54:7f:32:e7:22:68:cd:d5:
                    8f:e8:90:fe:ee:65:f6:70:de:b8:6c:6c:90:48:e2:
                    ed:d5:6b:e1:6b:3f:97:7c:5c:5a:87:35:4b:fe:1d:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EF:CB:74:89:F4:06:CD:03:6E:DE:B2:FE:93:21:D7:43:17:4D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6813c21a-2976-3224-a1ec-eb570bbe5673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:f0:30:a7:a6:fc:c0:94:d2:67:61:1e:ae:ef:ae:54:5d:
         e4:29:eb:e8:2f:48:66:f5:e7:64:c4:8b:b0:47:3d:4d:d0:20:
         ad:cc:12:07:f0:44:33:50:bd:6d:01:74:92:34:36:c0:a8:99:
         8d:80:3f:ae:f3:c0:05:c2:ac:06:aa:2d:62:c3:93:94:ee:c0:
         6f:a1:b1:8b:c4:b9:88:e2:2c:e2:2e:dc:5b:3a:c0:7e:bd:e0:
         2a:d5:d1:94:4d:20:05:6a:67:3b:87:f6:0b:fe:d8:32:32:d7:
         57:57:29:b4:80:9e:36:96:dd:b5:8d:ad:6e:f4:17:0f:e1:45:
         c7:9d:1c:19:be:7f:b4:31:2b:a4:9c:0a:2c:fd:01:ce:97:28:
         59:4c:56:a6:d1:ac:a5:54:47:53:52:c0:4a:a2:3b:ea:54:f3:
         62:1e:5e:1a:57:e7:28:01:b9:9c:78:23:0a:b8:83:31:be:d8:
         d3:ce:41:90:3d:62:db:96:ff:06:48:df:fa:c0:2d:2c:e7:0d:
         d3:25:a4:67:f8:49:78:90:ae:3a:f0:62:3f:89:a2:84:6d:b2:
         17:c7:99:0e:52:ce:69:61:41:76:51:3b:aa:f3:4b:fb:53:56:
         1f:4f:22:b3:5b:48:b6:92:72:11:57:4d:fe:ce:63:1b:e9:4d:
         05:c9:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:03 2025 by rpki-client