Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6871e91e-1792-3d01-9eba-a4b5aacc844e.roa
File:                     6871e91e-1792-3d01-9eba-a4b5aacc844e.roa (raw, json)
Hash identifier:          R2DRiPqfk+SAAJWIRAAjjlgmK4w8G+TkiYELXt9RRE4=
Subject key identifier:   C7:C4:22:FE:A9:1E:25:0B:1B:03:06:32:5B:5A:F4:78:E1:76:35:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0FA6C270E65C24F41BD4BE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6871e91e-1792-3d01-9eba-a4b5aacc844e.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        142.111.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c2:70:e6:5c:24:f4:1b:d4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=c50f2ef5-269f-4fa4-b305-b9a82e07c657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:8a:cc:2d:e7:7a:5c:fe:f0:0f:c2:61:f3:
                    f9:80:a1:41:72:4f:c1:8f:e1:42:29:59:df:94:ac:
                    d5:21:9e:f2:16:aa:ae:d3:2e:4f:d7:41:14:55:41:
                    29:26:67:8b:56:6c:e4:b4:0e:16:d8:ff:35:39:01:
                    c6:13:36:7f:ea:72:52:0d:e1:15:00:71:dd:bf:e2:
                    8d:e4:b8:68:d0:b2:40:98:f7:8e:db:79:79:62:83:
                    45:c4:15:76:12:b5:b7:78:95:ea:12:ba:c2:c4:dd:
                    e5:4f:ff:1b:c6:5d:26:ac:bb:c7:31:58:36:0b:e2:
                    8c:c6:23:da:ef:58:3f:7c:80:c6:93:d8:65:99:9d:
                    11:6e:72:f5:48:01:01:9a:76:58:f8:70:50:0f:d7:
                    9f:ed:c2:3a:17:e3:aa:f7:30:82:45:d5:63:a8:21:
                    82:81:a1:0c:ec:5f:01:71:06:83:70:10:93:4d:ee:
                    90:27:f7:29:e3:c2:45:03:fe:2a:84:96:f9:71:4c:
                    53:17:5e:72:b5:ce:bb:d6:cd:8a:6d:b6:1f:82:ab:
                    b8:1e:b4:57:fc:33:a4:4f:b2:d2:c8:df:1b:94:e0:
                    de:17:9d:d5:99:a5:b8:dc:3e:91:ae:b1:7e:4a:08:
                    eb:a8:f2:01:81:54:a1:27:9b:8c:94:a3:7b:3f:78:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C4:22:FE:A9:1E:25:0B:1B:03:06:32:5B:5A:F4:78:E1:76:35:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6871e91e-1792-3d01-9eba-a4b5aacc844e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:69:b4:d1:bf:6f:b4:b0:40:8e:08:d1:46:ee:2b:2a:31:36:
         d6:ed:63:b3:41:39:d2:69:58:e4:86:ab:7d:d2:a0:12:2f:05:
         f2:7a:1b:5b:3d:ce:a2:62:76:02:7a:e5:f2:c8:0f:ed:1f:81:
         12:25:6b:d4:ab:39:27:6f:b2:73:62:57:e9:cc:c1:5f:5c:14:
         45:ec:cd:7a:a4:0b:34:b9:34:f5:0c:26:df:10:28:21:13:46:
         c8:21:61:aa:71:3f:24:f7:e8:22:12:d6:1b:11:0c:54:80:96:
         3d:82:a0:55:20:e4:a1:7b:df:b3:6a:f0:3a:2f:02:63:da:7d:
         4a:90:2c:f1:99:30:01:b2:fb:8d:90:b0:d7:ea:f3:58:d8:b1:
         26:41:6e:ad:5e:d3:4c:af:84:c1:41:1e:5a:28:0b:5c:b4:2b:
         99:a6:d7:a9:53:8d:6b:b7:0d:e9:fe:2c:5c:d7:e0:ae:6b:da:
         a9:9d:5b:95:34:51:b5:d2:9b:7b:63:9d:0d:89:ae:74:6b:20:
         32:0d:99:2c:8f:13:dd:b4:d2:fa:5e:9e:d9:79:7a:58:96:ad:
         30:0f:56:44:3d:b2:b4:a4:9e:99:20:83:70:6c:5c:2e:13:cf:
         31:4a:12:9e:a8:9d:32:34:1c:10:21:f4:67:8c:3b:de:ae:9a:
         5e:81:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:43:01 2025 by rpki-client