Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa
File:                     7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa (raw, json)
Hash identifier:          ukE/0s0mRK57fNWK2zWPa0K4lyPnN2Q1GncW/TtInhY=
Subject key identifier:   B2:FE:0B:5F:60:A8:24:48:A8:16:31:AC:22:24:53:BD:8C:2E:65:2C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B3557074E247E0858B8FE46A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        142.111.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:07:4e:24:7e:08:58:b8:fe:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=a71696c0-7611-4af3-b053-cb1a034b776e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:7d:56:73:d6:5a:b0:88:80:1e:92:84:01:
                    cb:6d:56:c8:ab:67:0e:15:97:73:61:c4:f6:51:c5:
                    89:88:84:e3:c1:ac:10:6d:37:93:38:72:f3:ac:20:
                    29:69:46:9f:2c:e8:6d:ae:cc:0a:d7:ad:4e:19:7a:
                    9b:e0:5b:57:e7:32:9b:62:99:2a:54:37:05:24:06:
                    77:57:8b:a1:95:46:3c:4a:5b:02:d1:79:aa:2d:63:
                    c1:70:36:2a:19:8d:09:a5:e7:ab:26:9a:21:c0:7a:
                    3a:c0:60:6f:8e:7a:62:61:18:dc:45:02:4b:d1:f9:
                    3e:c5:fd:ee:4a:9f:e0:23:30:03:12:77:d1:a1:50:
                    fb:15:32:c3:43:31:5a:65:b5:bf:74:ed:f8:65:d7:
                    16:58:ae:27:17:18:7c:7e:d3:8a:b7:ae:90:26:fc:
                    ef:03:f2:f4:f7:f8:70:9c:3b:85:7c:d5:b3:1f:14:
                    e5:17:87:97:7a:6c:f4:78:b7:47:fe:8b:a4:40:b1:
                    7e:6f:b3:8c:92:99:0c:65:b5:7b:ae:ec:ba:94:b0:
                    84:2e:a1:9e:8e:b8:49:d9:da:de:7b:b0:a2:a1:2a:
                    9f:89:04:b3:3c:1f:c5:2d:50:05:42:98:9a:5c:01:
                    51:4d:20:4e:90:1a:3c:b6:a5:71:43:f6:0c:e7:af:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:0B:5F:60:A8:24:48:A8:16:31:AC:22:24:53:BD:8C:2E:65:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:6a:b8:7d:eb:dd:44:3a:1f:30:ff:fd:30:51:ee:43:07:
         14:9c:74:e9:f6:68:b7:ac:6b:9d:78:4e:a0:65:8d:0c:29:7d:
         71:da:b0:29:8a:29:39:71:79:72:5a:ff:36:4e:90:0f:4e:82:
         f2:60:ec:45:01:2e:25:f2:e9:80:3f:cf:72:ba:7f:37:6a:de:
         d4:9c:9b:e2:89:a1:60:14:ad:8c:d2:9b:5c:60:22:45:a0:13:
         2e:9f:bf:4b:9d:3f:17:b9:e2:87:0a:48:b8:cc:41:4f:01:63:
         be:ae:92:ea:38:ba:5a:fa:ce:99:e9:34:af:86:47:a0:be:b6:
         2d:20:96:5d:c9:39:4a:1d:93:0d:d8:80:39:36:51:35:fc:65:
         4f:a5:a6:63:ad:57:94:fd:9a:51:51:41:c8:54:60:26:3a:b2:
         41:c6:59:83:46:7a:3f:d0:2e:3d:76:82:84:61:5c:29:c5:9c:
         1e:fe:0d:39:7b:bd:58:77:ef:9a:96:24:c6:64:de:a7:de:fd:
         a4:67:9a:90:5c:8f:bc:dd:c5:6b:a8:56:6e:aa:61:72:73:df:
         1c:65:1d:2e:76:b7:83:14:00:6c:2e:63:f5:57:4b:d6:8e:52:
         32:b5:10:c9:24:5e:35:28:75:fc:7c:59:b1:30:ce:41:f0:5a:
         b1:24:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:16 2025 by rpki-client