Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87947a3c-0f93-35f9-be23-fd095ce348a6.roa
File:                     87947a3c-0f93-35f9-be23-fd095ce348a6.roa (raw, json)
Hash identifier:          Q4soNB8TeN+ArYR5asnIQ/ZjsUUk07eOpAzEFNGOvgY=
Subject key identifier:   C8:C0:B5:43:98:F3:CE:E0:87:83:7B:7F:32:25:2B:26:B9:26:53:AE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0FA6C239A3B1E321ECA12100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87947a3c-0f93-35f9-be23-fd095ce348a6.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        142.111.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c2:39:a3:b1:e3:21:ec:a1:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=2fb11f90-6157-445f-997c-31325a3f6b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:d7:18:78:25:0b:37:51:14:c8:dc:8b:11:
                    fd:9e:79:24:bb:57:a4:8c:72:f8:26:94:e2:53:df:
                    28:30:83:b4:a6:73:9c:c0:5a:de:f6:67:59:87:79:
                    1d:e0:de:a3:46:76:b3:9b:9e:57:d7:28:27:9d:0b:
                    20:2f:67:f9:c7:6f:59:a2:3d:ab:3d:02:dc:24:3a:
                    ac:93:64:b7:a4:4b:97:e9:0b:bb:00:60:d5:a9:7f:
                    cc:73:a4:f6:9b:34:f8:71:53:be:ee:92:1e:1c:e3:
                    c4:28:29:1a:f9:25:37:49:c6:0f:4e:84:12:58:fb:
                    8c:55:0a:1b:6a:8d:36:ea:12:d0:2a:d2:31:f9:95:
                    d9:76:3d:30:4f:1e:bf:02:f6:06:2f:c5:19:e6:1a:
                    ca:4f:92:bd:ab:29:df:c1:f9:fe:60:d3:b8:bc:41:
                    78:3c:ae:35:7d:4f:d7:1a:ed:7c:c9:91:7a:52:de:
                    db:1e:c5:2c:6a:34:4e:e9:10:07:e1:11:c5:3f:84:
                    1c:c1:6e:f1:56:9c:9f:a1:f5:29:ed:f9:48:2a:c1:
                    3b:dd:8b:00:43:e0:20:89:02:1e:39:e7:aa:9e:5c:
                    b5:05:b5:6e:a2:4f:9b:1f:e7:74:b9:90:b4:03:97:
                    5d:bc:82:82:56:14:12:31:16:34:e9:52:4b:2b:e1:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C0:B5:43:98:F3:CE:E0:87:83:7B:7F:32:25:2B:26:B9:26:53:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87947a3c-0f93-35f9-be23-fd095ce348a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:40:59:3c:e3:d8:86:60:67:a1:cc:6f:b6:14:eb:80:03:
         dd:35:23:a5:1d:6a:69:13:9d:ca:15:e1:df:ea:3d:51:87:36:
         87:64:a7:09:ce:79:5d:0c:e0:95:37:39:4b:2e:85:9f:53:6b:
         06:1a:19:e0:70:10:ce:ed:a2:29:3a:f4:8c:9a:6d:73:ad:f2:
         da:ee:f9:9b:df:f5:13:8e:8d:43:46:c6:d0:d8:fc:d7:8b:b6:
         56:96:a0:df:fd:99:b6:fd:8a:6b:f4:17:ee:f2:b3:40:07:74:
         a5:c1:1d:c7:8c:2b:7a:98:eb:71:ed:50:4b:19:ee:14:c0:b8:
         75:71:b7:a8:6b:a4:f5:73:76:14:5f:28:9b:ba:09:72:59:82:
         26:d1:5a:7c:2e:29:f0:39:bb:98:95:99:95:2e:69:e9:60:b3:
         50:01:e5:7e:35:23:0e:c3:4e:cb:b2:db:83:a2:d4:cb:5f:87:
         b6:9d:f6:2a:39:9b:9c:47:1b:6b:83:9d:9a:52:ee:4a:5d:61:
         c8:16:3d:01:d9:2e:e7:81:44:c8:32:f0:24:61:6d:c5:73:c2:
         bf:a3:e1:15:f1:da:39:ae:e5:d7:b2:3e:7f:22:0a:5d:b6:60:
         dc:7e:d9:f5:23:a0:1f:35:27:97:3c:1c:ae:62:3a:f2:08:7c:
         48:b9:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:20 2025 by rpki-client