Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac60b7d7-288c-3872-a165-adeddbe98b3f.roa
File:                     ac60b7d7-288c-3872-a165-adeddbe98b3f.roa (raw, json)
Hash identifier:          WjsnHIC9GG+49NhQpQ2fJPRhiyl5h3GK30yg+4SpkQ0=
Subject key identifier:   03:C6:0E:BB:1F:B0:37:B1:5A:B2:62:B1:98:91:AB:BA:26:F3:7B:99
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B328C61315A46BB31AD646280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac60b7d7-288c-3872-a165-adeddbe98b3f.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        142.111.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:61:31:5a:46:bb:31:ad:64:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=3104f70c-7267-4a68-93ec-e64cb0f6c420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:7f:cb:e5:8e:14:9d:a2:cf:59:b3:f9:dd:
                    c9:55:75:b0:3a:9b:c8:8c:7c:91:2b:6e:96:f9:75:
                    27:a2:14:77:4f:74:9b:6a:3a:a6:73:00:0d:46:4c:
                    9b:6b:cf:73:9a:6b:a1:e3:bb:1f:7b:ac:8a:59:59:
                    d2:0d:7a:7e:50:2f:0d:c6:77:a9:3e:86:8a:36:2b:
                    7b:68:fb:2b:78:2d:68:71:96:9d:b7:1a:6a:38:30:
                    04:20:e3:ad:16:ec:ea:81:cb:a6:e2:68:5f:d4:41:
                    db:a0:a7:8f:d7:88:75:53:e5:93:7c:eb:3e:a0:f5:
                    61:ee:e1:30:c6:b2:76:58:88:43:22:f3:e0:7c:8d:
                    34:27:25:bc:9b:8a:8f:49:99:2c:ac:f4:69:ca:2e:
                    ab:18:2a:c6:1e:4d:22:9d:eb:18:ac:da:d9:17:82:
                    0f:c8:47:68:34:ba:d4:fc:4a:38:b8:de:a1:60:97:
                    6f:82:15:69:3f:ec:1a:84:fe:11:5c:ab:94:a2:8c:
                    fa:a7:bd:c8:29:73:bd:c0:61:42:d3:84:e8:49:17:
                    83:b4:5f:38:17:2c:89:13:34:4f:00:46:e5:d6:16:
                    af:81:5d:ab:79:e4:88:ad:95:88:b9:41:eb:67:b2:
                    58:87:8c:37:e4:ae:d3:e8:1a:4c:92:b4:ce:c6:a1:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C6:0E:BB:1F:B0:37:B1:5A:B2:62:B1:98:91:AB:BA:26:F3:7B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ac60b7d7-288c-3872-a165-adeddbe98b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:dc:8d:f5:fe:dc:04:09:6e:89:3f:a9:1a:fc:56:7c:35:94:
         bf:01:56:fc:ba:5e:6d:93:3a:32:c9:b8:30:55:fb:90:73:c8:
         a1:b3:f2:72:51:c2:13:47:74:c9:57:69:6c:da:c3:b9:dd:95:
         b8:4d:cc:71:04:a9:86:84:d4:6f:db:8c:a2:3e:77:c8:98:f2:
         19:8d:d4:b7:f0:49:3c:97:92:69:2a:4f:47:33:da:d7:73:2b:
         01:7c:fc:e4:49:f2:4f:27:56:3b:b3:0d:55:23:d9:1e:cd:e2:
         b4:b2:a9:e4:56:f5:7d:87:d7:72:18:66:78:37:e0:85:27:e4:
         c3:e9:fc:06:80:93:bd:cf:07:66:4c:64:5f:be:ad:69:e7:e0:
         cf:9e:fd:52:f2:7c:c9:c2:fb:1a:03:dd:03:c2:7d:51:a4:25:
         e4:70:af:77:c4:7a:54:14:1d:98:b3:07:84:8f:13:68:4d:ec:
         7c:7c:74:61:22:c4:0c:28:23:f8:08:fb:90:3d:15:d6:bc:cf:
         1b:ed:e6:2d:36:84:7f:0b:19:18:8b:f0:66:2c:8f:e4:00:6b:
         7b:a7:16:4a:8b:d4:13:07:6a:00:53:e6:1a:2a:45:6a:5f:a2:
         21:2c:95:0f:84:f6:52:82:86:03:3c:69:0c:e5:11:ae:af:4a:
         8c:8f:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:21 2025 by rpki-client