Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d734a3e7-c64d-3cc7-b8ae-6e65e72e70b5.roa
File:                     d734a3e7-c64d-3cc7-b8ae-6e65e72e70b5.roa (raw, json)
Hash identifier:          uBf2vcAiZx+318hZfz4Cafz4tWgQAxwNGK1KIocRVps=
Subject key identifier:   7A:CA:F0:20:94:4F:56:9E:AF:91:03:E5:28:30:6F:B6:5D:E7:BD:89
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D734BC786DEB4AE2B45C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d734a3e7-c64d-3cc7-b8ae-6e65e72e70b5.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     3257
IP address blocks:        142.111.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:34:bc:78:6d:eb:4a:e2:b4:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=6da51bb3-13d4-4e4f-b576-52929611700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:6c:fe:ae:cc:9a:9a:f0:52:b9:28:66:a3:
                    e5:d7:cd:47:e5:b9:aa:83:8d:de:b7:09:62:0b:ad:
                    1d:21:58:7c:57:56:0b:24:3d:f9:1f:c7:be:0e:a4:
                    73:bb:42:92:a7:ae:57:e6:6d:42:51:33:d7:6d:88:
                    12:5c:71:37:ff:e2:8e:17:75:ed:76:91:47:fb:22:
                    a6:a6:3d:ba:67:7d:8f:e7:ba:49:7e:1c:f1:e8:50:
                    26:ae:2c:08:63:55:09:da:56:d4:18:41:75:ed:00:
                    77:80:fc:d7:99:40:fe:71:0c:ae:1e:0a:96:85:48:
                    a4:b9:34:69:45:89:6c:25:96:f7:ac:cc:a4:cd:19:
                    cd:cd:d8:3f:83:e3:13:dc:64:4b:e0:eb:f5:1c:3b:
                    a2:4e:9d:4b:76:db:de:31:e8:66:a4:28:34:cd:c4:
                    65:aa:f3:cf:bd:e6:77:8d:2d:02:c9:e1:53:b4:94:
                    2c:2c:5d:65:81:91:54:2e:66:84:46:e3:ea:f7:39:
                    02:1d:d0:9b:6d:4a:ea:7b:a9:6b:b6:46:a1:75:03:
                    ff:38:97:9a:72:1c:7d:ce:b4:24:9f:b9:38:0b:94:
                    19:0d:04:96:95:e9:43:51:30:59:61:f3:27:7c:6b:
                    f5:3d:44:ad:44:49:ae:33:34:86:df:1c:c3:82:5b:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:F0:20:94:4F:56:9E:AF:91:03:E5:28:30:6F:B6:5D:E7:BD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d734a3e7-c64d-3cc7-b8ae-6e65e72e70b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:2c:98:f2:64:3b:9b:a9:bd:21:e0:91:45:9f:cd:37:51:
         f7:cb:33:25:54:34:91:c2:38:6e:d9:1a:18:ff:ce:81:db:5e:
         94:f4:ce:9b:8c:b4:4c:a9:6a:c5:7d:c1:fc:8e:9c:ec:a7:f1:
         5f:f8:07:58:c4:dd:ba:65:e5:a2:2b:bc:f6:7a:97:eb:16:f3:
         ce:5f:39:ed:4a:1d:68:ea:90:f2:30:0b:c4:51:f4:ed:94:34:
         f8:16:79:2d:19:18:1d:a9:e9:ea:cb:d9:af:37:21:16:4e:11:
         2b:4d:fe:b2:c8:e7:1c:b4:9a:93:dc:6c:a4:4d:b3:a7:2a:f3:
         87:8d:4c:d2:ec:16:ea:ad:45:6d:ad:91:d3:b9:23:7b:59:ab:
         fd:ee:1a:67:0b:75:7a:30:90:fd:c8:48:77:63:24:9c:d1:f1:
         91:3d:ca:a9:72:e4:2f:d0:e1:f2:87:bf:68:39:40:a5:bc:34:
         00:8f:50:45:be:b5:80:5d:98:f6:83:c4:64:c4:bd:9c:c8:6e:
         8b:e4:1b:f7:18:fd:83:f0:95:58:03:1b:2f:74:92:47:74:de:
         f5:43:45:52:b5:0d:39:48:2b:a8:c5:b4:25:ad:30:0e:07:56:
         62:02:81:a4:9d:01:a3:25:b7:83:e1:95:21:f5:7d:d6:a5:8e:
         0f:cf:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:57 2025 by rpki-client