Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d84b31f1-e6dd-32a7-b612-05b72a6d164e.roa
File:                     d84b31f1-e6dd-32a7-b612-05b72a6d164e.roa (raw, json)
Hash identifier:          YBKd1jBL5+tsVebGjPCcFyB/E+Ivxgj9NM6dhpb6z70=
Subject key identifier:   28:C6:A8:EA:29:FC:2E:82:76:5E:C7:20:BE:87:7D:F5:5E:2F:C2:DB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772E5FD8E2CDDA2FBA8380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d84b31f1-e6dd-32a7-b612-05b72a6d164e.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        142.111.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2e:5f:d8:e2:cd:da:2f:ba:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=e1c4602a-a301-4695-96f2-f6e938723aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:08:8d:50:dd:62:d8:a5:b8:9f:47:51:ef:
                    74:af:51:a2:35:4c:8a:a1:24:39:72:41:08:1d:42:
                    62:28:e6:a0:97:bd:74:94:96:d4:2f:4f:44:7f:5a:
                    db:d6:a7:23:8f:2c:a8:ee:8a:62:bc:e1:2f:a7:11:
                    50:ed:f5:1b:d6:59:01:87:53:4d:54:66:cc:e6:b9:
                    b1:ba:50:bc:58:c1:76:9e:37:8d:54:15:cb:27:62:
                    f0:2d:f2:65:fb:1f:01:d3:3c:70:dc:03:9b:f0:45:
                    38:41:44:5d:1d:6e:39:00:8e:8f:65:91:fe:1d:ad:
                    cc:7e:d7:6b:32:f1:ff:6a:8a:a7:1c:5b:2b:89:a3:
                    79:4e:6f:ef:aa:bb:46:84:cc:6d:ae:ba:24:6a:fe:
                    95:f4:38:90:5a:d4:05:c6:aa:a8:aa:32:27:b9:34:
                    09:1d:b1:a3:09:f7:3e:07:6f:6f:f5:b1:e4:1a:a6:
                    5c:c2:be:e0:f4:6b:4e:41:c4:61:d7:f5:d4:5c:c3:
                    69:99:c7:37:fb:9d:1d:ea:7b:f8:80:c5:6b:72:41:
                    57:9f:d3:bc:10:fa:68:6a:6d:18:a5:d9:6d:29:57:
                    04:39:b6:fa:32:91:9a:1a:3b:79:ae:dd:7c:39:20:
                    13:d7:db:aa:8e:99:6f:83:8b:b4:c9:5b:09:d0:56:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C6:A8:EA:29:FC:2E:82:76:5E:C7:20:BE:87:7D:F5:5E:2F:C2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d84b31f1-e6dd-32a7-b612-05b72a6d164e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:32:fc:f6:9b:2e:ea:5d:39:3e:e8:7d:17:ac:74:f1:45:66:
         44:4e:b8:0a:41:7b:01:ae:db:1b:84:c6:f6:6c:17:83:7e:99:
         39:05:81:09:f9:80:53:7f:11:c3:16:6b:a5:e2:72:5d:67:39:
         26:00:0d:1e:b2:a0:84:91:d4:da:b5:17:97:4b:99:8a:af:bf:
         e6:fe:16:9e:9c:d2:e8:4a:c4:86:ac:8b:6d:3e:72:7e:a1:8f:
         e1:69:6f:ff:6f:cf:12:03:1a:ae:a3:21:e0:1e:01:92:f1:dd:
         a8:89:e6:ad:2d:71:69:56:a3:26:38:ce:8d:f7:28:d5:a4:72:
         55:3c:9d:9c:1f:7c:10:bd:a0:ac:38:79:ec:8c:2b:3b:62:d7:
         82:04:b0:fd:a7:f0:ae:de:0b:30:56:4d:5e:c4:c7:cc:4b:30:
         eb:94:f6:cb:1c:78:67:f1:3b:97:95:64:83:aa:9a:04:9d:36:
         4a:9e:4a:53:d4:69:43:10:2d:24:0c:a0:f8:35:c9:d3:5b:f0:
         31:85:39:19:6f:c6:44:f2:23:8f:f8:5a:5a:2e:85:7b:6e:ae:
         79:9d:fd:a2:07:e1:0a:40:6b:ba:07:fb:86:c8:5f:8e:09:1e:
         6f:59:17:de:bd:21:61:9d:aa:c4:f1:f7:64:1a:85:99:2d:f9:
         d8:da:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:23 2025 by rpki-client